Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3cb93bb0-a75d-4790-b35d-df32c6d63e9f.roa
File:                     3cb93bb0-a75d-4790-b35d-df32c6d63e9f.roa (raw, json)
Hash identifier:          RNOWfQXxmY2xUHWaaL8FivPCeZnQ+PN6eCe6CvRjuOY=
Subject key identifier:   8A:7C:93:CD:ED:C7:09:E4:CD:ED:5A:54:9A:AB:1E:3B:C3:0A:B0:12
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55D7370E63B9C921159E42EF43EFF58793B7ECB2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3cb93bb0-a75d-4790-b35d-df32c6d63e9f.roa
Signing time:             Fri 13 Feb 2026 08:00:09 +0000
ROA not before:           Fri 13 Feb 2026 08:00:09 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32f8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d7:37:0e:63:b9:c9:21:15:9e:42:ef:43:ef:f5:87:93:b7:ec:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 08:00:09 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=30d2cf0dae90c0ad21bad616bf72aa350bf79a085bf237692e54c8ced9eb4338, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:c3:e1:84:42:44:9b:f0:91:9c:bc:e9:95:
                    fd:63:72:45:8c:15:e7:3b:f8:d9:aa:d2:b0:8a:6e:
                    1b:87:81:d6:32:a8:a5:60:0c:ef:d9:17:2f:a7:e1:
                    10:c2:2a:c4:9a:34:5d:83:8f:0f:61:87:25:93:8e:
                    73:5a:07:ca:8a:d3:a0:4b:67:e3:1c:e6:c6:4f:00:
                    e9:f1:93:af:a2:ff:7a:d1:b3:a2:d8:99:03:90:da:
                    9b:4f:6f:ad:73:c8:c9:26:61:97:d9:57:d2:54:41:
                    07:ee:e6:c3:4b:e5:93:cd:f1:8c:b8:29:73:46:04:
                    68:aa:0e:42:85:ed:c4:2a:a2:6f:54:d2:b7:ba:35:
                    5a:b9:00:6f:6a:b8:11:0f:f2:e2:3c:26:06:bb:b6:
                    b2:75:54:b3:f2:d4:ea:3e:8d:f5:58:17:41:80:a2:
                    d3:62:ab:e8:13:79:57:33:14:e1:8a:b3:e0:02:05:
                    8f:88:f7:8f:95:64:d0:d1:32:08:54:df:cd:1c:70:
                    d2:11:4d:1a:60:c8:c9:28:27:d1:bb:a4:1b:de:b4:
                    ac:2d:3a:d1:4e:fe:31:58:af:b9:1f:0b:af:bf:cc:
                    f9:24:66:0c:de:10:85:91:72:5a:e6:ba:fe:e9:93:
                    e4:3c:22:6b:76:22:ed:43:23:b1:14:ab:ac:1d:7e:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7C:93:CD:ED:C7:09:E4:CD:ED:5A:54:9A:AB:1E:3B:C3:0A:B0:12
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3cb93bb0-a75d-4790-b35d-df32c6d63e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32f8::/47

    Signature Algorithm: sha256WithRSAEncryption
         8c:3a:0f:df:34:d9:ac:a5:d9:9d:cc:04:0a:c4:9e:24:1b:89:
         fb:65:6c:d7:ee:5e:42:cf:d6:b3:4d:eb:26:31:41:ca:8a:43:
         fc:0c:6e:a3:4d:4d:b6:a6:1c:38:f5:22:33:b0:f8:5e:d0:a1:
         31:7b:4b:68:72:47:4e:85:45:87:ea:af:d2:e4:3a:8f:33:60:
         64:e7:96:8c:54:01:d4:96:c2:eb:9c:75:40:43:c1:41:89:5a:
         e3:84:8a:49:e8:0e:05:3c:0e:ef:c8:d5:5c:48:7b:43:0a:11:
         cb:07:54:a3:06:c4:61:d9:d5:cc:6d:0b:67:d0:eb:40:ad:8d:
         16:0f:ff:2d:96:9d:a0:f6:02:c5:af:96:d8:4e:e1:81:8f:9b:
         65:fc:38:65:54:6c:ba:ec:bd:e6:32:ad:5f:86:9f:12:53:62:
         28:94:b8:cb:3c:f9:f3:6b:d5:e7:09:82:97:be:cb:e7:5d:2a:
         a5:16:47:27:c4:31:6d:43:65:70:c0:bc:b1:41:cc:89:f1:23:
         56:e4:f2:ac:18:ba:1f:a5:ea:60:1c:3e:6b:02:08:33:bc:10:
         ad:f6:bd:ba:7e:fd:8a:d8:22:64:b2:33:e2:6b:89:f4:b0:37:
         7c:18:7f:a6:b6:27:41:c7:32:2c:ec:03:20:e1:2c:82:da:c1:
         13:e4:6e:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:59 2026 by rpki-client