Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5301d401-7c1a-429c-a831-b8ccecec154a.roa
File:                     5301d401-7c1a-429c-a831-b8ccecec154a.roa (raw, json)
Hash identifier:          hYs2dWAA8Iw56cxkBmeVIBScAngJi+BmozPmKKZMHHQ=
Subject key identifier:   34:3A:5D:16:12:0A:3F:91:B7:9B:55:E1:69:67:96:DA:F3:F2:BB:42
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1032C83114CFB0F9AB004719AC8EF7ACE5ABFBF2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5301d401-7c1a-429c-a831-b8ccecec154a.roa
Signing time:             Fri 13 Feb 2026 10:31:22 +0000
ROA not before:           Fri 13 Feb 2026 10:31:22 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:362a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:32:c8:31:14:cf:b0:f9:ab:00:47:19:ac:8e:f7:ac:e5:ab:fb:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 10:31:22 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=3acb056f797eeb06c43fade1a22ab02663075f94cb03abe9d295296ff0f91fd7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:06:0c:0a:a9:be:24:22:0e:05:b9:d9:79:ff:
                    d4:3f:13:fd:2f:4d:22:6d:f6:1f:c4:aa:1b:23:af:
                    2c:8a:85:dd:29:6e:d4:cb:e0:53:1c:d3:01:d3:60:
                    2c:10:9a:85:4a:08:37:c1:dd:cd:2a:0a:83:43:92:
                    8d:92:bb:b6:fd:c2:54:74:a6:2f:51:41:f3:fb:4f:
                    a1:8d:2c:41:bc:20:da:d6:6a:0a:f5:63:ff:83:a6:
                    8c:0e:4d:54:1f:6e:4f:6a:8c:d7:e0:71:f3:39:8c:
                    26:46:87:6b:58:e7:66:e9:e2:7b:ba:5a:2c:f1:f5:
                    fb:41:3a:ec:96:3a:3b:d0:d9:ea:58:a6:7a:54:a3:
                    f8:1e:a4:7a:6d:81:bb:03:12:ac:48:c5:9b:7c:86:
                    13:ab:71:d7:e0:4e:4c:16:2b:19:82:c1:4f:0c:5f:
                    da:fe:30:49:eb:11:57:38:61:27:6b:1b:e8:2e:06:
                    74:17:ed:bf:55:24:8f:6c:05:01:13:7f:14:3c:dd:
                    07:e3:d2:eb:5c:d2:73:fe:e9:7d:04:60:3e:59:00:
                    64:d8:7a:6c:42:bb:73:24:0a:66:2a:b6:3c:91:da:
                    a7:46:9f:fc:e1:9b:3f:f7:02:ce:71:b3:80:eb:f5:
                    eb:5c:59:8e:7f:2a:f5:16:92:0d:7a:d7:fd:92:6f:
                    a1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3A:5D:16:12:0A:3F:91:B7:9B:55:E1:69:67:96:DA:F3:F2:BB:42
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5301d401-7c1a-429c-a831-b8ccecec154a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:362a::/47

    Signature Algorithm: sha256WithRSAEncryption
         ab:0f:cc:6e:72:3d:27:77:a7:f9:5c:b9:1e:fe:3c:2c:37:90:
         b4:8d:b0:22:e8:83:d8:11:b2:9d:d1:c7:02:79:8e:e5:f3:c3:
         3f:50:fe:61:66:1b:8c:ae:f8:ab:b6:e8:ab:66:10:8c:4b:56:
         f3:66:28:67:53:0d:25:61:fb:c7:68:44:bd:d6:67:b6:9e:04:
         db:63:48:7d:ec:94:ac:e9:aa:6f:ae:49:1a:cf:42:cc:12:82:
         fe:d6:86:df:97:31:a2:3b:91:05:bf:49:99:9f:9e:bc:df:71:
         cc:b2:93:78:4a:d6:80:d2:62:d1:63:6a:8e:dc:f5:fc:08:ba:
         bf:e9:73:50:1c:47:88:35:9a:51:fa:59:ca:73:98:2b:9a:56:
         68:e6:6a:2d:35:8c:93:33:92:5e:a5:44:9a:15:7b:c6:fc:1c:
         ec:61:d1:ce:f0:08:5e:ae:43:de:c7:5a:c6:64:f8:0b:a8:10:
         34:1b:bc:01:89:b5:b1:1a:b1:3c:b4:a9:4e:28:ac:1c:49:16:
         c2:8c:7d:c4:c4:c9:92:19:14:22:97:d4:31:77:ee:5b:9d:94:
         64:a1:02:38:b9:8c:6a:fd:0d:6d:86:8f:22:9a:da:db:e7:35:
         1c:95:f9:5a:ec:7c:53:a4:05:bb:56:1e:ad:8e:e6:65:65:de:
         5e:36:b9:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:37 2026 by rpki-client