Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46fa4592-63e4-4454-8c56-4dbf52ce6b72.roa
File:                     46fa4592-63e4-4454-8c56-4dbf52ce6b72.roa (raw, json)
Hash identifier:          uF7jAIEzzPeFIU5xanXAQol7QCSgKesbpdJsEErEvL8=
Subject key identifier:   64:C0:26:26:81:46:BA:C1:37:C7:C0:59:6E:34:5B:58:6D:A9:D5:87
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2AD94D4AB079F73C0428D7C187C32D0B193CC3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46fa4592-63e4-4454-8c56-4dbf52ce6b72.roa
Signing time:             Fri 13 Feb 2026 08:31:33 +0000
ROA not before:           Fri 13 Feb 2026 08:31:33 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2720::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d9:4d:4a:b0:79:f7:3c:04:28:d7:c1:87:c3:2d:0b:19:3c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 08:31:33 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=fa2dd4a686540d34ccba323317bf13e9daea5520b83f9020b16f657d1e4d2ad8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b5:52:bc:fe:a2:59:b2:f4:58:5f:be:a6:4c:
                    33:ce:36:b9:2a:80:29:32:5a:f8:8d:bb:9a:83:35:
                    56:f9:5b:9f:bd:65:b4:18:9f:f6:1e:53:6a:e1:30:
                    af:b2:ba:64:ed:55:a0:39:76:91:be:97:c1:ee:d6:
                    d5:b8:7d:0d:4d:1d:43:96:03:86:e4:81:70:37:a1:
                    1a:d1:9d:b4:3a:68:ab:69:7b:45:fc:ea:d7:83:b3:
                    a5:8f:a4:ae:0f:82:bd:b3:43:f8:1b:48:ff:a3:ef:
                    0d:a7:df:4b:53:ff:20:2b:ea:c6:dc:7c:07:a7:e5:
                    0c:6b:7b:5b:04:be:cf:6f:ba:0b:f9:a2:b0:ab:fd:
                    89:80:e1:b3:d4:72:50:5e:76:5e:4e:61:f2:87:dc:
                    f7:62:6e:17:23:d3:27:13:a6:6b:8c:70:d6:ea:40:
                    31:90:6b:e7:6e:33:6e:38:82:93:e9:50:ad:96:59:
                    c7:14:3a:ef:ae:b5:33:86:02:dc:72:cd:ad:d2:70:
                    5b:de:26:bb:fc:97:87:cb:62:7d:98:71:4d:12:b0:
                    33:20:00:b4:71:74:9d:b9:2e:02:55:7f:80:3c:57:
                    c6:95:46:d9:95:14:4f:e4:11:e8:b2:01:4c:52:e4:
                    4b:28:b4:a1:21:be:9f:ac:46:fd:a5:6f:ce:14:5c:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C0:26:26:81:46:BA:C1:37:C7:C0:59:6E:34:5B:58:6D:A9:D5:87
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46fa4592-63e4-4454-8c56-4dbf52ce6b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2720::/43

    Signature Algorithm: sha256WithRSAEncryption
         42:20:97:25:f5:ec:bd:db:90:ef:a8:9d:39:b3:0d:5b:f6:2e:
         51:3b:48:24:8c:0e:99:3d:ba:2f:20:ad:e0:8d:8a:c8:68:85:
         a9:49:55:d3:f1:db:20:1a:44:e3:a5:27:ad:95:15:3d:1b:a8:
         6d:f1:ec:36:ac:c0:a7:45:6b:91:b6:74:6b:89:4a:b5:d0:32:
         b3:97:5c:93:5f:88:1a:dd:21:b6:c7:c0:48:0d:79:5e:0a:cd:
         b3:11:fa:d6:26:d2:2c:fa:f5:00:42:41:99:ef:4f:ad:34:3b:
         f1:a0:03:76:82:a6:1a:1f:46:75:c3:8f:94:03:92:5b:fc:b8:
         79:bd:37:f2:b7:df:99:1c:e3:02:8f:12:1d:16:99:61:7c:6c:
         be:f3:1f:49:d7:c1:f7:00:c2:16:02:31:97:8a:ef:09:6e:81:
         fc:fa:a6:09:99:bd:3b:17:f0:b0:d7:ce:ea:06:61:eb:2a:85:
         94:c3:10:66:5f:da:c6:87:c3:87:1d:52:2e:4d:56:2d:96:aa:
         a2:3f:f9:41:a0:46:a4:98:b2:17:7d:47:35:2d:01:22:e6:91:
         ac:b1:38:e4:77:ec:94:20:85:9f:be:e7:1c:c4:b7:de:8e:38:
         05:e0:37:07:33:09:81:ef:40:9e:c0:cb:ec:a0:1a:29:f7:4d:
         de:cc:8b:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:46 2026 by rpki-client