Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4364d14d-774f-4364-aa79-61ea3700357c.roa
File:                     4364d14d-774f-4364-aa79-61ea3700357c.roa (raw, json)
Hash identifier:          U2OLc01/xJbONUg7xyJhglvEhU7KwOj+8quaZfEMe4Y=
Subject key identifier:   05:94:B8:3F:A8:1D:4D:BC:BC:FA:4D:B2:44:D3:20:ED:47:1E:C7:FD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       79B30BB04B29DABCED7B1DCB6A92DD1483058902
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4364d14d-774f-4364-aa79-61ea3700357c.roa
Signing time:             Fri 13 Feb 2026 05:31:31 +0000
ROA not before:           Fri 13 Feb 2026 05:31:31 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:39f4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b3:0b:b0:4b:29:da:bc:ed:7b:1d:cb:6a:92:dd:14:83:05:89:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 05:31:31 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=73ed854ef043292fa6862907a055ecc99c0b6ec1417a607bee5bd570e2c49573, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:ce:10:37:08:ce:c9:9c:53:67:32:a6:56:
                    62:41:44:09:90:f1:b6:54:74:31:04:b9:75:21:2a:
                    d9:ec:1c:81:c2:0c:62:32:da:e6:c4:96:28:f3:b4:
                    f4:e8:a4:57:65:04:53:fb:45:80:8d:d2:f0:0d:a6:
                    96:6c:16:29:12:dc:83:a3:61:30:6c:e2:85:00:f4:
                    89:31:31:98:5b:0e:c8:78:f7:4b:70:8a:18:80:cd:
                    1d:a6:25:24:81:49:c1:87:94:4b:b7:5f:ac:1c:a9:
                    15:75:f4:87:a7:12:14:87:fa:64:b7:ff:91:7a:ff:
                    e3:82:ea:5d:5a:23:ca:a9:98:fb:1f:63:dc:21:f6:
                    d2:c6:d4:c6:f2:6b:ec:66:6c:b1:dd:a8:46:65:7e:
                    e8:9c:3c:49:6b:eb:15:46:be:04:fa:bc:4e:57:b9:
                    14:ab:0f:dd:bd:2b:9d:2c:6e:2d:0c:c5:66:cd:54:
                    d1:ac:68:34:ce:2a:06:34:5a:fd:53:58:c4:ff:c2:
                    61:56:ef:3d:1a:7c:35:f4:25:e0:f2:6b:0a:c6:20:
                    52:9c:8d:06:1d:00:50:6b:0b:a5:c1:f5:0f:e6:b6:
                    92:5c:d3:2f:1d:35:56:dd:7a:48:35:3f:0e:c3:84:
                    70:61:11:a6:35:33:b8:09:46:6b:ae:83:54:3e:07:
                    b6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:94:B8:3F:A8:1D:4D:BC:BC:FA:4D:B2:44:D3:20:ED:47:1E:C7:FD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4364d14d-774f-4364-aa79-61ea3700357c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:39f4::/46

    Signature Algorithm: sha256WithRSAEncryption
         7c:a0:eb:11:13:d9:55:55:3d:56:4e:11:b8:79:29:9f:7f:ab:
         d4:dc:7c:83:d2:cf:ee:64:ce:8c:30:5c:d1:41:8c:a9:fc:9c:
         64:8f:89:c1:f1:f8:39:7b:23:15:a6:65:1f:7c:10:3a:4c:3e:
         b2:f1:65:61:fa:71:3c:b6:59:39:c3:d7:3a:48:2f:61:2c:83:
         91:b9:7a:ee:da:41:7e:7f:31:68:0e:90:dd:d8:d0:fe:2c:96:
         d5:5c:d2:64:37:a3:04:66:73:fe:25:41:72:a5:ef:b3:72:0f:
         76:da:13:ec:d6:c5:9f:a9:17:bb:d4:34:1c:d4:df:85:2a:e1:
         cc:34:10:ce:2e:3c:39:80:78:7f:91:14:72:9a:20:9e:b3:50:
         12:68:ab:86:49:f6:71:3e:46:ed:98:50:97:da:ac:35:53:c6:
         1d:cf:97:35:5f:e4:d5:75:ac:a3:6b:fa:50:07:89:37:fe:67:
         a6:fd:a9:82:b0:5b:0b:6c:26:50:a2:9d:04:5c:c8:09:31:05:
         1d:55:a8:bf:ee:66:b9:e7:7a:c7:2d:7e:c4:97:f9:df:d7:da:
         b2:e6:1d:d0:11:b7:dd:5a:64:0f:37:e9:50:93:49:3e:ea:d5:
         5a:6e:2f:d4:e1:65:86:b7:d5:f8:ae:b3:95:26:06:c2:b9:8e:
         59:d4:7b:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:32 2026 by rpki-client