Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ce1cba5-3ac7-436d-8886-39e0097103d3.roa
File:                     4ce1cba5-3ac7-436d-8886-39e0097103d3.roa (raw, json)
Hash identifier:          HVuUWLk7IhGgqTbO7L/juFldK0Q6FrFgE5D1PohrgCM=
Subject key identifier:   50:F7:6E:38:1C:D5:D3:BC:D6:EF:C4:99:45:86:E6:8E:87:9A:0F:E9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4A5DFB8116DEC712BBEB76CC7EBE8216430A8BD9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ce1cba5-3ac7-436d-8886-39e0097103d3.roa
Signing time:             Fri 13 Feb 2026 09:21:58 +0000
ROA not before:           Fri 13 Feb 2026 09:21:58 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3be8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5d:fb:81:16:de:c7:12:bb:eb:76:cc:7e:be:82:16:43:0a:8b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 09:21:58 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=c0b1ee80c485ef1ba064d7cf02f7f5f6176496051784244e1dcbc80dc3afed60, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d0:73:db:a4:70:6a:9a:2a:2a:22:20:0d:6d:
                    ec:37:7e:d1:d2:c3:38:8c:a7:62:78:d6:0c:4e:a6:
                    9c:30:19:19:c8:9c:93:51:82:86:25:57:fb:29:61:
                    08:7c:a8:e1:fd:81:8d:6d:08:59:5a:0a:9e:bf:d3:
                    2a:87:7d:7e:47:18:7e:c8:fc:d6:25:66:bf:82:d1:
                    0d:29:2f:39:2f:d8:46:7b:da:ba:f1:42:0b:c1:c5:
                    ca:20:83:de:17:5e:a7:a9:df:f1:76:e3:f8:ad:37:
                    cb:5a:10:46:cc:57:77:13:82:f4:f0:bb:6d:6e:78:
                    fc:56:4b:92:a7:69:5e:33:e8:23:d2:02:db:09:1d:
                    75:73:15:97:4c:88:e2:4b:55:36:51:a2:35:a4:94:
                    4f:b3:32:b7:30:e8:56:c5:72:8c:91:a0:c8:7b:4f:
                    8c:5a:e5:5b:c6:8e:91:11:98:b7:26:ab:40:06:32:
                    e3:75:1d:65:1f:b6:4c:a2:28:8d:2a:c3:d9:9a:6a:
                    ca:c7:83:b4:94:d7:73:13:08:ae:56:19:fc:7e:5a:
                    dc:40:45:bc:70:4a:00:bc:cf:bb:7f:58:b0:5c:72:
                    9b:94:4e:9f:19:02:4b:5c:0e:72:a5:84:a6:02:93:
                    f5:70:6a:25:6b:c0:b1:a3:f3:9b:83:16:ec:11:02:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F7:6E:38:1C:D5:D3:BC:D6:EF:C4:99:45:86:E6:8E:87:9A:0F:E9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4ce1cba5-3ac7-436d-8886-39e0097103d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3be8::/47

    Signature Algorithm: sha256WithRSAEncryption
         bb:d5:54:88:d9:2a:5e:f2:3e:e8:42:8a:bb:3e:cf:0d:5f:d7:
         59:ab:50:02:16:8b:b0:bf:38:47:0d:14:96:44:d5:a1:b6:37:
         ae:b1:e5:dd:f1:12:b8:d1:cd:2f:56:e4:5b:48:b4:0d:fe:a9:
         91:69:87:e5:2c:2d:43:a4:94:82:3a:db:95:0b:ce:ee:80:17:
         0f:be:70:b4:cd:92:2a:90:2f:04:9d:77:d3:37:55:04:93:d3:
         ad:dd:e7:38:4a:3f:99:3f:c5:32:0f:3c:4c:b6:e3:08:6b:5c:
         e9:c3:6b:61:b5:b3:c1:37:8e:28:03:52:bb:fe:27:7c:2a:c1:
         b6:ac:8e:6a:ab:cb:07:d9:48:4d:29:06:3b:30:29:9b:9a:18:
         45:66:d6:91:5e:64:98:73:04:6e:f8:8a:5e:0c:c5:ee:d4:32:
         f5:8c:ff:5d:3b:27:a1:f7:f7:9e:dc:e0:c2:40:4f:99:49:a8:
         3c:f8:b2:04:64:f5:65:86:33:15:46:d7:4a:93:d6:15:47:85:
         74:70:d9:68:13:27:ac:83:3b:62:94:fc:86:2c:4c:aa:1f:0f:
         3b:b1:31:5e:42:79:ef:94:74:7b:40:39:60:89:9c:22:af:de:
         3e:90:dd:87:78:45:74:61:2e:fd:56:4a:8e:70:b0:44:b3:e5:
         7e:e4:b1:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:41 2026 by rpki-client