Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/26f069cd-81d4-4788-bfcf-eaa5a410c9ce.roa
File:                     26f069cd-81d4-4788-bfcf-eaa5a410c9ce.roa (raw, json)
Hash identifier:          7aUiFOCSbQBghsp4+zs0fvfPcAkfny/6DJZ+JGcNZxQ=
Subject key identifier:   81:AF:B3:17:69:81:DA:8B:40:59:1D:EB:B4:84:B4:DA:4C:18:18:68
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       105E80C9C6E13341C1751AA98131882442D83370
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/26f069cd-81d4-4788-bfcf-eaa5a410c9ce.roa
Signing time:             Thu 12 Feb 2026 00:41:43 +0000
ROA not before:           Thu 12 Feb 2026 00:41:43 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3262::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5e:80:c9:c6:e1:33:41:c1:75:1a:a9:81:31:88:24:42:d8:33:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:41:43 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=70af2d3f7a8803eb86712a70cc687cd1bac139976e02300264077494e4f62a10, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:8e:53:93:d6:29:44:87:4d:46:eb:a3:d0:
                    78:34:7f:ab:e2:6a:d9:68:40:f9:29:60:89:92:3b:
                    19:76:83:d2:58:ef:9d:76:3d:2d:2f:c3:a4:7d:78:
                    17:d3:b2:98:39:32:e3:f5:4f:39:7a:11:74:f0:73:
                    61:10:4f:ad:3e:e7:a7:ea:b2:c7:31:93:91:a4:5f:
                    ee:09:ec:ff:b8:58:5e:47:41:4a:4d:fd:1c:28:86:
                    6e:0d:46:8a:60:78:9a:12:0e:cd:b2:5e:c0:36:de:
                    18:d5:e4:75:39:0f:27:72:b8:f9:84:36:4e:6b:dd:
                    4f:ad:b0:84:df:26:07:d9:be:f1:0c:1c:20:ec:ad:
                    99:7d:29:3c:59:40:21:72:a4:de:a0:23:79:c3:aa:
                    dd:d0:7e:0f:75:26:6d:86:06:89:1a:45:59:31:bc:
                    0c:d7:6e:c0:a5:e5:de:c6:08:6b:20:c8:5d:1f:d0:
                    2e:e1:e0:15:2a:c1:99:4b:77:88:62:5b:b8:fc:21:
                    cd:48:31:93:b4:99:59:11:2e:b0:34:6c:0b:99:1f:
                    66:96:7a:55:d1:7c:68:4c:ab:25:08:6f:ae:12:87:
                    68:30:a4:61:b5:8b:23:8e:16:5a:5f:ec:89:64:62:
                    92:28:51:4f:69:5c:53:5b:e1:3f:38:a3:2c:fe:c3:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AF:B3:17:69:81:DA:8B:40:59:1D:EB:B4:84:B4:DA:4C:18:18:68
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/26f069cd-81d4-4788-bfcf-eaa5a410c9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3262::/47

    Signature Algorithm: sha256WithRSAEncryption
         82:cc:75:03:e9:9f:13:95:0b:64:9a:8a:c2:14:60:13:09:6d:
         46:90:16:28:15:e9:f6:bc:83:b2:bb:87:72:f5:32:25:74:42:
         fb:51:46:2a:72:ab:5f:f0:36:9c:ce:ad:c3:db:64:92:56:7c:
         5f:49:16:8a:6c:84:7c:c3:14:3a:76:59:6b:de:85:8e:ff:26:
         58:31:c5:f7:7d:ff:9a:11:da:fa:b8:2c:c2:d2:da:30:4d:d4:
         d5:56:4d:78:01:56:e8:26:22:62:93:e3:f6:ad:31:fd:8f:ea:
         3e:96:f8:2f:80:91:47:e0:bb:b5:61:8a:2a:4a:5a:59:8c:b5:
         9e:57:34:f1:55:08:b0:66:c5:94:f6:3a:0b:cd:cd:51:d7:a0:
         d3:ca:69:b1:dc:5d:b2:0c:38:6e:cb:26:f5:14:e3:5e:48:79:
         18:d9:a1:6e:e4:cd:73:d2:32:99:61:f9:7a:e2:59:66:09:8a:
         e2:b6:26:a0:6d:a1:1f:55:46:f5:42:d5:6a:51:c2:27:ba:80:
         1d:f7:89:eb:e7:83:37:c9:55:d6:97:db:85:50:2c:06:31:d8:
         05:49:51:fc:ae:44:8b:0c:bb:92:81:93:a4:1c:7d:4f:52:bd:
         a8:6f:66:f7:71:39:c3:58:da:6b:c9:9d:65:21:71:46:dd:cd:
         9b:c8:82:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:49 2026 by rpki-client