Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/654106ca-054d-4d35-a8ad-c9929c75102e.roa
File:                     654106ca-054d-4d35-a8ad-c9929c75102e.roa (raw, json)
Hash identifier:          VsW63fN9i/hYEySgJMtCBvCCxDkaXOsGxW7pHNOWlsU=
Subject key identifier:   F1:54:05:2E:49:D7:A6:5F:FE:88:E6:5F:19:ED:49:8C:67:DA:B7:B9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5B5CAC26580DF6F861E9AD1B6E6978457C153289
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/654106ca-054d-4d35-a8ad-c9929c75102e.roa
Signing time:             Thu 12 Feb 2026 01:50:54 +0000
ROA not before:           Thu 12 Feb 2026 01:50:54 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:24f6::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5c:ac:26:58:0d:f6:f8:61:e9:ad:1b:6e:69:78:45:7c:15:32:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 01:50:54 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=1496bfbd49e4ce9b0ec739aadb8e70a1595427ef98438936114e2e2a23513348, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1f:8f:e7:8c:a9:e1:ad:14:d6:57:57:d9:d0:
                    49:ae:79:b9:54:1c:15:8c:e7:39:2e:c0:04:79:7f:
                    f7:fb:c1:c0:6d:d4:87:9f:0d:52:f2:fa:51:06:77:
                    34:b0:aa:87:25:5f:3b:cc:64:2f:c8:43:53:22:5f:
                    16:e1:4c:10:a2:d1:87:e5:8c:ce:08:a7:ae:65:67:
                    2a:7c:fa:f6:24:be:19:27:52:b1:95:e8:04:48:42:
                    a6:aa:b5:8f:ee:26:45:77:41:03:53:c6:05:87:72:
                    04:1f:e0:b1:78:fe:2f:32:b2:da:e6:45:a5:c6:2a:
                    d4:07:c1:76:32:bc:a2:36:65:66:21:8f:e6:e5:9e:
                    cd:e9:86:3b:f0:04:eb:8a:e4:6d:ee:21:a6:06:ce:
                    4d:3d:68:9f:d3:78:21:14:ac:0b:09:ff:3c:27:e4:
                    87:d8:b4:ad:7e:16:a6:af:74:6a:0a:09:87:38:ab:
                    b7:6d:59:d2:4d:f7:9c:58:ff:32:39:3d:97:69:35:
                    72:57:e9:e7:bc:08:4b:0d:2e:d0:90:2c:ad:c6:a4:
                    9f:0a:f5:1f:06:db:fe:a5:dc:13:eb:e0:b2:15:41:
                    cd:4b:a8:36:44:cc:28:41:62:75:80:b1:8b:73:f7:
                    1a:e5:96:aa:dc:49:51:fe:b0:f2:ae:0f:0f:00:7e:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:54:05:2E:49:D7:A6:5F:FE:88:E6:5F:19:ED:49:8C:67:DA:B7:B9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/654106ca-054d-4d35-a8ad-c9929c75102e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:24f6::/47

    Signature Algorithm: sha256WithRSAEncryption
         3a:89:25:82:a3:48:c9:b0:cb:fa:57:05:eb:01:33:93:3a:b4:
         13:c4:d7:2e:08:54:51:fb:27:8c:42:24:b7:b2:50:36:e8:6f:
         bf:46:b4:12:f6:bc:50:62:87:44:9b:7f:20:68:27:8e:0a:36:
         4b:93:61:96:7b:ed:77:fc:a9:9c:dd:20:67:33:b6:28:ef:c3:
         b9:b0:0a:58:3f:76:d2:61:a9:c6:fe:9e:57:42:87:2a:eb:e8:
         4c:1c:6c:04:37:1b:70:69:fa:33:37:fd:40:b0:f5:46:b6:f2:
         08:f2:0b:48:3d:96:f8:28:d4:6a:f7:55:8c:a9:22:63:df:8a:
         72:94:0a:3b:87:9a:bb:98:f3:3d:61:70:6e:b1:be:eb:74:86:
         9a:f5:21:9f:94:e7:6c:ab:72:02:ed:08:2b:03:41:cb:70:25:
         6d:87:bc:7b:6d:9c:af:5d:a3:35:37:04:8e:b6:7c:49:ac:b4:
         b5:e1:7c:99:89:26:de:f8:02:db:c5:39:a0:48:68:a8:a1:18:
         99:06:8a:87:4a:d5:b0:b3:c6:97:c7:14:f5:06:e4:fd:38:b1:
         de:6f:62:8a:5d:9c:2f:19:c3:0a:a0:80:b5:11:1f:5b:12:40:
         27:7a:cf:b7:96:23:67:4b:84:ff:f0:44:89:6e:80:64:5b:2b:
         35:b2:9a:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:45 2026 by rpki-client