Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57f1ceee-c793-4563-a54c-afaca6446d7d.roa
File:                     57f1ceee-c793-4563-a54c-afaca6446d7d.roa (raw, json)
Hash identifier:          QGqmiUGqj+IERUkbexZv1wZkfOASFMsqt9J4ckYfpDE=
Subject key identifier:   C8:B8:24:E8:83:32:AB:03:8D:45:FF:BD:59:EC:6C:5C:E9:AF:62:CA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0AB8777360A5EE5D7A1D269B7BF5D6AB18924FED
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57f1ceee-c793-4563-a54c-afaca6446d7d.roa
Signing time:             Fri 13 Feb 2026 06:41:31 +0000
ROA not before:           Fri 13 Feb 2026 06:41:31 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ce4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b8:77:73:60:a5:ee:5d:7a:1d:26:9b:7b:f5:d6:ab:18:92:4f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 06:41:31 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=118744f8433d2d67986d458d26e21ca425f81ee1992ed5d8043363e51f7017ae, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a7:4c:86:fb:40:08:56:0e:5f:12:12:d0:da:
                    02:03:37:2a:1b:1a:5d:09:df:61:b7:ee:ed:44:4a:
                    15:80:5c:b9:08:11:14:23:0d:f5:69:70:f2:1d:11:
                    c7:02:8d:5d:53:35:fe:4a:9a:69:67:75:3a:d2:ff:
                    37:c8:32:3e:c2:2a:ff:0e:a1:b9:aa:1b:6a:fa:87:
                    cd:73:0d:e2:de:fe:26:6a:a9:1d:bf:ce:bc:c0:99:
                    c6:c0:6b:81:6f:b7:d3:84:d7:6b:ab:c6:cf:d0:2b:
                    b9:0f:59:09:37:99:8e:52:55:b4:84:c3:07:00:6b:
                    4e:69:96:03:ae:0c:85:44:6a:75:b1:28:19:5d:85:
                    18:16:e1:6d:84:c8:d9:59:d1:65:4d:75:f8:a2:2a:
                    56:f5:cd:3c:8c:12:39:2a:da:e6:18:a5:f5:a9:30:
                    7a:c9:9e:c9:e5:2e:42:94:f6:ad:42:9b:f3:02:b4:
                    a4:86:6a:13:ac:99:28:19:8c:7f:eb:cc:ca:80:6b:
                    ad:9a:53:47:9a:8c:b4:60:04:df:ab:03:c9:78:92:
                    4c:48:c9:cc:dc:2b:99:5e:43:a6:4d:c2:cf:ab:39:
                    65:97:c6:43:da:9a:66:7b:5f:85:60:3f:4c:ec:e6:
                    e5:f3:0a:b2:3d:f3:1c:18:6d:51:75:06:cd:81:6e:
                    7e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B8:24:E8:83:32:AB:03:8D:45:FF:BD:59:EC:6C:5C:E9:AF:62:CA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/57f1ceee-c793-4563-a54c-afaca6446d7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ce4::/46

    Signature Algorithm: sha256WithRSAEncryption
         03:42:2a:55:58:ee:18:86:e6:06:a3:3b:30:ec:8c:a0:0d:a2:
         05:9a:89:7b:ac:f1:a7:ff:d3:99:ae:ed:ab:7b:df:c4:37:88:
         29:e1:d3:6a:8e:46:a3:58:72:ae:40:fe:d0:30:c1:13:4e:9d:
         0f:91:02:2d:81:c3:9b:e3:66:ab:46:ef:b6:55:c9:9b:10:91:
         76:ca:14:84:9b:ba:d9:24:f8:72:f8:59:88:db:ea:c3:26:b8:
         56:89:a5:2c:40:e1:20:89:3f:4d:f4:40:7d:b4:84:be:d2:4b:
         d9:5a:54:f0:39:9f:37:d2:c3:8a:d7:06:0d:18:6f:d5:5e:9d:
         b5:40:c3:7d:3a:5e:13:72:42:1c:e8:5a:a9:f0:09:be:16:4e:
         04:d7:99:09:9b:2e:7a:8f:27:85:42:72:e1:9a:d7:5c:6f:83:
         68:5a:8d:e1:aa:d5:ea:0e:d9:7a:ea:ed:5a:dc:28:ee:0a:88:
         ef:27:5c:ea:6d:e8:a9:db:9a:91:b3:35:9c:7b:51:2d:50:13:
         79:d6:e3:54:c3:83:ce:77:53:ba:49:ea:1e:d9:13:33:65:27:
         9c:87:e8:2f:0c:af:0a:81:99:11:2a:d0:89:dd:ba:4d:43:af:
         66:c5:08:94:2c:42:fb:ff:33:4c:8e:ad:95:f6:30:2b:f2:b8:
         d8:40:65:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:26 2026 by rpki-client