Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23db8a58-65f2-4db6-8bdf-73404bcc1f02.roa
File:                     23db8a58-65f2-4db6-8bdf-73404bcc1f02.roa (raw, json)
Hash identifier:          Wm7KxR1TPU3MrjTN5vgWMEOQ7DJxW1cLaI0DNo1D8ko=
Subject key identifier:   07:35:2C:9E:3A:D5:DF:7D:2C:DD:1E:7E:69:CF:9F:32:62:36:5A:59
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2FDFDFC10917E0DA894BFB3D2474B191BB9AB4C0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23db8a58-65f2-4db6-8bdf-73404bcc1f02.roa
Signing time:             Fri 13 Feb 2026 03:02:05 +0000
ROA not before:           Fri 13 Feb 2026 03:02:05 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3de0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:df:df:c1:09:17:e0:da:89:4b:fb:3d:24:74:b1:91:bb:9a:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:02:05 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=e72d431520166980b227f4e1ffa2f536dac574ab4b14f6517fe939d89d503e1e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d4:4f:9f:c8:85:1c:70:f9:91:e2:71:d9:e1:
                    7e:15:f2:5e:4c:b9:e1:e3:2d:a8:1c:ab:30:18:c0:
                    40:33:ab:06:71:45:e2:7d:25:90:d4:78:ff:f8:3a:
                    f6:dd:f4:13:5b:9a:a0:ed:74:33:e4:87:b1:7b:2d:
                    2b:8f:d0:1c:40:4d:44:ee:8c:8a:09:fb:1e:2e:39:
                    2e:e9:1d:41:a8:a9:d1:47:d4:d1:16:e8:e1:85:44:
                    f6:74:74:10:df:a6:aa:28:7e:af:98:3e:56:ac:72:
                    ef:19:f8:f6:72:86:51:70:39:91:f5:30:f7:3d:3c:
                    46:fd:a0:c6:82:30:1c:33:b8:5b:81:cf:b2:3e:dc:
                    09:31:f5:4a:b9:09:90:ea:e1:f2:84:38:4c:62:96:
                    8f:6a:56:2c:70:d3:0b:52:13:24:f2:19:db:f4:72:
                    2c:a6:de:e0:18:37:70:79:29:0a:96:e4:f4:e7:34:
                    ee:51:99:cb:37:83:fa:b8:f7:f4:6a:46:64:f9:1d:
                    d7:9a:82:b0:d1:47:c1:27:82:90:77:fd:c8:2c:1c:
                    e9:fb:2d:60:2b:2b:67:be:9b:da:0e:38:97:f6:c0:
                    ab:4f:c4:1f:ea:c3:e6:b0:8c:61:8e:90:f9:75:c7:
                    80:e1:24:6e:64:b7:42:ba:05:36:02:5a:f1:ad:62:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:35:2C:9E:3A:D5:DF:7D:2C:DD:1E:7E:69:CF:9F:32:62:36:5A:59
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23db8a58-65f2-4db6-8bdf-73404bcc1f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3de0::/43

    Signature Algorithm: sha256WithRSAEncryption
         6d:8d:ab:f4:be:fa:ea:62:a9:e7:5a:1e:00:42:0c:9b:1b:3b:
         c6:80:59:59:38:b3:15:26:17:dc:f5:6d:9f:fe:3f:d1:ad:65:
         a5:57:d0:e1:91:e4:0f:30:ad:f6:cd:9c:24:ab:af:25:c0:a5:
         2e:ae:a1:b7:7a:e4:c2:d6:70:61:37:93:c0:0e:1c:3f:5c:c8:
         a1:41:87:6f:f8:79:66:59:14:04:94:c6:a1:9b:c8:8f:ec:59:
         94:28:d4:20:be:1f:d5:62:53:67:d1:7c:4c:68:89:b4:ff:b1:
         56:19:1b:d7:b2:a0:a8:29:0c:78:80:7b:66:b5:fb:ec:29:5f:
         ec:20:1f:d7:ad:54:c0:e7:d8:92:14:47:fd:78:eb:1f:e7:22:
         0f:34:bf:db:03:9f:fd:d2:ed:f7:be:81:6d:f6:40:55:ab:13:
         1c:ea:ce:c9:fe:18:83:78:89:f8:f5:1d:bf:10:7a:ba:e5:1c:
         6f:63:c4:31:81:93:22:7d:ee:2f:fc:64:b1:4d:b0:34:6a:83:
         3b:9d:c6:ff:af:4c:52:8d:bb:10:c0:fb:40:63:ea:99:68:9d:
         94:8c:dd:ca:32:1e:63:09:c9:6b:65:05:ad:ee:53:32:1a:37:
         90:83:ae:cd:81:5e:28:2c:44:aa:91:1d:e7:f8:c4:bb:19:45:
         2a:77:fd:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:49 2026 by rpki-client