Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6544dc11-b234-4da1-9eb6-2121e14402ad.roa
File:                     6544dc11-b234-4da1-9eb6-2121e14402ad.roa (raw, json)
Hash identifier:          9pp8VCpmkj+oQNSHydMRXFYzx9+MlNz7V98SwnXGdDA=
Subject key identifier:   79:DC:79:07:44:52:AD:C4:B9:C7:07:8D:B7:17:E8:FA:07:7E:92:C6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3F38BA296FD12EB61071DED662A4921E778EB47E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6544dc11-b234-4da1-9eb6-2121e14402ad.roa
Signing time:             Fri 13 Feb 2026 02:01:58 +0000
ROA not before:           Fri 13 Feb 2026 02:01:58 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c80::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:38:ba:29:6f:d1:2e:b6:10:71:de:d6:62:a4:92:1e:77:8e:b4:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 02:01:58 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=434a8f050166386fab2e96e6de7d999592e6cb2cc637d12d585c8583ab2e5694, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:a4:a9:bf:e2:73:88:b6:15:8d:3a:f9:ff:
                    82:da:9d:f4:57:b4:d2:33:36:3d:af:ac:b5:60:03:
                    cc:3c:ac:be:e5:13:7c:80:21:f8:1a:19:88:6e:28:
                    f6:e4:e3:ab:9e:3b:62:6b:93:01:7d:5a:52:89:17:
                    28:2c:d7:32:e5:ef:b5:a2:01:27:30:5c:e9:e3:44:
                    a0:0a:af:a5:54:2c:55:18:81:3f:d3:26:d2:8d:34:
                    c0:dc:4b:f9:64:2e:0a:a6:3a:bd:15:c5:ab:bd:a3:
                    02:c0:90:ba:4a:55:f8:46:71:a0:7b:1f:cf:4e:4e:
                    18:fb:dd:1e:da:2e:a5:fb:76:4a:1c:8d:c6:0c:c0:
                    dd:71:bd:52:e8:99:0a:0c:6c:57:22:e7:49:09:23:
                    19:af:18:1e:b8:33:8b:5b:14:df:c4:47:61:71:01:
                    5f:dc:6b:12:e3:a9:53:95:f9:23:fe:5f:03:6a:ed:
                    b1:05:3e:0f:8b:67:1f:a6:58:98:1d:d9:a3:d2:97:
                    32:5b:36:d2:bc:1c:1e:95:df:e2:87:3c:29:18:81:
                    59:41:41:3f:d1:9e:04:52:c8:fb:38:07:4d:67:43:
                    34:7c:81:5f:38:ea:76:b3:c3:bc:c3:e6:07:66:20:
                    f8:99:8f:df:ed:d0:12:ae:b2:d6:7b:af:cd:25:f2:
                    4a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DC:79:07:44:52:AD:C4:B9:C7:07:8D:B7:17:E8:FA:07:7E:92:C6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6544dc11-b234-4da1-9eb6-2121e14402ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c80::/47

    Signature Algorithm: sha256WithRSAEncryption
         06:c4:40:d4:27:df:bf:4e:42:52:41:ff:b9:99:3c:16:c2:c8:
         4a:e2:91:2c:7d:31:24:3e:c8:21:4b:66:f9:9b:4f:9e:df:47:
         94:d2:d4:4d:e7:9e:27:18:3e:ac:4f:86:cb:b6:61:80:18:00:
         15:0c:fc:52:32:61:e7:d7:0d:02:c0:1b:3d:02:21:1a:59:68:
         c3:b9:e3:80:de:95:99:ff:0c:4b:2b:8c:a1:24:7f:24:23:85:
         61:36:fd:2e:c7:79:f5:fa:9b:1b:ae:be:b6:32:2c:c7:35:09:
         04:a1:63:e4:1c:cd:98:8c:9c:6b:77:08:eb:4f:53:58:de:18:
         e8:bf:c8:57:aa:9f:77:19:88:4b:d3:83:ac:0e:b6:8f:ab:cb:
         85:62:ad:e3:4a:e4:b1:de:d2:88:6e:5b:8e:0e:7c:69:b5:42:
         fa:e8:8e:f3:22:43:66:46:51:72:8b:63:96:63:4e:91:a5:12:
         55:84:b6:0e:2b:d8:fc:02:0d:97:c8:62:a4:cc:85:14:9f:6c:
         48:f9:13:d9:6d:60:03:91:26:0d:de:ac:20:1c:38:60:d2:7e:
         f4:99:a3:5e:2b:19:62:35:27:e9:2d:fb:e3:be:04:0e:ab:ab:
         68:d8:17:38:54:66:ec:05:f9:7c:81:ec:75:5a:06:ff:0a:17:
         e3:87:92:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:13 2026 by rpki-client