Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58fe025f-fed1-4b7d-8316-2517b6d54db8.roa
File:                     58fe025f-fed1-4b7d-8316-2517b6d54db8.roa (raw, json)
Hash identifier:          TcqiF924wu+YTcscP4ivApbnjA02y6noVXpwtKdgJFQ=
Subject key identifier:   F0:0E:1F:97:4E:F5:EF:1A:A3:96:A2:DB:00:18:6F:CC:FD:6E:43:25
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       653424B4BA490942874B380FADA0D4158E57235A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58fe025f-fed1-4b7d-8316-2517b6d54db8.roa
Signing time:             Fri 13 Feb 2026 13:00:06 +0000
ROA not before:           Fri 13 Feb 2026 13:00:06 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e44::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:34:24:b4:ba:49:09:42:87:4b:38:0f:ad:a0:d4:15:8e:57:23:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:00:06 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=c1f5886b2bc85d26d61692502b74d1a1aacdf9ef89d88a12b03c55104cb7e10f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:b8:b4:1a:5d:81:11:6e:12:38:f0:48:df:
                    9e:5a:5d:ce:60:27:f3:fe:0f:fe:c3:4f:59:d6:be:
                    c7:ad:19:24:16:67:f2:8f:0c:83:95:a0:06:fa:63:
                    0e:78:0e:54:5e:35:5c:b8:7e:43:c5:fa:f1:f7:49:
                    90:21:b2:d7:dd:7b:15:49:3f:58:fc:dc:67:8a:13:
                    d5:f0:bc:b6:5a:27:6a:d8:75:54:93:77:ee:d9:bd:
                    42:c7:e6:bf:07:aa:db:f0:bd:cf:a5:6b:1b:a9:00:
                    b1:7d:af:60:7d:4b:f1:8d:f7:73:d1:8c:fc:e2:f5:
                    b6:b2:a8:c5:71:86:99:31:7a:80:23:27:a9:25:f0:
                    29:63:fd:11:05:6a:3e:c0:d0:52:12:b0:a2:cd:60:
                    54:ec:3f:2c:b9:e2:b3:3a:bb:3c:d9:41:8a:88:b5:
                    a7:6a:db:55:73:ea:3b:9c:0e:ec:48:7c:fd:2e:47:
                    c4:a7:68:66:91:98:8b:fd:1e:55:3a:2e:0d:03:af:
                    b6:13:64:4e:31:c7:2a:a0:95:fa:51:66:fc:c5:1b:
                    e9:df:43:58:17:71:bf:22:b4:ab:1f:7b:d2:04:51:
                    10:3d:ff:7a:36:17:d7:a0:29:4e:3f:d3:9c:37:dc:
                    67:88:ff:e9:b4:cf:50:f2:30:ea:fb:3c:91:c0:c4:
                    62:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0E:1F:97:4E:F5:EF:1A:A3:96:A2:DB:00:18:6F:CC:FD:6E:43:25
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/58fe025f-fed1-4b7d-8316-2517b6d54db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e44::/46

    Signature Algorithm: sha256WithRSAEncryption
         60:28:5f:9a:2d:ee:53:89:13:0a:1d:3d:e1:53:9d:2c:f2:58:
         40:2c:70:3f:85:c9:5e:f2:47:0a:0d:de:87:a8:f2:06:15:47:
         bd:01:65:19:78:71:90:a9:10:ba:b9:8a:b1:fb:76:ad:db:40:
         76:17:25:34:a6:36:41:6e:37:4b:97:eb:e7:1a:05:04:76:9b:
         94:79:24:88:b4:1c:15:00:04:f0:79:52:a2:37:28:94:82:e6:
         72:e1:b0:7b:a3:85:96:b8:d7:12:02:d6:fe:f5:5a:90:d1:e3:
         3f:98:5b:d1:b9:b9:35:05:c3:f0:8d:1b:bd:52:9d:eb:19:3b:
         cf:8f:e5:72:c9:7d:4f:f4:b8:74:9d:34:e9:a1:03:ea:57:e2:
         0d:a5:ee:a2:70:d4:6a:ed:29:5d:71:28:38:20:e3:40:82:2c:
         0d:69:f6:03:1c:f1:49:50:b0:f0:6b:ca:0b:2b:c0:f4:57:79:
         ae:ff:9f:ab:73:85:e8:27:f0:38:6f:4e:69:95:21:b2:cc:3a:
         33:58:0e:f5:a4:db:0f:ac:70:36:dd:e6:3a:18:ab:67:88:73:
         e9:bf:75:76:45:ae:c9:42:1f:49:e6:fe:b9:39:44:40:72:60:
         97:31:5e:89:1e:98:b5:97:6c:db:cb:66:63:fb:5d:15:cc:23:
         68:ae:d0:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:33 2026 by rpki-client