Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b3e1d7f-e67c-46e4-bd00-178c267dcfec.roa
File:                     5b3e1d7f-e67c-46e4-bd00-178c267dcfec.roa (raw, json)
Hash identifier:          SDW9ZCz2DQexOKPNp2SBSHZ1uq7bKlvc26AMV7zTBmQ=
Subject key identifier:   28:F6:3F:CB:0B:48:A1:E0:F6:E3:08:6D:AE:B1:23:B4:D1:14:C1:89
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1DAAF4AA698289A09BB32E3DE2BF1828AF0AD08E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b3e1d7f-e67c-46e4-bd00-178c267dcfec.roa
Signing time:             Thu 12 Feb 2026 03:30:08 +0000
ROA not before:           Thu 12 Feb 2026 03:30:08 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d6a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:aa:f4:aa:69:82:89:a0:9b:b3:2e:3d:e2:bf:18:28:af:0a:d0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 03:30:08 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=56ab7be438132f44085b4eec504b232ee5459121e1966352be359c107b5ef866, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:e5:e9:75:1e:b1:3c:c1:b4:78:85:ca:29:
                    cb:60:77:c6:cd:f3:05:7d:b1:c1:e6:d2:cc:52:a8:
                    fc:92:c8:f2:38:86:cc:67:25:7c:98:20:70:25:c2:
                    10:5c:47:66:6c:b7:2e:61:86:08:a9:d7:b8:76:fc:
                    d6:d1:dd:48:8c:95:38:50:20:ef:b7:9c:be:cb:c7:
                    2b:b3:03:e9:6c:a4:01:9d:94:8f:2f:11:ca:8e:58:
                    ac:39:17:ad:98:ce:31:d3:bc:ec:c9:05:43:c9:7a:
                    29:99:38:0f:17:5c:60:35:19:ea:5a:18:c6:fc:92:
                    6b:f8:d8:25:fb:ef:30:db:e9:85:a6:96:0b:a2:bb:
                    ed:0b:61:33:07:d2:44:13:e9:ec:1a:00:40:6c:ea:
                    81:68:53:db:1a:4d:a7:7e:7d:cf:b7:1e:1e:3a:d5:
                    c9:f7:46:48:80:82:62:88:0e:73:73:2a:a3:32:6e:
                    b1:b1:ff:e7:34:e3:17:ca:3f:35:21:3c:b6:44:c4:
                    a6:3e:93:c4:c4:a3:63:4f:71:aa:60:20:d4:46:ee:
                    7b:3c:36:92:d0:47:2b:4f:42:bb:7e:9a:61:ac:61:
                    4a:b2:21:19:8e:08:b0:41:7e:ed:42:47:48:d5:e6:
                    1c:66:b5:09:f5:33:ec:a5:c3:1f:10:32:df:6a:1b:
                    64:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F6:3F:CB:0B:48:A1:E0:F6:E3:08:6D:AE:B1:23:B4:D1:14:C1:89
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b3e1d7f-e67c-46e4-bd00-178c267dcfec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d6a::/47

    Signature Algorithm: sha256WithRSAEncryption
         56:1f:5e:2b:72:72:36:90:6b:59:45:07:e5:5d:9c:e8:1d:8a:
         64:12:cc:22:25:d9:ae:7a:43:76:be:cb:f0:53:fb:e7:e4:a8:
         66:77:7d:42:d9:04:c6:4f:94:2a:47:78:f3:96:0a:c4:1e:41:
         ac:e8:c1:4e:7e:24:08:a9:cd:ae:a5:30:39:88:e8:a2:a8:db:
         87:2d:99:05:44:7d:d5:f9:5a:5b:3f:9c:65:57:71:24:76:9e:
         0e:1e:6d:25:63:83:d1:e4:0b:4e:01:2e:54:2b:ed:22:39:7d:
         48:e6:2d:d1:63:4e:06:e4:d6:9a:51:42:5a:d3:ec:73:c0:cd:
         3d:a2:51:78:b8:1e:2f:aa:18:70:43:d9:d4:8b:1b:25:43:67:
         9b:db:87:5d:89:45:68:d3:84:4b:c7:28:ae:e0:e0:9e:5f:59:
         db:c0:1f:c1:da:14:e2:2d:9f:1b:20:69:cb:d5:5d:f8:bd:af:
         44:74:c2:02:ee:d4:1b:f8:93:47:88:72:89:19:98:8b:db:3c:
         34:ae:af:28:be:5a:cb:17:d5:fc:86:e1:ab:96:38:04:5b:05:
         2b:ab:e0:74:af:ac:b1:80:b1:a7:87:0a:38:a5:c9:de:32:58:
         cf:21:90:6d:31:f9:03:e8:53:0c:54:1e:51:71:27:57:63:eb:
         db:a1:e8:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:51:51 2026 by rpki-client