Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5d8f3235-3c87-4b2f-b16c-ef1e855cc191.roa
File:                     5d8f3235-3c87-4b2f-b16c-ef1e855cc191.roa (raw, json)
Hash identifier:          NhpO3ELsxPbpzuZLlWXHoObHyYBGZj1bag1ZOrVfBMg=
Subject key identifier:   FD:DB:D5:4C:3F:01:83:85:0A:63:89:D2:3A:B2:B4:F4:E4:2A:7F:61
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       595CA865C38E4E5C124D33DE0C0D43AC76325F7E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5d8f3235-3c87-4b2f-b16c-ef1e855cc191.roa
Signing time:             Fri 13 Feb 2026 02:31:02 +0000
ROA not before:           Fri 13 Feb 2026 02:31:02 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d7a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5c:a8:65:c3:8e:4e:5c:12:4d:33:de:0c:0d:43:ac:76:32:5f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 02:31:02 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=2f0a7657465f8812d458119580ee295855c11855e9e11e829958ad2070357277, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3f:9b:f5:ae:f4:12:82:20:c3:ca:b7:36:89:
                    75:32:f3:3c:06:ad:4f:20:ca:05:82:46:94:aa:a0:
                    cf:12:1f:10:02:7e:fa:2c:3c:6d:d3:d3:de:08:38:
                    cf:d6:38:40:49:6c:9a:50:e7:bd:95:9a:ac:59:ec:
                    b1:bd:28:48:fd:8e:e6:b6:69:9f:dc:58:4b:6a:d5:
                    90:ae:3a:95:1b:e8:4f:6e:5a:37:c9:e3:98:9b:a0:
                    43:ef:d9:1d:83:59:89:ea:e9:ba:72:06:ad:fa:c5:
                    12:68:9b:75:e3:4f:a1:e4:8c:a8:5d:7e:2d:85:bb:
                    f9:ad:05:46:15:95:8c:04:5b:2a:70:9c:a8:a5:ea:
                    e4:fb:71:8e:3e:a1:e7:1c:7a:44:fb:d3:73:21:15:
                    bb:96:13:d5:57:6d:b1:c6:e6:9d:d9:b6:3b:70:c3:
                    b4:cc:ee:b1:9a:73:7a:5f:ad:34:3c:88:8a:84:ef:
                    86:37:c3:55:ad:a9:47:b8:f8:a6:b9:c2:9a:08:6e:
                    95:8a:76:a0:89:82:f1:15:0d:d8:33:97:1c:47:6b:
                    85:6c:6b:36:e4:f6:19:55:e1:91:66:4a:46:62:f3:
                    fe:50:78:0d:72:3e:7c:93:7a:ce:6a:b5:b9:58:bf:
                    7e:cb:5d:dd:86:bc:86:0e:f1:a8:79:90:9e:a9:ef:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DB:D5:4C:3F:01:83:85:0A:63:89:D2:3A:B2:B4:F4:E4:2A:7F:61
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5d8f3235-3c87-4b2f-b16c-ef1e855cc191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d7a::/47

    Signature Algorithm: sha256WithRSAEncryption
         01:18:8a:5a:9c:42:ad:d9:b2:80:e8:83:9a:86:7c:d4:59:df:
         5d:1f:b1:92:17:9f:ea:8f:c9:28:83:4f:cd:6b:7b:32:c4:2b:
         9e:79:54:3d:33:58:2c:43:43:91:95:27:c7:84:88:b7:54:4c:
         68:da:25:58:ea:c1:05:86:81:ee:d5:13:32:f2:2e:c9:fd:09:
         66:b2:92:2f:45:dc:4a:ef:d3:a3:5b:d6:d7:7f:e1:07:ae:24:
         14:5f:9b:aa:d1:8f:c1:a7:35:55:8d:54:0e:5b:61:50:52:b5:
         5d:1e:af:fc:8a:bf:6c:a6:c9:fb:23:04:3c:4c:e1:54:7c:56:
         65:46:7d:39:b0:29:4c:ef:bd:97:b7:b5:c5:6e:83:35:98:e8:
         cc:14:c6:2a:f3:a3:4c:6d:99:d8:72:a1:eb:5c:6b:64:c3:81:
         12:b1:ab:5b:14:32:e1:70:5f:46:ec:6b:4a:3f:15:94:35:7c:
         90:e1:88:d0:bb:9a:a6:6a:a1:e5:25:a4:0c:68:39:c3:28:b3:
         ca:aa:bf:99:6f:3c:52:19:8c:39:c7:8c:90:f7:fa:19:17:7a:
         94:c7:44:97:e7:c0:24:bf:b7:e0:ba:1d:73:9e:ff:60:10:6e:
         a9:57:89:2a:e5:a2:37:54:80:62:d2:a4:49:28:dd:03:36:be:
         7c:b0:1a:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:25:54 2026 by rpki-client