Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c932b99-ac4f-4439-a62f-245674d309ef.roa
File:                     4c932b99-ac4f-4439-a62f-245674d309ef.roa (raw, json)
Hash identifier:          n0QNeZdxNTVBenTlmlCLSykfpPacVg1cJ08MZKChUDY=
Subject key identifier:   18:5B:ED:8D:87:EA:52:1A:57:FD:9B:FE:88:52:8B:71:A3:9E:C6:5D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       68D864BEEA0C0389F279BC06D68483C913C266F1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c932b99-ac4f-4439-a62f-245674d309ef.roa
Signing time:             Fri 13 Feb 2026 01:51:32 +0000
ROA not before:           Fri 13 Feb 2026 01:51:32 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3700::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d8:64:be:ea:0c:03:89:f2:79:bc:06:d6:84:83:c9:13:c2:66:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 01:51:32 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=7040788031d22a629feeaae854f87479fbb30501e785e871dd090b4a19a5df5d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7b:85:72:a7:ec:7d:87:f4:78:99:16:ac:c5:
                    4f:81:9b:33:a8:5f:fb:3b:d1:9b:d3:be:11:40:c7:
                    fa:9e:33:7f:b1:48:5f:d2:82:35:e0:9c:02:ae:8f:
                    e3:c0:dc:5d:81:ed:b0:6e:e3:6e:1d:f4:f1:38:fb:
                    45:2d:b3:e1:08:cb:01:af:d2:cc:03:b8:8b:cb:ff:
                    76:e2:25:ba:84:03:8b:dc:53:6d:c2:fc:a6:fa:e5:
                    89:32:57:94:a4:5f:0f:f7:1d:cb:dc:5a:dd:01:5a:
                    02:5a:03:85:b8:d1:e0:fe:fe:a0:d0:91:da:3c:d5:
                    64:95:4a:2d:6d:f0:92:9b:79:2c:10:1c:75:8e:ba:
                    c8:08:b1:c9:31:40:4e:cb:e4:93:5e:a0:c8:f1:11:
                    74:81:4f:1f:58:5d:e5:9e:2b:c6:5e:3b:e7:c9:40:
                    55:de:05:78:83:8c:f3:1a:70:0b:27:76:d1:53:1c:
                    ac:76:95:9e:8f:fd:6c:c1:e9:da:04:46:1a:06:f1:
                    2d:2b:fd:07:8d:8d:49:d3:8b:85:f3:07:82:88:49:
                    ed:1a:77:67:62:ef:75:48:a6:c3:93:e4:c2:49:a0:
                    1e:f6:8d:fd:37:6c:49:95:6d:1a:ab:17:43:ec:b7:
                    10:99:a0:7a:ab:7a:8b:4f:08:7c:cb:a1:73:97:e0:
                    85:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5B:ED:8D:87:EA:52:1A:57:FD:9B:FE:88:52:8B:71:A3:9E:C6:5D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c932b99-ac4f-4439-a62f-245674d309ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3700::/44

    Signature Algorithm: sha256WithRSAEncryption
         19:4c:18:17:24:9f:e2:1a:2e:f1:f2:f6:f6:f8:c8:09:c7:35:
         71:04:75:38:4d:63:4a:59:37:90:a9:a1:a3:68:8d:3f:aa:7c:
         0d:d7:0a:1f:ba:c8:09:09:02:f1:90:be:0c:49:4d:4d:28:62:
         19:a2:f0:f4:50:04:b5:09:33:f7:5a:63:15:a1:95:83:20:e2:
         b5:f7:f4:95:ee:c9:9d:fb:96:75:9a:35:93:50:f9:07:b5:51:
         c6:0c:40:5a:29:f3:f3:c8:ba:ba:b7:35:f4:0d:a3:49:17:ee:
         e0:76:9d:bf:80:e8:b4:98:98:46:83:25:18:16:e7:6b:33:9c:
         dc:b3:be:e7:58:99:36:05:e6:a6:c5:f7:f9:e6:79:79:0b:81:
         c6:cd:a6:1f:d0:13:4f:b9:b9:ba:5a:a8:fb:04:c0:51:41:65:
         6b:3b:46:a5:82:e2:b7:a2:0f:27:12:a4:b1:93:4b:35:72:62:
         75:52:3e:4a:94:76:ea:8b:72:6e:66:d0:af:7b:14:2c:72:68:
         74:ea:25:20:43:26:d5:a4:3c:07:b1:8b:0b:75:86:f4:86:7b:
         4d:88:54:ce:0f:0e:42:51:ec:83:17:bd:84:a1:d5:36:af:db:
         64:c1:0b:ce:e3:71:58:c3:78:d9:ae:73:a3:c4:58:4b:7a:e7:
         3c:10:d6:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:45 2026 by rpki-client