Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/35094e1e-1224-4d21-afe7-f9902821a63e.roa
File:                     35094e1e-1224-4d21-afe7-f9902821a63e.roa (raw, json)
Hash identifier:          iV7dakTq9+Tpsdjc1qTUL+O7pbHqDz4jU4UP630R/EQ=
Subject key identifier:   AA:4A:76:A6:60:B4:63:28:B1:8F:57:CE:26:A4:90:C8:F2:CF:C6:12
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       794F3C52A6659E75325FB58682B3ABE2D822E613
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/35094e1e-1224-4d21-afe7-f9902821a63e.roa
Signing time:             Fri 13 Feb 2026 04:00:56 +0000
ROA not before:           Fri 13 Feb 2026 04:00:56 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32f8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4f:3c:52:a6:65:9e:75:32:5f:b5:86:82:b3:ab:e2:d8:22:e6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 04:00:56 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=f1f6eb85c1c737e82a5516b15cadc4f061334cde94dbc49caac6b516ab1934de, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:87:15:b2:7d:92:e3:9e:a6:9f:f4:ac:3e:
                    9a:51:6a:a4:33:f2:e6:08:24:95:ab:e2:e2:38:4a:
                    fe:5a:02:70:0e:5c:85:dd:72:76:15:80:06:67:bf:
                    1a:0f:4e:d6:ec:fd:10:f2:64:2c:4f:8f:aa:e9:dd:
                    b9:d1:1c:e3:a8:e3:23:4a:68:74:8d:0a:2a:e1:26:
                    c6:65:34:85:44:db:28:12:dc:57:38:6e:96:b8:68:
                    87:9d:fa:6d:aa:cd:02:c5:d3:72:a2:e9:d7:c8:5f:
                    ac:e8:ec:0f:f3:92:53:16:e3:17:35:3a:3d:70:fc:
                    00:6b:e4:c6:6f:e0:66:1b:d5:e2:fd:92:c9:7f:0a:
                    79:5b:67:37:29:63:6b:a0:9b:c7:3f:78:74:de:bb:
                    12:e8:74:d1:d4:62:52:58:8d:8a:9e:a6:07:b6:73:
                    10:c9:42:fa:0c:70:8d:eb:6c:70:23:ba:27:58:2f:
                    97:62:0a:86:95:b3:0d:c2:e6:fa:e6:ce:24:b0:99:
                    19:22:8d:8b:86:04:80:01:fe:02:8d:d5:ba:53:9a:
                    8d:d8:1c:dd:14:71:d6:57:d2:c2:a0:2d:56:41:f0:
                    4e:ad:04:a9:a9:46:9e:2d:ac:bd:78:1a:1c:10:9c:
                    60:2e:ba:a2:e5:5e:e7:e7:8b:7c:f0:0c:87:51:1f:
                    9b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4A:76:A6:60:B4:63:28:B1:8F:57:CE:26:A4:90:C8:F2:CF:C6:12
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/35094e1e-1224-4d21-afe7-f9902821a63e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32f8::/46

    Signature Algorithm: sha256WithRSAEncryption
         bb:e4:30:54:f0:0a:a9:26:df:ca:b6:e9:19:1b:84:29:f7:4e:
         24:25:a7:bc:ed:68:6e:c3:f5:ea:09:f3:b5:3f:2e:6d:39:7c:
         31:1c:8e:3b:c2:79:20:a6:ee:d2:a8:55:96:9d:1c:5f:1e:ab:
         11:85:35:fc:ae:01:6c:d8:4f:33:dd:bb:87:f2:55:73:4b:9f:
         65:11:13:ae:97:30:ed:cf:8c:4e:bd:4d:f3:eb:03:c6:2c:8e:
         cc:74:d3:4b:d6:2a:92:59:9d:16:77:2a:20:29:90:d4:72:02:
         0e:a5:69:09:56:17:78:0d:03:4d:13:34:a2:8d:88:f9:97:16:
         9f:8b:96:cc:f8:a0:b7:7c:bc:41:89:a6:ba:9d:b5:86:0a:ef:
         c7:a1:f9:c7:d7:68:92:62:b4:65:89:f2:cc:1d:09:02:a1:35:
         1f:ff:34:2d:20:85:d2:e6:f9:f1:03:9d:73:fa:7e:9d:ef:2b:
         3a:07:0c:06:c3:58:77:09:3f:d6:e6:42:35:d5:0d:4b:66:e9:
         b8:e2:40:a5:1b:02:e5:3a:86:8f:85:86:a0:6a:44:a3:17:db:
         a2:0d:f6:8a:be:a1:e9:fe:fb:73:fc:ee:d6:58:eb:09:5a:ac:
         7f:95:8d:d0:8c:e3:97:f0:99:7e:2c:27:7a:22:17:b8:21:47:
         fa:ce:a2:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:41:13 2026 by rpki-client