Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3b38a87f-0e2a-43bb-85ec-bfb5edb9eae0.roa
File:                     3b38a87f-0e2a-43bb-85ec-bfb5edb9eae0.roa (raw, json)
Hash identifier:          LcLWcV5E/7tecmIXlgysXdkdl1fEVZdl9jn3/M6n2Hw=
Subject key identifier:   7A:8F:48:26:05:31:01:19:1C:BD:64:4E:93:28:42:50:EA:45:7C:74
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       398E85A61462CB9EE195AB62BCE0F8928B831092
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3b38a87f-0e2a-43bb-85ec-bfb5edb9eae0.roa
Signing time:             Fri 13 Feb 2026 10:21:57 +0000
ROA not before:           Fri 13 Feb 2026 10:21:57 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3dbc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8e:85:a6:14:62:cb:9e:e1:95:ab:62:bc:e0:f8:92:8b:83:10:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 10:21:57 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=7c914dd4992acfaee9e76e48ba7ea69f966107db922f533d31d67789caa927d4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:e5:2c:d7:68:a0:e1:fb:79:55:38:e2:8f:
                    32:e2:bd:e8:d2:40:8c:1e:5a:a0:02:73:09:e6:41:
                    f8:ad:01:52:5d:6a:40:e8:c2:20:3a:44:79:36:72:
                    08:b6:96:0d:48:87:db:9d:d6:84:d1:6d:8f:a1:a2:
                    67:08:11:35:95:c1:a3:42:32:c7:e4:49:7f:44:80:
                    9c:69:af:0c:1d:66:fa:a3:cf:de:c9:42:f9:30:fb:
                    3c:94:49:71:31:89:8c:5b:59:63:d0:6c:02:7c:42:
                    42:e1:24:4b:7e:73:91:61:6b:f3:d9:d6:e4:2b:87:
                    b5:29:d1:61:9e:50:cf:0c:7d:78:0e:cb:85:24:fa:
                    e7:35:b7:95:bf:c4:0e:af:36:05:3e:a7:8e:6c:a1:
                    15:32:51:ca:dc:31:1f:e4:aa:44:5b:d7:03:78:6e:
                    cb:eb:68:8f:80:91:6a:42:d1:c0:91:15:da:78:d0:
                    76:7f:ac:fc:23:ea:87:65:20:a7:00:c9:6a:ca:11:
                    82:0a:56:0f:99:58:dc:2b:53:de:c6:7c:e8:83:8b:
                    80:47:ad:2f:df:30:ed:c8:02:bc:0a:38:f9:1d:97:
                    27:f0:4a:dc:1c:f0:36:ad:26:e7:9f:a8:27:4b:bf:
                    6f:60:23:ae:21:d3:eb:3f:43:e8:9b:96:c1:e9:a5:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8F:48:26:05:31:01:19:1C:BD:64:4E:93:28:42:50:EA:45:7C:74
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3b38a87f-0e2a-43bb-85ec-bfb5edb9eae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3dbc::/47

    Signature Algorithm: sha256WithRSAEncryption
         a5:15:85:57:15:dd:b6:16:01:b1:64:dd:a0:6e:e2:52:f1:55:
         73:aa:3c:b7:59:b7:da:0d:fd:5d:ac:36:5b:4a:5a:7f:61:e6:
         be:f3:39:fb:90:7c:e0:68:26:18:d6:45:74:34:b2:da:5b:55:
         cb:a3:d5:10:f2:b1:58:f7:d3:04:d9:9a:0c:fa:5b:21:c9:16:
         28:c4:ba:0c:bc:96:9d:7c:85:48:db:b9:4f:29:8a:e5:3a:12:
         2f:71:c6:59:86:c5:3a:ea:4c:1e:e7:25:a4:94:a1:e1:09:6a:
         cd:a5:f5:da:a7:79:0f:66:23:2d:a9:cb:e3:d0:c1:67:6a:37:
         f4:af:21:55:7f:df:c5:e7:84:d7:37:12:72:e6:24:5b:f1:58:
         f7:91:3f:3b:27:10:34:04:85:f4:8f:2a:5f:5c:df:85:2f:ed:
         11:63:ca:68:eb:95:7b:a2:d6:43:25:90:fa:e5:55:ea:14:07:
         d6:bc:bc:4d:5b:38:fd:86:f5:bf:c4:5c:06:92:72:ab:a5:d1:
         24:25:ef:0a:37:7c:af:1a:54:94:2d:b0:17:2b:e4:72:55:3f:
         42:16:46:51:57:af:6b:c7:03:b2:64:2c:29:bb:4e:3d:67:a9:
         e1:73:b7:48:dc:2a:3c:f4:aa:0c:ad:dd:43:63:7f:5c:a2:db:
         5d:ca:1c:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:57:58 2026 by rpki-client