Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/316fa539-c2f1-4d21-93eb-fd82358e5e9e.roa
File:                     316fa539-c2f1-4d21-93eb-fd82358e5e9e.roa (raw, json)
Hash identifier:          Ob3FXy2DQSbbf8OC0zNF96uL1BJrABo46VTIUDnB9OE=
Subject key identifier:   75:30:02:AD:F4:AA:00:B2:C1:65:33:EF:76:1B:6F:60:17:25:26:F8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       035097F80B9F04477FB90431D33049B29464A9F6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/316fa539-c2f1-4d21-93eb-fd82358e5e9e.roa
Signing time:             Fri 13 Feb 2026 03:41:51 +0000
ROA not before:           Fri 13 Feb 2026 03:41:51 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:33ac::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:50:97:f8:0b:9f:04:47:7f:b9:04:31:d3:30:49:b2:94:64:a9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:41:51 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=a7137d3b601f1373f5bfdd072375ba9e8ec3b094027a3206a0f6dbe8e5b87e42, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:85:f3:92:31:49:30:45:7a:8a:17:ed:f7:39:
                    f3:81:e4:ee:0c:78:42:63:e8:2e:fb:cc:ba:56:3f:
                    70:32:c5:70:3c:47:c4:2b:b9:2b:ff:b2:77:ea:73:
                    24:e5:66:31:00:75:48:84:ea:3e:2d:ce:b9:73:70:
                    22:94:28:6a:c6:cc:97:79:08:2b:ff:a0:7c:c5:89:
                    fb:bd:3d:57:d9:ba:ca:a9:62:14:f2:61:c7:8e:80:
                    7d:d4:0e:a1:61:f2:77:fd:fb:27:42:a7:c4:14:10:
                    bb:6b:47:b1:99:59:fe:7f:78:01:9d:49:e3:9a:b9:
                    bb:bd:e7:c3:54:3a:a7:69:2b:bc:bb:a1:99:f4:fe:
                    28:c5:01:eb:12:9f:21:92:9b:1d:2c:c6:21:1a:34:
                    af:01:64:28:24:92:32:9d:6d:55:bd:e2:ea:ca:6d:
                    90:1e:ae:64:67:ee:f4:d1:af:95:22:be:92:23:97:
                    b3:33:73:42:b0:43:f4:d4:57:31:66:4d:cd:cb:6d:
                    cb:72:27:72:fa:4f:5d:3a:e2:18:f7:0c:46:99:85:
                    fc:cc:34:47:00:4e:a6:74:a2:23:d4:0b:f2:ed:62:
                    ac:c6:4a:22:87:b0:65:24:b1:93:66:bc:37:0e:2f:
                    c7:54:9c:db:cc:fb:07:5b:86:cd:13:fe:a0:93:54:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:30:02:AD:F4:AA:00:B2:C1:65:33:EF:76:1B:6F:60:17:25:26:F8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/316fa539-c2f1-4d21-93eb-fd82358e5e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:33ac::/46

    Signature Algorithm: sha256WithRSAEncryption
         18:63:f1:32:58:54:14:1c:63:63:ce:24:94:1d:f9:2a:20:fc:
         5d:a9:8d:a3:a2:95:e1:c0:95:bc:46:c3:41:a1:18:00:90:36:
         12:16:00:cb:4a:c9:2c:65:42:0f:4a:76:25:34:d1:d0:ea:b2:
         9a:82:7d:72:e2:c6:aa:6c:3f:05:86:c8:67:d4:2f:f3:78:0a:
         6d:c1:9f:54:9f:c5:4e:be:fc:7b:85:fb:d4:61:98:1c:b9:2a:
         b8:a6:2a:36:d0:9b:34:aa:58:ed:a6:04:03:a3:e7:dc:57:4a:
         59:be:0c:c1:31:16:9f:81:b1:5e:76:61:59:18:fb:6c:c3:61:
         94:0c:8e:4d:29:c4:7c:df:07:bd:86:d6:24:b1:ee:58:d4:4e:
         fb:1f:cb:57:46:6b:e7:26:ed:ae:6b:95:7b:5d:93:f6:8f:d4:
         d5:ba:60:96:f3:e4:b6:6a:1e:0b:a1:91:11:4e:a7:5f:be:cf:
         53:2e:ae:7f:47:9d:55:09:6f:b3:58:00:f5:1b:b5:24:43:68:
         25:25:9f:b5:c0:ce:f5:60:e8:b2:62:34:3e:26:43:a3:ad:ae:
         44:94:82:1a:5a:de:8a:e3:8c:c6:70:68:db:24:8a:e8:14:35:
         c3:7b:af:9f:0f:75:32:97:86:88:25:72:14:ae:25:53:f8:aa:
         c7:8a:49:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:13:36 2026 by rpki-client