Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32b49f8e-6780-4838-b962-c427733faf70.roa
File:                     32b49f8e-6780-4838-b962-c427733faf70.roa (raw, json)
Hash identifier:          EtbkEd1LaV0aCMDB+G+xukU38XxqwHeFAnArP4YqkCs=
Subject key identifier:   5B:9A:1A:02:E8:1D:F9:2C:31:F0:08:15:A0:41:26:C4:2C:8E:C2:71
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2C75C99012950EEF87BB5E05C9D7D4FC2EA04D8A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32b49f8e-6780-4838-b962-c427733faf70.roa
Signing time:             Fri 13 Feb 2026 03:41:18 +0000
ROA not before:           Fri 13 Feb 2026 03:41:18 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3df8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:75:c9:90:12:95:0e:ef:87:bb:5e:05:c9:d7:d4:fc:2e:a0:4d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:41:18 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=a714560ff2b57a8e832283e2f1b912db63d2460cfb80685c8dff1b97e25f2cc2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:45:89:a1:34:90:96:67:6d:90:bc:07:f0:a2:
                    c5:59:15:20:e5:a2:14:f0:d0:ea:6c:81:34:25:53:
                    89:d4:04:8b:d9:1c:4f:ac:29:61:9e:ac:62:a6:84:
                    bf:89:eb:98:e0:98:01:9f:00:3b:1a:8c:3d:f1:75:
                    2a:42:0b:b5:66:c8:96:05:e2:13:d5:e5:f7:d4:4f:
                    85:fe:4d:10:99:f4:6f:3d:e1:e9:ec:1f:d1:f0:f6:
                    a4:e6:26:f2:24:5b:4d:50:dc:53:82:8f:99:7f:7b:
                    0f:d2:c5:1f:d1:02:42:41:cd:41:08:24:6a:c4:f2:
                    15:c7:bd:64:7c:0e:6f:da:df:38:9f:73:eb:9f:5c:
                    db:bb:f1:1d:c4:a3:91:44:0b:16:95:07:c9:c2:7c:
                    09:81:ef:9b:53:59:d4:98:20:f2:b6:92:69:6b:46:
                    39:ef:88:a4:f2:06:35:be:1b:61:d0:6c:d2:89:b8:
                    96:67:ef:da:61:cf:62:c3:38:b5:5e:f2:e5:82:7a:
                    11:b4:ce:30:c6:91:88:12:7d:81:9a:28:9a:93:80:
                    bc:13:3b:df:ea:2c:8a:95:91:d5:01:f0:c9:e0:ab:
                    55:c7:da:df:7c:1b:66:90:76:f9:86:66:6e:15:f4:
                    fc:93:39:c0:7c:ea:51:86:c3:3d:bf:50:cb:30:65:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:1A:02:E8:1D:F9:2C:31:F0:08:15:A0:41:26:C4:2C:8E:C2:71
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/32b49f8e-6780-4838-b962-c427733faf70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3df8::/46

    Signature Algorithm: sha256WithRSAEncryption
         71:81:74:1a:a8:8b:77:14:4e:c3:16:7f:6c:7b:0e:13:93:f1:
         16:fa:07:3e:4a:93:ce:c9:07:5b:18:29:83:85:63:65:c2:25:
         70:37:6f:a4:e6:b6:c0:f4:3f:1f:0d:13:9f:d9:53:55:b0:49:
         a9:34:38:f2:66:4d:6b:3b:8a:58:63:9a:b7:2a:5f:9d:a0:b9:
         57:83:af:20:3d:ed:a6:63:ee:5a:52:13:76:a8:05:9c:c7:49:
         4c:81:76:47:ef:47:6c:10:59:a3:03:0e:0a:5f:af:82:74:a6:
         79:7d:84:0c:e5:cf:90:a2:5d:71:87:3a:02:82:96:0b:8f:3b:
         2d:48:60:c2:bd:d8:b9:99:cb:51:a1:69:dc:16:88:d4:97:ba:
         4f:dd:31:1e:a6:cf:e1:9d:29:a8:e1:17:79:b0:75:42:29:ce:
         01:4d:b4:8d:72:db:78:1a:f0:f6:b6:6a:37:a2:93:6e:a5:34:
         93:2c:c0:c9:8a:30:35:b3:fd:97:3b:cb:3f:da:b7:62:b6:ef:
         63:a2:17:b5:75:0c:60:71:c7:91:90:ae:bb:db:5d:4e:57:60:
         57:69:f1:0a:15:de:b9:60:fe:ed:74:54:e9:53:e1:2d:24:c8:
         28:3d:d6:54:c3:c4:ee:f6:f0:c8:ca:51:ed:9a:8e:aa:e6:ff:
         02:fb:ad:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:04 2026 by rpki-client