Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e2c6556-eb0d-481d-aa8f-22fc67dc106a.roa
File:                     5e2c6556-eb0d-481d-aa8f-22fc67dc106a.roa (raw, json)
Hash identifier:          eVmuUIPEXeypYSG7YQnXXbj2nmINsVv7+pGE8oKT1oU=
Subject key identifier:   07:E8:BB:D5:19:84:BE:07:A8:E5:C9:07:5E:B3:AA:4B:F2:C7:A6:E3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2782BBA1D9BD282AB97D60DA294C1F514FEC131A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e2c6556-eb0d-481d-aa8f-22fc67dc106a.roa
Signing time:             Thu 12 Feb 2026 01:31:28 +0000
ROA not before:           Thu 12 Feb 2026 01:31:28 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:25c0::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:82:bb:a1:d9:bd:28:2a:b9:7d:60:da:29:4c:1f:51:4f:ec:13:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 01:31:28 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=7fc14936d3e843a1dda14fc018706e2aaf6bfa4f8ca82cfc4431c0ff29a19644, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:16:fb:97:4c:7d:56:e0:b9:92:e7:b4:80:
                    7d:b5:50:10:cf:59:47:7e:e3:a8:62:00:75:db:eb:
                    59:ff:54:51:4e:37:17:3e:98:0e:bf:c4:c5:92:30:
                    f2:a5:ea:74:95:e1:ce:d2:c6:4e:63:53:45:15:41:
                    42:9c:89:d1:1c:4e:66:21:7a:c4:8d:8d:e9:9c:ba:
                    33:9f:71:23:39:ea:7f:d0:8d:f9:1d:78:22:b7:59:
                    f2:07:ca:bc:a7:95:e7:91:f9:c6:04:8a:b0:b4:8f:
                    e3:0c:74:4b:60:6a:8d:47:83:db:55:93:33:48:41:
                    7d:ae:1d:45:d2:12:d2:e4:d4:f4:d4:8f:f2:5c:4e:
                    e1:0b:7e:65:65:86:bd:9c:49:1e:fa:49:c5:f0:cf:
                    18:e0:ef:30:09:ad:91:9e:5e:1d:27:56:fe:d0:ae:
                    c4:37:c2:af:62:73:ba:41:35:08:ab:62:de:76:bb:
                    0b:a1:6c:54:6b:0c:80:6d:cd:56:d8:23:2e:3d:15:
                    16:22:9a:c7:77:9a:e0:fe:72:e9:a0:c2:7c:92:e9:
                    cf:09:d5:ef:f7:ab:c2:f9:17:0c:41:58:62:12:e6:
                    34:b4:b3:93:c5:70:3b:35:2c:d8:c5:3e:4b:46:dc:
                    4c:ca:65:5b:87:5d:02:20:fd:b6:16:53:eb:0d:ba:
                    e7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E8:BB:D5:19:84:BE:07:A8:E5:C9:07:5E:B3:AA:4B:F2:C7:A6:E3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5e2c6556-eb0d-481d-aa8f-22fc67dc106a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:25c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         5b:6f:a2:99:29:8e:29:fc:f1:b0:95:0f:a0:fa:d3:b9:25:1d:
         36:c0:aa:38:92:81:e2:be:e9:a5:1e:2f:ca:a6:c7:cc:72:fb:
         40:fe:76:4d:31:a5:68:a9:2e:e4:bf:d1:a9:08:64:31:1a:1d:
         5c:f8:c2:8f:c1:e0:bb:58:cb:ba:c9:18:30:bd:69:70:1c:96:
         66:52:ab:69:2e:04:cc:49:a1:70:83:78:02:a0:d8:23:55:7f:
         f8:07:fe:70:66:bb:d7:5f:cb:b9:68:05:f2:1b:4c:87:2a:5b:
         7e:22:59:f4:ac:b9:17:ba:20:7f:3a:7a:d5:09:c4:bc:c5:4e:
         18:8b:b6:89:42:6d:e1:16:20:d5:52:e9:07:98:ce:b1:e3:3b:
         43:8a:35:ad:e2:51:2e:51:13:b3:d3:f9:04:bb:dc:71:8e:ef:
         cd:ec:22:41:03:2a:59:3d:95:6c:89:f6:22:91:88:bc:2e:77:
         82:f5:43:aa:17:80:03:78:b7:f7:5d:f1:47:9e:dd:bb:07:26:
         63:11:40:3c:19:bf:1a:d2:d2:fe:33:88:cb:10:de:4c:41:c7:
         8b:dc:3d:e1:a9:65:4b:06:e8:0e:02:83:59:c0:64:1b:b1:42:
         2f:89:01:39:37:c0:f5:c9:35:a0:fc:45:52:a6:11:7e:59:50:
         dd:9a:0b:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:04:56 2026 by rpki-client