Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/337a7c1f-eac9-4aba-97f5-4b3149795a2b.roa
File:                     337a7c1f-eac9-4aba-97f5-4b3149795a2b.roa (raw, json)
Hash identifier:          Pl43conFHmCdIrlrwPyxBt7+Yg/WYgI+beeKo7/Rdd8=
Subject key identifier:   97:FD:0E:5F:9C:C8:CA:B0:7B:02:8A:16:07:32:99:81:00:1B:EC:D5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       68E93B5D25A6383D90E087CD72C0195341764F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/337a7c1f-eac9-4aba-97f5-4b3149795a2b.roa
Signing time:             Thu 12 Feb 2026 00:52:04 +0000
ROA not before:           Thu 12 Feb 2026 00:52:04 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:20b0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e9:3b:5d:25:a6:38:3d:90:e0:87:cd:72:c0:19:53:41:76:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:52:04 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=5dedf166f7aa76b4423c7f98667f9962108e41940d18013e7c2c43b4f5345a8c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:4e:c6:3e:5d:55:d0:28:9b:d3:f0:91:17:
                    88:a5:e9:96:15:e0:5b:90:ec:d0:5b:3e:d7:44:3b:
                    ab:2f:89:f6:ad:75:cf:56:d1:3c:b2:7e:52:b6:0c:
                    3e:17:57:9a:da:bf:dc:f6:90:01:b8:78:6c:63:5c:
                    75:21:21:9e:4b:ac:9f:a3:e4:c2:4b:58:48:a6:12:
                    1f:fb:83:d8:61:bb:04:70:44:fb:fb:44:0a:32:d1:
                    88:53:75:53:f0:a3:59:9d:ab:79:94:2b:89:81:01:
                    e3:b5:2d:68:93:30:a7:57:e5:dd:e5:af:c2:e8:7c:
                    52:86:9d:6f:9d:38:87:c5:13:8c:eb:8f:d8:5c:a5:
                    49:3a:ca:73:a8:17:cf:d4:e9:dc:2c:cc:e8:15:56:
                    95:36:6b:d3:26:74:f4:95:61:70:9a:03:0c:13:28:
                    db:2a:b8:f3:81:19:33:39:ee:af:0a:89:3a:d3:c8:
                    5f:15:36:71:3b:8e:ed:37:51:4e:c4:df:e1:83:d7:
                    ca:a2:2e:80:e8:3c:25:d8:fa:b5:22:88:8c:60:9a:
                    d5:50:c3:26:6d:47:64:14:d3:f1:b9:77:7e:5c:52:
                    ae:50:a5:e1:14:65:fa:29:1a:d6:b0:91:c7:2b:ec:
                    dc:ef:8b:4b:8c:2b:9e:62:bf:45:84:d7:d1:6b:6a:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FD:0E:5F:9C:C8:CA:B0:7B:02:8A:16:07:32:99:81:00:1B:EC:D5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/337a7c1f-eac9-4aba-97f5-4b3149795a2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:20b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:d2:2a:1e:ac:7b:24:a6:f6:40:18:d2:5f:43:a6:39:c7:a7:
         ac:6b:33:d7:39:43:2e:aa:68:d7:34:21:64:41:80:b9:16:9b:
         fc:51:e3:08:d2:ec:bf:2f:c2:3b:9a:fe:13:38:79:89:35:d7:
         1a:f5:e4:1d:8c:a9:b9:70:83:f0:c7:ea:b7:05:86:8b:c8:5c:
         c3:06:2a:ff:42:68:aa:55:0a:d2:b1:7e:d0:c4:54:b6:c8:b7:
         60:d3:6a:f0:58:a7:3a:25:ed:ac:3e:8c:46:21:38:f6:a2:3b:
         cc:54:27:b7:a5:26:d9:fd:7f:ae:c2:73:a3:1b:03:a1:5e:34:
         0a:83:1a:c1:64:52:1f:2a:a1:1f:53:b4:9a:91:81:75:12:8d:
         29:68:f3:62:34:22:cd:95:b6:22:2d:c0:3a:69:cf:83:2a:cc:
         8a:7e:88:e0:8b:7e:10:38:60:94:93:6f:a7:13:08:88:49:33:
         5c:18:48:8a:21:1b:83:9c:af:aa:5c:66:ed:d7:1c:80:5d:4c:
         a7:64:a0:ad:c9:b9:30:9b:ba:1f:dc:d4:72:66:e8:b6:16:d3:
         d2:e5:3b:72:48:9c:8d:c7:b7:c5:ea:98:95:6a:f0:8d:0e:c1:
         ee:0e:c2:6e:7c:e5:ec:96:05:93:9e:7c:e9:dd:cd:62:fe:28:
         0e:1f:fb:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:58:03 2026 by rpki-client