Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/399715ad-94a0-4397-8224-ba65aa0a5d96.roa
File:                     399715ad-94a0-4397-8224-ba65aa0a5d96.roa (raw, json)
Hash identifier:          IhNu+C7OA+qeya6e3oI4HvsohlIx3hlL6DBhNo85mrc=
Subject key identifier:   0C:30:99:A6:25:84:D9:98:DF:8C:CE:9E:61:FD:78:67:4F:17:94:08
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3D27930C2CD02FF8655CB86D9E3DED0013AABB03
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/399715ad-94a0-4397-8224-ba65aa0a5d96.roa
Signing time:             Fri 13 Feb 2026 13:51:40 +0000
ROA not before:           Fri 13 Feb 2026 13:51:40 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3824::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:27:93:0c:2c:d0:2f:f8:65:5c:b8:6d:9e:3d:ed:00:13:aa:bb:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:51:40 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=bc6d2f91362a71795d3e60039c32aefb20963f315c67f1e809a285d511030709, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:a3:0e:db:69:9c:f3:14:ed:7b:35:28:18:
                    03:1e:6d:4f:9f:2e:dd:6c:22:05:37:30:8b:76:5d:
                    65:fb:12:17:66:37:7d:52:65:bd:1b:1b:6f:79:a3:
                    3f:3c:f2:ca:c7:ab:68:88:fb:68:0b:58:fd:80:8b:
                    df:80:b9:d1:7f:23:22:53:1d:67:59:2a:9e:b2:a8:
                    71:0e:46:50:36:bc:f6:f5:48:0e:25:f4:f1:f0:4a:
                    33:2f:05:35:7c:88:fe:4d:60:53:33:f4:71:37:7b:
                    55:a3:f8:f9:46:30:46:3e:ed:4a:4c:b9:b9:a2:cf:
                    fa:b4:b1:61:03:15:34:71:33:6e:84:73:bc:04:5c:
                    af:30:bf:dc:a0:17:66:bc:a3:6a:8b:5c:1d:6d:6e:
                    b0:92:5d:b2:fd:cd:89:e2:7c:dd:54:10:3a:f8:20:
                    4f:17:ce:e4:6e:17:f8:8a:7e:60:ad:62:0c:c4:fe:
                    6e:f1:08:c7:71:1b:51:06:94:96:5b:c3:5e:4b:89:
                    4a:3c:50:02:4c:ae:52:53:25:c5:e9:3a:86:b1:d0:
                    f1:14:09:08:4d:9f:4b:c3:55:51:4c:36:53:f9:59:
                    b2:be:e6:db:34:7e:e0:93:5f:cc:26:f9:00:c8:87:
                    0b:28:67:c0:e2:c3:ca:00:ca:79:23:e9:04:40:ae:
                    56:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:30:99:A6:25:84:D9:98:DF:8C:CE:9E:61:FD:78:67:4F:17:94:08
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/399715ad-94a0-4397-8224-ba65aa0a5d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3824::/47

    Signature Algorithm: sha256WithRSAEncryption
         6d:30:8e:50:d5:72:6e:fb:a8:e4:bb:b4:e9:55:10:d0:16:52:
         5e:32:e1:14:73:88:fb:b8:ef:1a:07:d3:a0:fc:89:82:78:96:
         c8:8d:83:f5:e9:d5:af:5c:90:06:db:74:c0:68:d4:60:13:92:
         73:91:a0:a1:ec:a1:9f:78:00:eb:02:4d:f7:07:63:55:47:4f:
         3e:0a:8d:3e:ad:cd:61:c6:1e:88:4f:ed:7e:3e:ee:c8:92:c0:
         a6:e9:5d:f9:24:64:65:b3:f6:6e:85:d7:db:24:5b:63:88:ef:
         d0:f4:05:d6:3a:e7:58:98:9b:dc:79:70:ca:8b:34:e9:09:83:
         7a:44:eb:8f:3c:18:30:36:be:1a:0d:90:b2:cc:89:65:ed:43:
         b8:0c:93:18:28:62:40:17:8b:39:85:9d:61:42:02:3a:4b:8a:
         8b:46:23:d1:13:ce:1e:17:7d:11:12:49:ed:7b:14:d0:e4:8c:
         34:c4:22:86:99:13:70:9f:97:42:62:45:33:24:be:6e:65:25:
         6e:6a:c8:82:6b:5d:f6:86:5d:0b:2a:15:c1:1a:86:97:dc:1d:
         5a:ac:24:85:ea:e1:cb:2a:7c:33:62:09:1b:af:a6:3c:37:fa:
         fc:08:e1:80:0a:b2:7b:58:a1:59:8f:d1:70:10:42:71:87:21:
         22:b5:8f:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:48 2026 by rpki-client