Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/542950e1-54f8-47ef-a2fa-541a75f2d3de.roa
File:                     542950e1-54f8-47ef-a2fa-541a75f2d3de.roa (raw, json)
Hash identifier:          iz+p8GmnZQX7R1VP3ZA5vrzAIIXPwvOIWRB7oLP5bBc=
Subject key identifier:   84:08:3A:8D:81:BB:56:EA:27:A3:71:44:2D:B2:16:D1:E3:79:87:48
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       26FEFE8DE1C9B2E42199A50A8DB11F98F66FF743
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/542950e1-54f8-47ef-a2fa-541a75f2d3de.roa
Signing time:             Fri 13 Feb 2026 11:41:33 +0000
ROA not before:           Fri 13 Feb 2026 11:41:33 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ffc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fe:fe:8d:e1:c9:b2:e4:21:99:a5:0a:8d:b1:1f:98:f6:6f:f7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 11:41:33 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=83a4bf25a2670e904b4c250ff9ef340928b2adf9485050cdd726225b7bd3ede7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b7:0e:a2:87:ee:19:58:d7:c4:ea:7f:5a:0a:
                    c8:d3:fd:d4:27:a9:9e:cb:68:48:24:2e:2b:cb:77:
                    aa:92:08:16:2e:fe:a6:b7:cd:a3:94:d9:6f:81:b4:
                    a5:a0:e3:50:94:ee:f3:3f:c3:61:fa:6b:73:f7:91:
                    14:1f:e6:d6:d1:95:13:d5:fb:67:ba:20:e1:9c:18:
                    06:0f:5b:c4:e0:89:ef:f2:b7:15:e9:31:e0:16:a2:
                    19:cf:69:f1:38:bf:a7:25:63:bf:40:0b:fe:22:b8:
                    b7:46:73:7d:01:a1:0f:07:48:fa:95:1e:09:62:e8:
                    f4:8a:a4:df:aa:25:90:76:c8:29:c9:cf:b2:61:0b:
                    ba:47:f5:e8:3c:0b:46:93:79:d5:5f:ce:5a:b7:45:
                    e9:ea:6d:f5:a2:30:06:4b:78:6b:8a:e6:2a:60:ae:
                    af:f4:b1:d4:e1:03:b6:dd:0a:7f:de:42:68:78:ad:
                    20:50:c6:f1:60:37:15:9f:ee:e2:1a:2e:32:cd:e3:
                    d4:b6:25:80:13:d5:56:6d:93:ed:22:76:5d:f0:5d:
                    bf:c0:ab:d6:4d:be:1e:7e:27:f5:f2:79:b2:93:a7:
                    f3:a9:08:86:ea:e8:8d:f8:0a:e0:05:a4:80:4c:18:
                    b8:29:07:5b:55:98:7d:1a:cc:2a:02:40:7f:8d:71:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:08:3A:8D:81:BB:56:EA:27:A3:71:44:2D:B2:16:D1:E3:79:87:48
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/542950e1-54f8-47ef-a2fa-541a75f2d3de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ffc::/47

    Signature Algorithm: sha256WithRSAEncryption
         10:57:3e:f2:67:5a:1e:f3:33:ee:02:c0:6e:3b:20:1a:2a:f7:
         a5:7e:65:1b:e1:c7:0c:70:0c:43:07:12:bc:f4:24:da:e4:5d:
         35:38:6a:3a:6a:c7:dc:2e:4d:ee:2e:6d:72:70:98:cf:04:2a:
         af:83:58:7e:a1:fa:1c:60:86:6c:35:ba:8e:e6:ca:14:5c:c4:
         80:34:d1:34:0a:2f:37:9e:9d:0b:2c:9a:3b:46:ea:5b:ed:89:
         fb:3e:b9:5f:91:46:93:be:66:ff:1e:ff:c3:4b:36:2f:70:8a:
         6c:37:c7:02:6e:ae:de:84:37:38:15:c5:8e:00:9b:ee:f8:33:
         be:f4:2b:70:8f:fb:e4:df:ac:68:f1:4f:6e:27:05:4f:3d:af:
         ba:51:a0:dd:39:0f:50:89:e0:9b:b3:96:71:ac:4b:fd:62:49:
         07:06:1d:47:c8:8d:12:32:38:9a:7d:e5:82:17:83:9a:df:ce:
         14:f9:7c:2d:5d:ac:a2:0e:70:8a:05:4f:aa:f0:fd:c5:35:1e:
         f2:e0:c9:54:5c:98:16:69:1e:89:40:98:46:c2:2c:23:8b:ee:
         dd:c4:08:fa:a1:5d:99:51:82:fd:f3:86:b3:63:a8:b9:b2:d3:
         45:56:87:e1:71:46:23:08:52:7f:21:c3:80:27:ef:17:94:95:
         02:98:31:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:26 2026 by rpki-client