Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4bc91423-bf22-4647-88a9-9710dfc0e8a4.roa
File:                     4bc91423-bf22-4647-88a9-9710dfc0e8a4.roa (raw, json)
Hash identifier:          REExiJuLzGhf3z0c0OJMLzkv7q0LiIQnCqyVOCUSATk=
Subject key identifier:   55:15:99:CB:D4:98:2A:2C:DF:C4:33:1D:63:7A:53:7D:47:EC:CE:43
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       60CC6AE1421F39F9E848B33F38EBFA954812D4C8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4bc91423-bf22-4647-88a9-9710dfc0e8a4.roa
Signing time:             Fri 13 Feb 2026 11:30:57 +0000
ROA not before:           Fri 13 Feb 2026 11:30:57 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d44::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cc:6a:e1:42:1f:39:f9:e8:48:b3:3f:38:eb:fa:95:48:12:d4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 11:30:57 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=a4982fb50b343d8607ec3271c7c42663e49356dc546611bb3b98d03bb7eb2f89, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f8:46:84:28:b6:fa:7a:c2:f2:39:8d:c1:b0:
                    9f:1f:dc:03:54:41:29:b9:cf:cc:b6:95:fa:f9:48:
                    3e:60:79:27:3c:0e:c6:29:a3:3f:e3:0c:fa:95:18:
                    f2:04:57:d0:25:1f:f5:35:98:1c:dc:00:42:e9:33:
                    1f:68:f0:cd:41:71:00:40:9c:ea:f3:fb:73:5f:eb:
                    34:7b:96:76:a9:8c:e1:3d:ed:50:a0:dc:69:f2:11:
                    f9:11:8a:61:ef:e6:02:f4:f1:33:15:c0:38:ba:78:
                    52:20:0f:27:96:77:8f:be:cb:23:d4:7d:c6:cf:c8:
                    3e:b2:6a:16:b6:61:02:81:64:44:dc:4e:6b:f5:d2:
                    b4:64:71:2e:e8:89:54:6a:7d:3a:52:f5:d3:34:5f:
                    c1:2e:3a:cf:f8:51:ad:d5:34:03:fb:0a:d8:65:12:
                    d8:2c:84:68:b5:da:ee:d6:37:93:fa:4b:80:65:81:
                    97:7d:ee:ef:75:20:27:df:07:0b:4d:b1:67:95:83:
                    5f:eb:6d:ca:1e:cd:9a:46:66:f1:0a:e4:d7:f6:6e:
                    47:7b:f9:11:f3:40:d9:01:91:df:47:3e:d8:c2:f9:
                    73:70:7c:55:93:d1:02:0a:38:7c:b1:45:9f:48:7f:
                    c1:9b:d0:33:8c:9c:22:fd:1d:ab:0a:4b:12:1d:cb:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:15:99:CB:D4:98:2A:2C:DF:C4:33:1D:63:7A:53:7D:47:EC:CE:43
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4bc91423-bf22-4647-88a9-9710dfc0e8a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d44::/46

    Signature Algorithm: sha256WithRSAEncryption
         85:db:16:88:e5:ce:41:54:ec:e9:a6:79:db:77:12:4f:b9:af:
         06:f0:47:c4:ab:6f:db:ba:0b:64:33:0a:75:e5:a7:41:b9:19:
         40:2d:bb:c2:8e:76:8e:c2:67:ce:d1:a0:8c:4f:30:8d:00:3a:
         af:c9:af:58:03:c3:64:74:db:b2:f8:6b:5a:42:18:0e:57:31:
         18:57:90:60:2d:9e:11:df:1d:91:02:5b:7d:eb:52:71:58:ee:
         52:ec:14:c1:d8:a3:4e:52:65:e0:f5:8d:52:ae:4f:c3:6d:87:
         4e:bc:48:ec:f1:ab:d6:86:51:26:8f:08:30:ce:52:b3:4a:59:
         5a:82:c8:61:cf:dc:68:32:40:17:d9:db:da:b0:db:79:38:dc:
         86:23:4c:94:ce:fb:5a:d3:37:83:80:34:17:f7:c0:65:21:80:
         e4:d0:b9:c7:4e:24:df:ac:17:d7:1d:df:dc:21:94:03:aa:0d:
         bb:8d:28:70:b0:82:8c:33:89:b1:24:d2:62:68:4b:3e:31:c7:
         98:13:6f:89:0a:f1:07:7a:c6:1d:d3:d3:82:b2:16:99:fa:a3:
         0e:1b:7f:2f:08:08:77:07:38:9b:0a:0b:42:a9:14:32:d0:1b:
         9a:3e:a2:42:87:77:3d:d5:4e:82:40:23:a2:1d:b9:da:65:9b:
         59:4d:c6:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:58 2026 by rpki-client