Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f7530a4-02dd-42e0-817b-19dba92efbe8.roa
File:                     3f7530a4-02dd-42e0-817b-19dba92efbe8.roa (raw, json)
Hash identifier:          J08ubs0q/Y6x/qcvSH6NMNMBK/0Vn+Dd6PTNypPnEY0=
Subject key identifier:   CD:54:3D:FA:0C:4B:F8:5B:93:B1:63:5C:F8:9E:1B:72:A2:17:A3:A8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1E74F95CB729B8CC88335F67F76F354268831DB9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f7530a4-02dd-42e0-817b-19dba92efbe8.roa
Signing time:             Fri 13 Feb 2026 08:00:59 +0000
ROA not before:           Fri 13 Feb 2026 08:00:59 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3fcc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:74:f9:5c:b7:29:b8:cc:88:33:5f:67:f7:6f:35:42:68:83:1d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 08:00:59 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=4e5645783b1742efbd333158b5a53314dad2743358d97d38cf110b0544d26997, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:91:7c:7f:da:cd:0e:2f:4d:82:ae:d2:90:44:
                    c3:f7:85:e6:58:21:d6:02:02:0e:44:07:d7:37:0d:
                    fa:7b:21:b9:fc:4a:47:60:de:2c:50:1e:d0:24:e6:
                    20:6b:ad:96:83:4d:10:f0:32:fb:96:57:bd:da:90:
                    30:5f:ea:8f:e9:ff:a2:49:d1:3d:1f:52:a2:0a:85:
                    28:d0:00:bd:c3:1d:a9:26:97:29:11:a7:96:69:25:
                    d9:dc:e5:da:ce:a0:db:ce:8e:e9:23:53:fe:0e:4c:
                    c4:e6:d3:63:54:4f:87:06:19:58:ba:52:6f:82:ec:
                    47:43:86:e5:26:2a:73:0e:59:af:8c:bd:a7:d5:ca:
                    98:8c:f1:4f:4b:7b:11:4b:11:3c:ab:5c:a0:e0:ba:
                    8e:f2:cb:c4:76:0d:7c:e1:d2:4a:f3:35:30:b4:70:
                    92:a9:72:7f:10:ee:e4:b7:a3:48:91:94:bd:57:13:
                    0f:16:18:2f:f1:7e:60:c4:6b:53:bd:37:b5:03:19:
                    9d:ad:f3:75:4e:71:0a:7d:2b:53:6c:86:9a:92:d9:
                    cf:db:95:b4:52:3f:78:37:74:de:4e:6e:db:f9:b6:
                    c8:c3:85:0e:67:11:49:67:a3:3c:b0:6f:37:a6:27:
                    f0:09:bf:ee:e8:b6:5f:0e:5f:ad:cb:b2:fe:f6:59:
                    eb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:54:3D:FA:0C:4B:F8:5B:93:B1:63:5C:F8:9E:1B:72:A2:17:A3:A8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3f7530a4-02dd-42e0-817b-19dba92efbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3fcc::/47

    Signature Algorithm: sha256WithRSAEncryption
         b6:49:3c:05:e3:77:b8:cc:a4:ff:6d:b1:ef:04:75:c6:40:df:
         d4:08:13:b5:eb:a7:d2:73:83:46:b3:9d:e8:96:20:d2:7d:3c:
         21:f3:f3:8a:ef:82:8d:32:2a:de:27:69:a1:ee:a2:cf:7b:c3:
         d6:c3:d7:0e:1c:a1:d9:fb:09:9d:d8:e6:c7:36:7e:84:33:2f:
         fd:39:66:81:62:d3:79:d2:96:c8:01:ef:7a:87:6f:9f:ac:35:
         a7:55:1f:5d:c5:90:48:63:0b:34:a0:1d:4f:cb:e2:02:48:a2:
         8e:94:e3:80:83:c6:ae:32:4e:96:34:db:d6:ee:e2:8d:3c:13:
         ae:0f:0e:86:51:26:d1:01:5a:1c:09:bc:b3:0a:e8:a4:f5:bb:
         63:cf:3d:f4:06:1e:2a:2a:be:c7:0f:ad:c2:c6:14:d6:a8:09:
         27:ad:bd:ef:43:ae:f2:94:f3:d7:84:30:b4:07:04:ea:b3:1b:
         47:9c:6a:2a:37:b7:2e:07:d8:1f:f6:75:a9:ff:f6:b6:c6:3b:
         91:9b:17:fa:25:2f:d4:6c:d7:01:17:50:2c:2a:af:08:c9:b5:
         a0:69:fd:06:42:30:c5:60:e2:f2:39:40:80:f6:3f:aa:a1:7b:
         18:93:ad:6d:42:ce:cf:61:fb:fb:e1:e3:b4:41:f7:b0:67:55:
         b4:84:52:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:20 2026 by rpki-client