Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/378baab3-aa60-4b44-bc0f-2dfaa7df16ce.roa
File:                     378baab3-aa60-4b44-bc0f-2dfaa7df16ce.roa (raw, json)
Hash identifier:          fhjRZsSeVV4MrgoHmcCqCfGmpcJHUCFlzwUalWjp2qg=
Subject key identifier:   36:9D:3B:E0:7A:74:E4:AC:21:C4:CC:AC:06:F3:8A:54:0A:03:71:CC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       58AE029C06B2DC98076C80F0DD1882D871071DDA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/378baab3-aa60-4b44-bc0f-2dfaa7df16ce.roa
Signing time:             Fri 13 Feb 2026 05:11:39 +0000
ROA not before:           Fri 13 Feb 2026 05:11:39 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c88::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ae:02:9c:06:b2:dc:98:07:6c:80:f0:dd:18:82:d8:71:07:1d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 05:11:39 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=bb2e2acf07cf96d08a6248a472578b9c722ed60073c4ffcd5e6a5a179c7c081c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:9b:e0:3f:38:d2:50:05:85:d3:82:5f:3a:
                    e9:61:1b:ac:18:13:05:b6:5c:6e:be:7c:fa:16:02:
                    30:cb:9d:6d:94:34:10:ad:a6:2f:f3:a5:a3:4f:f9:
                    4b:9b:ea:ad:44:92:62:12:8d:ed:e0:a4:6b:85:5e:
                    c9:cd:19:76:e9:68:7e:7f:dd:89:42:be:77:2a:fe:
                    b3:61:b9:d8:7c:42:0f:60:76:17:e1:a8:78:03:e8:
                    56:3c:39:09:a8:e0:73:8a:47:80:d2:46:27:63:24:
                    65:c1:27:68:e3:1b:e3:12:62:23:4e:33:a4:6f:c6:
                    05:60:3c:4e:6b:15:99:08:f9:77:16:3f:39:3d:73:
                    35:38:c9:ed:2d:0a:41:67:a4:56:70:81:d0:bd:d8:
                    9b:62:81:f3:48:14:a7:f5:9e:54:03:36:6b:d9:dc:
                    a2:de:09:3a:a3:d3:14:45:c7:89:b5:19:9d:df:c1:
                    65:51:cf:04:1a:bb:4d:05:ce:99:6b:78:f3:bb:91:
                    30:5c:ec:a7:14:8c:70:dc:eb:21:08:fd:f8:24:bb:
                    12:2d:0d:7d:ea:c0:db:22:ab:06:76:c2:f7:d2:b8:
                    6a:82:1d:6f:08:b7:c7:45:4a:84:57:56:8d:34:0a:
                    71:b0:3d:30:7c:d3:cf:97:6b:cd:14:ad:e0:9a:45:
                    17:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9D:3B:E0:7A:74:E4:AC:21:C4:CC:AC:06:F3:8A:54:0A:03:71:CC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/378baab3-aa60-4b44-bc0f-2dfaa7df16ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c88::/47

    Signature Algorithm: sha256WithRSAEncryption
         bd:78:81:d0:60:4a:4f:15:2d:ec:63:51:c5:18:3c:4f:71:83:
         95:96:0d:02:8a:5a:68:56:83:dd:50:f7:a8:71:45:53:dc:03:
         9f:43:a1:1c:62:69:07:3c:a8:98:7e:ef:a1:a4:97:06:c9:b2:
         99:8a:4c:39:b1:9a:f7:ca:5c:e6:56:35:4a:f8:08:b2:b6:ca:
         97:ae:61:92:86:76:b3:3a:90:31:7c:03:b9:8e:4e:87:3a:5a:
         98:c0:c9:98:25:fb:f4:3c:2b:a7:ad:36:8c:91:1a:fa:2f:6c:
         35:e2:be:4f:89:f5:40:7a:23:6c:86:06:7c:12:16:7b:a3:b2:
         58:11:44:95:a2:d7:7d:ff:e1:1a:4c:d7:2e:f3:a5:d3:5f:d1:
         14:f8:ed:75:82:69:08:0b:67:86:eb:ae:39:96:1f:f1:4a:a3:
         15:86:6f:bc:ff:de:8b:66:87:80:a1:15:99:42:01:da:a2:e4:
         79:78:8b:98:f0:c4:e8:2e:c9:f7:4b:cb:8a:53:87:54:08:16:
         10:53:b5:9f:84:fd:55:38:75:49:99:48:0e:9e:e9:b5:ab:fc:
         70:02:19:d7:09:90:72:b6:83:98:8e:ec:4d:e9:2d:17:24:64:
         7b:ff:fc:39:26:e3:59:38:6a:1c:00:8f:7c:05:ec:fa:ea:e0:
         55:aa:e8:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:35 2026 by rpki-client