Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60a34d26-3383-4928-aa22-a325a80a651a.roa
File:                     60a34d26-3383-4928-aa22-a325a80a651a.roa (raw, json)
Hash identifier:          LXW3GJL0/Qxcc9z+G5pSfv9Fo6Pc9vh+CWD3AjqbQTM=
Subject key identifier:   79:FC:00:A5:54:16:49:5B:9C:64:07:37:10:44:E2:E9:EF:2A:2D:12
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1A4E9085858D60BA52694CD05E30BF1D121FD80A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60a34d26-3383-4928-aa22-a325a80a651a.roa
Signing time:             Thu 12 Feb 2026 03:20:07 +0000
ROA not before:           Thu 12 Feb 2026 03:20:07 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b1c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4e:90:85:85:8d:60:ba:52:69:4c:d0:5e:30:bf:1d:12:1f:d8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 03:20:07 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=6c620bf825897951c847427686321c5fa0266da63cc8b46b8e9d0ae65eb55c51, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:69:f9:52:08:aa:74:1f:44:1f:d5:34:2a:5c:
                    b0:a6:e9:3e:27:2e:cf:76:a2:9f:4b:b2:b3:84:8e:
                    e1:6e:9e:58:b3:9a:7b:85:7e:85:ad:14:38:08:bd:
                    33:68:7f:13:3d:cc:3a:c6:c2:85:08:2f:94:4d:3c:
                    e5:8d:d5:c5:f3:63:85:42:f4:81:46:39:4f:ac:48:
                    a0:f6:36:cb:6f:9d:b7:26:37:70:67:26:5b:af:69:
                    0e:f4:f2:24:1f:20:cd:8e:be:9f:b6:90:8f:4b:b8:
                    d7:1a:f7:13:ed:ff:4b:49:50:a3:74:a7:6e:00:1c:
                    75:84:2b:a2:73:9c:af:b5:fb:40:ba:d3:77:cd:dc:
                    8e:de:ac:b6:be:1b:66:6c:c6:44:96:29:cf:ba:51:
                    b8:f3:b7:76:61:67:a0:47:65:6f:79:6b:17:41:17:
                    19:56:1f:ea:ff:ed:e0:16:23:84:e2:99:52:67:b3:
                    fc:fe:a0:71:f2:d1:ab:46:b0:7e:56:9b:83:bd:f9:
                    36:c0:7c:3f:8d:f4:db:08:5a:71:2e:c6:39:d6:6f:
                    83:32:de:fb:0d:3c:5a:4c:d6:cc:30:6f:47:01:9b:
                    71:62:3c:8a:0a:f3:45:a6:7c:33:30:67:4d:7f:fc:
                    fe:fa:9e:2a:b3:c0:e8:33:17:e1:45:76:dd:95:89:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:00:A5:54:16:49:5B:9C:64:07:37:10:44:E2:E9:EF:2A:2D:12
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/60a34d26-3383-4928-aa22-a325a80a651a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b1c::/47

    Signature Algorithm: sha256WithRSAEncryption
         49:11:66:b1:8b:77:31:fa:fb:ef:fe:08:97:ba:33:8d:21:bd:
         bd:aa:0d:79:1b:8d:5f:e7:c8:12:0b:8f:eb:8f:3d:72:c0:f0:
         28:18:d9:76:6a:09:f8:95:6a:0c:0a:86:d1:c6:22:6e:6c:f1:
         67:e8:47:7e:eb:5d:74:3b:0d:e5:2f:49:29:22:5e:9b:4a:e7:
         41:63:97:85:2f:8b:f2:07:f2:43:7a:6d:59:29:c9:37:5b:bc:
         68:77:ef:6c:0b:4a:05:bb:fb:44:b2:5f:a7:32:44:37:f3:c8:
         c7:88:c6:5b:6d:4e:89:37:a3:c0:5a:3e:c8:13:9b:af:89:27:
         39:a2:f9:51:46:b6:54:00:41:7e:45:29:de:0c:d4:67:5d:71:
         84:20:31:93:3d:bb:48:e2:cd:1c:b9:fc:e7:0c:96:ba:2e:bc:
         73:e1:66:ef:4c:24:91:bf:41:0e:50:c5:e9:53:24:36:47:d1:
         c6:22:5d:23:11:cd:42:3a:53:cf:f8:7b:a3:6c:12:87:ab:a5:
         59:c8:09:b3:9c:46:22:dc:9f:4d:23:cb:87:d6:c0:da:7c:f0:
         82:91:47:d0:08:23:4e:fa:d8:44:90:1b:b6:5f:c7:34:c7:7f:
         52:90:0a:19:a1:0a:6d:8e:68:89:4b:c9:b1:cd:4e:96:1f:09:
         38:6c:cd:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:34 2026 by rpki-client