Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33bb8c42-d58c-41ec-ba61-43ab25802400.roa
File:                     33bb8c42-d58c-41ec-ba61-43ab25802400.roa (raw, json)
Hash identifier:          kF3yPxu6o7TOenAp2jtCQrl1aILBmNLGsN2yJ2wB5AI=
Subject key identifier:   E1:73:71:EA:C4:65:21:31:2E:20:AC:E8:90:99:CA:5E:DB:A3:74:BF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0AF2F9880AEA3D2F2836595B3BE33A8E249C0CAA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33bb8c42-d58c-41ec-ba61-43ab25802400.roa
Signing time:             Fri 13 Feb 2026 01:50:54 +0000
ROA not before:           Fri 13 Feb 2026 01:50:54 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:31f4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f2:f9:88:0a:ea:3d:2f:28:36:59:5b:3b:e3:3a:8e:24:9c:0c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 01:50:54 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=a35a8eb91a5817fd1becfa6b59b319b1c428d6524483203628f5fd565b7c7c43, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:00:a1:e1:92:1c:72:36:fc:6c:c1:ed:46:
                    0f:da:1d:92:e4:bc:ba:c0:cb:93:bd:7f:2e:e8:cd:
                    33:4a:88:0f:d9:85:09:1c:29:d3:66:21:4c:8b:9a:
                    eb:68:6a:02:13:b1:39:ac:60:74:05:09:4f:3e:98:
                    af:e1:1f:34:3f:66:5f:24:42:4c:8b:f5:1f:33:6d:
                    5e:e4:32:6f:88:d9:39:66:63:ab:82:1b:f8:53:87:
                    77:bd:d8:f7:50:42:43:5b:13:ac:3d:75:73:7a:98:
                    ff:aa:da:a6:39:0d:0d:70:1d:c6:51:a9:a4:ba:c9:
                    de:44:51:9a:7f:22:0c:3f:b0:63:1e:bd:cb:a6:90:
                    14:df:83:6f:8e:a0:84:df:ae:31:8e:d7:60:95:ff:
                    9b:a5:a9:d5:8f:2a:49:36:0c:e0:b2:89:85:5e:fa:
                    0a:b4:f4:ca:6d:8f:f3:1a:c0:86:43:12:92:60:4f:
                    bb:d7:6f:40:3d:77:e0:e6:f2:3f:d3:53:a5:dc:72:
                    99:53:ae:2e:27:27:02:b9:d1:f0:bb:0d:86:08:d6:
                    a6:d1:36:6b:d2:7d:94:97:b3:d2:b4:73:3c:94:a5:
                    7a:1a:e1:be:21:2f:4d:fa:1d:de:18:12:26:29:3c:
                    d9:07:8e:74:35:8e:0f:d6:0c:0f:0f:13:5e:fe:c1:
                    e1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:73:71:EA:C4:65:21:31:2E:20:AC:E8:90:99:CA:5E:DB:A3:74:BF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33bb8c42-d58c-41ec-ba61-43ab25802400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:31f4::/46

    Signature Algorithm: sha256WithRSAEncryption
         2c:3e:f0:68:2d:4c:44:7a:f7:0b:1e:c1:23:3e:2b:ef:fd:4c:
         4c:0d:f4:da:a3:ea:49:0d:03:03:72:a0:51:cf:ca:88:65:dd:
         64:f3:49:fe:4d:90:f5:c1:59:50:4b:c3:85:a2:eb:0c:b5:fc:
         1e:cd:b8:3d:9f:02:3a:e0:a6:7d:cd:42:14:8d:f2:81:7a:74:
         bc:c5:a3:ae:f1:ce:1c:68:2f:10:e2:bb:9d:e6:b6:31:af:f4:
         f1:d8:05:f2:86:96:ce:30:1e:fd:26:37:2d:39:ff:a8:e3:82:
         f1:b2:0d:56:ad:70:10:f9:8f:fe:5d:e5:3f:9c:ce:82:6c:d2:
         f8:62:08:86:03:a2:0f:3f:d1:c2:97:4d:72:6e:8d:f5:be:92:
         b7:0c:3b:98:d7:c5:3a:54:d4:b5:a6:c7:29:c3:7b:74:59:e9:
         84:b8:05:dc:74:da:31:18:d1:d9:71:c7:3b:5c:dc:d3:2d:f7:
         55:56:df:5d:ce:3e:fc:4d:81:65:24:ba:26:ec:72:e4:74:6c:
         b3:f0:52:ab:b3:c3:32:0c:4c:35:13:8a:d5:e4:59:9c:f7:ea:
         4c:62:19:1d:77:85:4a:40:40:59:a5:0f:34:4e:ae:08:d8:07:
         d9:09:19:e4:7b:26:da:7e:7c:15:e6:eb:25:d9:ba:52:98:9e:
         7e:43:04:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:14 2026 by rpki-client