Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56214461-65f0-4cca-9e3d-229945d93c06.roa
File:                     56214461-65f0-4cca-9e3d-229945d93c06.roa (raw, json)
Hash identifier:          Ok4oQuiWAiqTMSrwO+eD0QX7HNFTgXcYdBPhHL1EAq8=
Subject key identifier:   CF:40:FD:E8:C7:50:9B:8D:32:8B:E5:1C:A8:11:14:2C:62:1B:97:D5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       12421E19B56F70DEEB306BFDBAA9BBEC173FD39A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56214461-65f0-4cca-9e3d-229945d93c06.roa
Signing time:             Fri 13 Feb 2026 13:30:15 +0000
ROA not before:           Fri 13 Feb 2026 13:30:15 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37b6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:42:1e:19:b5:6f:70:de:eb:30:6b:fd:ba:a9:bb:ec:17:3f:d3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:30:15 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=25dc9f6d4d1d1dbb48af0535dc07ba32bffae0a7a82f249ef7947dda51a7cf13, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:3f:68:ae:3d:5b:4e:c7:34:f8:a1:2f:e4:
                    91:70:1a:9e:a1:a0:50:cb:ca:3a:79:e4:eb:8a:03:
                    a3:65:06:dc:2d:9b:6f:fb:e4:5a:7a:92:4a:56:cc:
                    60:30:79:ed:a1:b8:dd:19:d2:86:11:f7:7a:3d:b8:
                    fd:d8:61:96:99:08:fe:cb:58:a8:e2:a6:16:56:00:
                    5a:3a:88:14:13:f3:ed:5f:ca:04:19:24:31:c7:0f:
                    ed:52:d4:55:f1:0b:58:e9:89:81:16:1f:6c:a6:4c:
                    d3:c7:93:9d:53:c4:d0:9b:f9:ad:4c:2d:04:a9:06:
                    f2:57:13:b1:f3:4d:70:f4:4e:4f:6a:6f:22:ea:48:
                    8c:11:d6:c0:83:7a:60:0d:1b:63:bf:f1:6f:20:bf:
                    eb:6e:8b:c5:dc:0c:33:1e:ec:b1:30:1c:f6:bf:e5:
                    fc:60:48:cd:24:cf:96:38:0f:c4:97:a9:67:dd:85:
                    86:ce:cc:f1:22:56:bb:c3:8c:68:55:ee:3d:d2:1b:
                    34:37:eb:fc:77:ae:73:39:a2:b0:4a:3b:f0:0c:bb:
                    45:ad:ae:06:25:e2:42:e6:7c:43:7d:a3:b2:ae:93:
                    c7:46:07:09:c9:b1:45:d8:36:97:51:64:f6:30:51:
                    d0:99:e5:95:51:3d:90:05:10:1e:ea:61:00:b0:63:
                    6f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:40:FD:E8:C7:50:9B:8D:32:8B:E5:1C:A8:11:14:2C:62:1B:97:D5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56214461-65f0-4cca-9e3d-229945d93c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37b6::/47

    Signature Algorithm: sha256WithRSAEncryption
         bf:67:aa:6b:29:14:de:08:49:31:74:f0:cc:1c:c0:a3:ea:67:
         6d:f2:76:99:3c:52:2f:e5:04:09:de:d5:68:4c:eb:7e:2e:d3:
         59:f7:60:65:7e:d9:53:ef:f8:b6:3b:94:5d:25:13:37:2a:95:
         c9:92:3a:ab:77:d6:af:4f:e6:67:8e:4f:fd:77:7e:7d:65:d8:
         67:7b:da:f8:3e:b0:44:3b:3e:59:6a:d0:6b:0b:fc:54:97:76:
         ea:87:3d:2d:88:0e:3b:f3:13:75:ef:bf:6e:58:f1:24:fe:1c:
         5d:aa:47:fb:41:72:a6:d0:73:ec:b8:70:2f:b6:51:42:07:bb:
         fc:37:ed:00:e7:35:77:2c:2a:88:cd:ec:fa:72:29:b4:ba:32:
         50:74:c8:44:89:59:22:30:27:6c:01:22:bf:bc:b8:fa:a7:55:
         0e:68:e0:90:60:0b:ff:8b:2f:f1:fe:bc:cb:c3:78:47:1f:94:
         22:4a:af:6d:de:d2:76:99:39:c3:55:8a:12:7a:5d:72:da:5c:
         e6:3e:06:f3:10:59:5f:8d:63:29:e7:38:8e:d7:9b:3d:a5:f0:
         40:ea:4f:07:02:b4:1c:7e:61:19:70:0b:67:3a:dc:f8:8d:5d:
         cc:1d:01:33:d6:f8:3d:a4:e1:6d:98:e4:50:63:1e:83:27:2c:
         30:ff:20:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:53 2026 by rpki-client