Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d2b31d4-4b3f-4620-8d03-5c46eed7119a.roa
File:                     4d2b31d4-4b3f-4620-8d03-5c46eed7119a.roa (raw, json)
Hash identifier:          P3fE5mHLJFPyMh40QzVus4bQg83As3tgUzjK3I8Eueo=
Subject key identifier:   86:79:2C:01:69:00:DA:52:DF:E8:D9:A6:5C:CC:86:6D:B7:FC:3A:6E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4CACACD7AA9E6DAE2B7117BD19ED00D37716EA27
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d2b31d4-4b3f-4620-8d03-5c46eed7119a.roa
Signing time:             Fri 13 Feb 2026 06:21:54 +0000
ROA not before:           Fri 13 Feb 2026 06:21:54 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2efc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ac:ac:d7:aa:9e:6d:ae:2b:71:17:bd:19:ed:00:d3:77:16:ea:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 06:21:54 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=72fdbc093a39eb4094929a8b7ff8ebb9d65105b8b527397713cbd15d4ba8c8f6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:cd:a4:fb:11:4d:0a:5a:69:82:70:80:d2:
                    c4:87:a0:85:26:4f:4c:25:93:de:86:ee:c6:29:e1:
                    ae:55:4a:8d:a4:67:1e:95:9c:43:d4:ca:dc:09:0d:
                    b3:b6:97:d4:f7:cc:af:d9:3b:62:9b:f8:87:f6:e2:
                    5a:f1:d0:e1:a3:01:00:28:44:3e:6a:ef:ac:d7:0a:
                    24:66:ee:ca:47:cc:30:82:47:62:07:a4:25:d5:36:
                    07:51:27:29:b0:6c:55:8d:28:84:10:f1:34:a1:d9:
                    fb:8e:8e:c1:a3:1f:ad:80:fb:bd:20:38:31:c2:1e:
                    e2:47:56:29:19:a7:65:96:96:ff:7c:f1:9c:fb:0f:
                    44:ef:b6:f2:93:10:ca:99:93:c1:a5:6b:8f:5a:36:
                    71:f1:54:a5:19:96:c9:c1:cb:78:44:28:08:0e:9e:
                    6d:91:60:b5:a4:eb:7b:01:d4:d9:0f:b6:05:4b:8a:
                    b1:2b:74:f3:d4:98:39:3e:70:29:15:51:9b:62:f7:
                    87:c8:9f:31:90:ae:13:2c:00:cc:bf:b8:35:7e:a2:
                    4f:e6:87:b9:74:e3:ec:87:fd:00:1a:93:6c:db:1d:
                    95:33:f5:c9:d9:19:67:72:c2:f9:89:86:98:a0:18:
                    a9:45:aa:b8:e0:c3:12:ec:5d:ec:e2:06:fd:86:0e:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:79:2C:01:69:00:DA:52:DF:E8:D9:A6:5C:CC:86:6D:B7:FC:3A:6E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d2b31d4-4b3f-4620-8d03-5c46eed7119a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2efc::/46

    Signature Algorithm: sha256WithRSAEncryption
         09:95:63:aa:fd:fa:e0:b1:c5:91:f6:86:7c:a4:01:c6:31:93:
         c8:e4:88:2d:c4:e9:50:b9:1f:30:c8:ab:2e:6b:77:70:fc:66:
         68:aa:3a:dc:ff:e7:75:02:b4:43:9b:48:f2:1d:7e:ab:4c:c0:
         ab:cf:72:a5:b8:56:12:6e:3a:8d:6d:12:ba:07:f8:f3:3b:ad:
         be:87:3c:77:d1:5c:18:58:a0:27:75:25:87:f0:2a:0c:a3:51:
         b4:0f:0b:54:68:6f:a0:a6:d8:b4:95:8d:1c:47:d4:fe:d9:9a:
         47:22:5c:5d:c8:ce:e9:19:c7:e9:f7:e4:fd:99:c7:34:d6:54:
         b5:78:cf:3d:83:1b:f4:0d:a4:74:f9:5f:35:0f:0e:72:11:7a:
         80:95:3d:d0:dd:f8:98:d3:1c:08:aa:e8:35:f5:a6:1e:9b:7e:
         5e:f3:7b:4a:b0:b0:cb:27:ce:46:31:75:36:a6:24:c1:55:67:
         7e:ec:88:e8:c8:9a:69:b4:82:32:ac:75:a6:dc:b5:5a:d8:26:
         0c:9a:80:72:7e:0b:73:b1:f7:0e:2b:c6:24:5a:f7:d5:82:13:
         98:56:f3:ba:df:a7:8f:d5:bd:32:2b:c8:cb:c4:ca:08:77:eb:
         a1:cc:03:ca:25:af:00:ed:50:26:1b:ff:8f:ab:49:0e:02:db:
         9d:73:b8:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:39 2026 by rpki-client