Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/44e02105-6973-46b9-9c4e-d950ef85e4a6.roa
File:                     44e02105-6973-46b9-9c4e-d950ef85e4a6.roa (raw, json)
Hash identifier:          oAab5QPtGjrjA2I+G7rNTH0bMm/xsx+FiTOru5sb/fM=
Subject key identifier:   4C:71:23:21:17:5C:FB:66:80:5C:80:CC:E3:F1:E1:03:C7:78:2E:7C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       744D875860F59F0C8CBCEA5C53B5CD68CAA2DD85
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/44e02105-6973-46b9-9c4e-d950ef85e4a6.roa
Signing time:             Fri 13 Feb 2026 03:01:58 +0000
ROA not before:           Fri 13 Feb 2026 03:01:58 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3fac::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4d:87:58:60:f5:9f:0c:8c:bc:ea:5c:53:b5:cd:68:ca:a2:dd:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:01:58 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=ef03b4b147453f45c7e536b294e31785e5885182e7cfa96bbe0e738aa820a33c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:86:da:01:8f:8e:39:80:cb:16:3c:22:0a:bd:
                    89:c6:7b:9b:1d:ce:95:b7:2c:99:bc:d4:ed:78:4a:
                    43:aa:e4:7b:43:56:24:3d:33:d5:8e:dc:33:5a:da:
                    3b:b2:d6:73:3c:73:f1:a7:17:35:d3:75:db:e2:14:
                    08:cf:aa:67:aa:c2:40:8a:12:ff:f5:d6:0d:86:e1:
                    a6:48:90:ef:6f:2c:a7:82:9d:ff:60:46:cb:fb:3a:
                    f5:c9:a3:c7:aa:8e:e6:0b:ea:50:6e:85:4f:64:70:
                    34:58:04:9b:7d:c9:87:d5:7c:aa:6e:8d:91:b9:2b:
                    c8:e8:01:44:9e:79:68:d9:72:b3:0b:57:06:ef:cb:
                    9a:ae:06:56:4a:10:af:6c:e1:bf:2d:da:9b:87:48:
                    2c:b5:2c:7c:0b:6e:8b:7b:c5:97:09:3b:6d:1e:8d:
                    a1:77:50:4e:6c:f5:41:8a:39:04:8c:4a:13:e0:6b:
                    3e:b5:a6:cb:2d:70:07:ba:c0:ac:24:61:94:df:0e:
                    1d:1f:04:a0:f3:5c:e2:46:c0:af:f3:a1:4e:2d:3d:
                    8f:9b:a9:5a:63:b9:6a:55:38:7d:1e:cb:d5:36:bb:
                    85:8a:18:a1:d8:54:ba:b3:4e:34:e0:05:8b:df:f1:
                    4f:54:47:67:72:49:91:86:cb:94:53:73:42:ec:7e:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:71:23:21:17:5C:FB:66:80:5C:80:CC:E3:F1:E1:03:C7:78:2E:7C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/44e02105-6973-46b9-9c4e-d950ef85e4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3fac::/46

    Signature Algorithm: sha256WithRSAEncryption
         84:63:ac:49:f2:6f:1a:b6:3b:ea:1c:3f:4e:51:fd:32:7e:ec:
         4b:5a:b0:57:77:35:c6:96:f2:22:4b:2b:2f:ed:65:a5:2b:f0:
         19:6a:19:d3:2c:51:40:95:b2:e6:0e:95:da:ec:b1:33:47:52:
         98:cb:f6:ff:bb:80:ea:fb:dd:2f:6c:64:a1:37:12:38:6a:91:
         58:54:c5:10:46:c0:c3:89:4f:c5:e8:dc:4a:0e:94:ba:45:75:
         b7:ce:31:69:6a:98:1a:95:13:91:21:0b:ae:86:e0:d5:70:ed:
         4b:45:70:24:a2:c4:aa:01:50:3f:e1:89:fe:37:dd:73:ef:cb:
         77:6f:b9:db:6b:ae:2e:ab:8a:ca:7a:c4:23:80:4e:1c:d6:6c:
         73:67:03:de:ab:35:8a:2c:a2:c3:db:8d:bc:d3:51:45:75:a1:
         83:5f:e4:e4:6c:f4:60:ba:21:f9:29:29:93:6f:47:b4:66:ea:
         a3:85:88:e0:c5:22:21:9b:ee:ae:1d:30:08:a0:50:db:f7:10:
         71:8f:47:b8:1b:1f:aa:a9:51:f3:b0:0c:62:b2:b8:f8:0c:c4:
         44:32:9e:17:0d:24:fb:38:59:16:db:a5:ed:27:03:9b:27:78:
         1a:ef:d0:eb:08:cc:4f:e8:c7:51:df:e7:9b:f1:e4:f9:6c:19:
         0d:14:50:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:43 2026 by rpki-client