Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/605c8b7f-777b-4016-9cb5-cf5c88cf90c1.roa
File:                     605c8b7f-777b-4016-9cb5-cf5c88cf90c1.roa (raw, json)
Hash identifier:          V11EDDHH64nsaQ//yqd4x27k+cxQBdf3hwBYbo5yKCs=
Subject key identifier:   E3:EA:EF:13:7E:3A:00:68:A0:79:FD:4F:16:C8:DF:B2:47:6D:00:62
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5521DBF9D034FBF0116E30B60F9E33DE31DCE8DF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/605c8b7f-777b-4016-9cb5-cf5c88cf90c1.roa
Signing time:             Fri 13 Feb 2026 09:40:59 +0000
ROA not before:           Fri 13 Feb 2026 09:40:59 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2be0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:21:db:f9:d0:34:fb:f0:11:6e:30:b6:0f:9e:33:de:31:dc:e8:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 09:40:59 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=70b28a6322f34f623a9229bbeec1115d884eb265c3ac1d0618481c4010cc062c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:e2:5c:da:98:e9:2b:d1:0a:95:93:44:e1:
                    13:a5:0e:24:b3:b6:7e:b9:66:0e:0b:f5:fd:99:7a:
                    3f:03:c2:86:89:6a:0b:48:e4:87:6c:42:b5:1c:ea:
                    34:f9:df:d4:2e:c3:6f:f6:99:ac:59:fe:ec:2c:02:
                    d1:08:a6:65:93:ea:56:01:9c:54:61:73:07:6d:b2:
                    63:7b:5b:0d:cc:a6:12:8e:0f:66:51:9b:0b:72:24:
                    0c:74:da:47:70:49:34:22:2b:7a:a1:9b:78:b2:c8:
                    e4:86:d5:07:c5:7a:7f:72:b6:e5:bf:03:50:fb:39:
                    71:ce:43:cd:07:90:46:4f:f8:03:65:f3:e4:f3:94:
                    6d:01:07:1e:5f:19:a7:5b:df:24:22:9a:d3:c8:d8:
                    5f:70:18:3f:0e:4a:b6:8c:83:12:af:69:a3:30:d9:
                    34:58:92:17:b9:b2:75:57:12:f9:9a:9c:f2:5a:e4:
                    76:9b:a2:f3:62:7d:ca:48:57:73:c6:cf:40:d6:7d:
                    92:9a:14:e9:bc:dd:98:3c:ba:68:e4:79:33:d7:02:
                    e2:f1:1f:d9:48:96:0b:a0:45:ee:a2:2e:d2:33:5b:
                    7f:7c:c7:c5:55:d6:46:0a:a2:bf:1a:14:57:5d:7c:
                    44:df:ed:db:fa:de:54:a2:c6:89:29:c0:e9:30:23:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EA:EF:13:7E:3A:00:68:A0:79:FD:4F:16:C8:DF:B2:47:6D:00:62
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/605c8b7f-777b-4016-9cb5-cf5c88cf90c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2be0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:c6:b9:7a:77:d8:9b:f6:44:52:da:e0:15:ef:2d:bd:7d:dc:
         33:3e:53:ed:ea:50:af:ab:a2:9c:b6:57:c7:70:f7:6d:f0:2e:
         df:88:45:7f:99:23:e7:72:c7:99:5b:7a:4b:1d:bd:5f:b5:52:
         64:bf:4c:6e:ee:d8:32:49:59:9a:b2:f9:77:ed:ad:93:66:10:
         1f:62:c8:0d:ad:51:04:c0:3b:68:be:80:be:6b:71:f1:74:6e:
         e3:5d:1b:d4:57:6f:ad:5d:97:4b:49:c0:4d:ab:06:c1:12:c3:
         d0:67:3a:f9:61:fc:11:b0:ea:df:25:0a:d6:37:27:e2:7a:7a:
         38:47:d5:f6:5a:c0:d7:80:cf:21:b5:32:3d:f1:bd:df:8e:66:
         ff:54:23:99:00:4f:93:9d:04:d3:28:b2:95:c3:b6:fc:b6:fc:
         35:8f:78:10:97:96:b6:74:8a:97:97:ff:43:29:90:1a:87:93:
         c1:bd:ee:c7:f8:f3:0f:63:12:ee:54:a9:dc:0d:a5:5c:be:94:
         17:bd:cb:04:8c:f5:95:8f:10:42:ba:2a:f8:45:2e:3b:a3:90:
         bc:c9:06:f9:1c:90:f4:79:de:8f:94:86:47:01:4b:88:e8:ab:
         49:66:e7:1c:b4:a5:58:b8:ac:cb:16:21:73:eb:66:5d:40:8d:
         41:e0:67:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:15 2026 by rpki-client