Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48380b3c-35a3-4417-b1cb-016ae2956bb6.roa
File:                     48380b3c-35a3-4417-b1cb-016ae2956bb6.roa (raw, json)
Hash identifier:          g3U8nPXKz69xNVw9tqNquc3O+e/xnjtlJ1FH6Hh6p9E=
Subject key identifier:   35:E5:22:28:4E:C5:72:8E:0E:66:AB:D8:A7:30:B5:02:07:0A:1B:8E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3661C74516AC867391E6396D2749047C33D9DA85
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48380b3c-35a3-4417-b1cb-016ae2956bb6.roa
Signing time:             Thu 12 Feb 2026 01:01:42 +0000
ROA not before:           Thu 12 Feb 2026 01:01:42 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:219c::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:61:c7:45:16:ac:86:73:91:e6:39:6d:27:49:04:7c:33:d9:da:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 01:01:42 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=1a19add07c6268cfd9427712a4bb7ff55ec0747bf0b126e262873de00d138ffb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6b:95:f1:96:c5:ec:a7:ac:70:7f:d9:94:c7:
                    2d:d4:df:9f:3f:c7:da:f5:c9:3d:fd:ed:fb:b0:b3:
                    af:5a:68:57:f3:8f:24:20:80:e5:d8:f2:a4:fd:9c:
                    7f:02:74:63:15:f2:eb:e5:8a:61:96:e9:9b:29:ed:
                    6e:06:97:e7:af:4e:92:40:d6:2b:70:39:fe:1d:79:
                    a1:2a:8a:54:30:36:cb:fb:87:c7:ec:b7:91:50:8f:
                    1e:c0:a0:f9:49:76:33:2a:72:9c:01:a1:3e:15:43:
                    b5:84:cd:3f:53:90:99:9d:f2:a9:0a:cd:19:d6:69:
                    1e:c7:6c:94:e3:89:da:02:af:cb:bd:8d:5b:c1:24:
                    9b:e9:f1:d5:dd:a8:7c:3b:97:61:53:21:ea:45:b0:
                    eb:fa:46:2c:2e:a8:38:8b:6b:01:3a:d3:f8:2d:a8:
                    a1:df:fa:4a:6f:ab:f1:66:eb:c8:5b:14:ae:08:0e:
                    de:0d:e8:ac:ba:87:80:18:f0:64:d9:5f:50:0e:0d:
                    dd:f4:2a:bf:be:28:3d:b5:2c:59:42:1e:93:15:b9:
                    57:76:c4:be:b3:68:3b:b5:2f:6e:ec:02:41:22:0d:
                    14:be:6f:76:de:71:26:1b:73:2b:27:d8:1a:d2:f8:
                    ce:c1:01:ad:96:a9:d0:02:39:ed:19:cf:e9:6d:ce:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E5:22:28:4E:C5:72:8E:0E:66:AB:D8:A7:30:B5:02:07:0A:1B:8E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48380b3c-35a3-4417-b1cb-016ae2956bb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:219c::/46

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:b3:7b:5a:ac:f6:70:5b:1c:c4:f9:5f:29:85:c4:9d:7f:
         93:fb:60:2c:ec:1d:77:ee:f4:e0:b5:46:a5:59:86:7b:b3:7d:
         b3:07:37:3e:f8:3b:20:47:8b:b7:50:bd:f8:81:70:c6:b4:85:
         36:67:51:29:6c:c0:e3:14:40:61:92:c5:7f:03:31:bd:01:36:
         78:fc:b1:fc:49:7a:b2:f3:c6:82:e4:4c:e2:50:09:1f:1a:68:
         9b:80:54:83:60:fb:d7:31:92:69:3e:55:59:b7:a5:10:d6:f0:
         92:76:22:3f:dc:bd:13:cb:9b:d0:24:ea:4f:b9:8c:f3:3e:20:
         13:37:87:6c:fa:e0:3b:59:53:e0:7b:a1:83:29:b2:4a:21:a2:
         d6:6c:50:26:f2:63:9c:1c:1b:1a:6a:85:ba:9b:da:a3:4b:3c:
         2d:aa:06:36:bd:24:de:6c:cb:6c:98:c9:f3:b1:6e:3a:12:ad:
         a1:de:0f:6e:39:16:6b:e7:4a:2f:6e:6c:fc:d1:cb:e9:b9:64:
         d5:3f:68:8e:4d:d3:20:f8:fa:5b:9f:4d:4c:02:0d:4b:96:f5:
         66:07:33:b1:cb:50:07:61:a7:e3:6c:f8:7b:87:03:8c:99:f8:
         5b:e8:c2:e3:57:36:15:9f:a4:44:71:44:52:58:5c:20:89:c2:
         c9:c9:fa:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:24 2026 by rpki-client