Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/36ebaeb9-1724-4a94-93e6-1d97a4cb825c.roa
File:                     36ebaeb9-1724-4a94-93e6-1d97a4cb825c.roa (raw, json)
Hash identifier:          CeefGeYlctqwayTH7OB5a3s1o89yFCloyChs5SM3WaA=
Subject key identifier:   22:F6:FF:31:1B:13:EF:D8:E5:93:1C:16:9D:B0:71:D3:A5:69:BF:D8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6AEA4AA40B953946B698118946C806DA3AAE224A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/36ebaeb9-1724-4a94-93e6-1d97a4cb825c.roa
Signing time:             Fri 13 Feb 2026 13:41:10 +0000
ROA not before:           Fri 13 Feb 2026 13:41:10 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3310::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ea:4a:a4:0b:95:39:46:b6:98:11:89:46:c8:06:da:3a:ae:22:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:41:10 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=39deb143dd552069541e759d345c05e4599fb8fdbeaf0667a1102c45334a6e55, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:61:33:ab:36:54:a9:2a:10:79:30:5f:b2:
                    b1:cd:24:a0:b4:05:95:91:57:83:fe:c0:27:b2:fa:
                    10:60:c2:e4:71:3e:d6:ca:6b:5e:8e:2b:4c:d7:75:
                    9c:76:ef:36:05:52:47:73:f1:46:9f:b8:99:15:73:
                    06:67:4d:a4:7a:3e:d4:8e:f1:bf:e1:19:bb:26:5a:
                    05:0e:76:c6:30:62:88:5d:4c:5f:96:10:32:61:c6:
                    26:8f:41:16:60:f7:c8:58:21:02:d5:2f:98:ca:a9:
                    f1:ab:72:ad:b4:5f:87:a9:e5:b6:b6:a9:93:a0:97:
                    63:0c:25:58:aa:bb:9a:df:47:fc:bc:d7:81:11:f3:
                    2f:82:15:66:c2:a0:3b:e7:5c:3c:d8:74:06:69:dd:
                    46:c0:d2:91:f8:62:26:51:7a:81:9b:2e:a9:6b:fe:
                    b6:86:da:a4:96:94:7a:41:56:3c:02:76:7c:62:65:
                    ff:5c:9e:d9:78:ae:34:a1:bd:68:42:16:d4:41:77:
                    20:87:33:de:99:8d:97:42:a7:cc:eb:8f:cf:60:4a:
                    fb:12:55:96:d1:2e:c6:95:4b:82:ab:59:28:fd:47:
                    da:44:4f:0b:04:c5:7c:f6:e3:83:c6:21:56:ac:05:
                    f0:13:74:b9:a8:eb:2e:78:3d:f5:ab:9c:ec:fc:e8:
                    09:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F6:FF:31:1B:13:EF:D8:E5:93:1C:16:9D:B0:71:D3:A5:69:BF:D8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/36ebaeb9-1724-4a94-93e6-1d97a4cb825c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3310::/45

    Signature Algorithm: sha256WithRSAEncryption
         13:6f:27:13:36:d4:53:fb:97:64:da:16:b0:02:7a:39:91:d7:
         a3:17:17:0c:a3:f3:7d:2d:a8:5e:c9:f6:43:bd:00:bb:c3:cf:
         95:68:56:32:a6:3a:e6:cb:b2:e7:4c:56:09:80:c8:f0:47:b7:
         65:ff:2c:6f:a9:29:a0:f5:a6:b4:a2:ad:5c:30:b8:15:a8:74:
         30:57:73:6e:6d:9c:cc:3b:a6:9b:5b:06:38:a6:bf:7f:d9:a8:
         74:dd:6d:d2:2e:cb:68:89:13:9a:aa:42:67:33:63:c5:71:53:
         a1:0d:e8:9a:01:89:13:30:f3:01:1e:5d:2b:88:9d:2e:f9:23:
         b5:e7:a8:39:60:65:3c:3f:4a:f6:d4:d8:0b:43:f9:3a:2d:6a:
         5c:98:5f:38:16:88:11:73:3e:b0:85:8c:20:0d:e3:5f:da:f4:
         2b:e3:11:63:4f:58:0d:7f:e4:31:1c:c5:ec:5e:45:10:48:31:
         fa:7e:47:36:86:9a:be:cb:a3:7b:15:d9:d6:55:af:7d:3c:69:
         a5:e6:b2:b6:b2:c6:22:5e:2e:10:5e:46:95:cd:06:a0:30:5e:
         64:68:07:6e:b7:a2:72:4d:32:49:71:72:67:b8:2e:10:5e:95:
         f4:23:29:4a:79:c4:9d:f8:a7:0c:f2:25:db:b8:23:24:36:b1:
         be:b1:4a:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:22 2026 by rpki-client