Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6881c183-4325-4bc4-bca4-9ebb4504d57a.roa
File:                     6881c183-4325-4bc4-bca4-9ebb4504d57a.roa (raw, json)
Hash identifier:          0MPleqdf31kxPg1czdR5a3y8rNrtx7Bforno8NUx1so=
Subject key identifier:   57:C7:7C:1B:C1:29:2D:58:87:DF:66:2B:64:5B:BD:D7:9B:A2:7D:9D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       177C30CFD377A177136C79249B4010C78F666E02
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6881c183-4325-4bc4-bca4-9ebb4504d57a.roa
Signing time:             Fri 13 Feb 2026 09:00:55 +0000
ROA not before:           Fri 13 Feb 2026 09:00:55 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:34ec::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7c:30:cf:d3:77:a1:77:13:6c:79:24:9b:40:10:c7:8f:66:6e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 09:00:55 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=fcf90d306311e2cd8a33c91b9fda42b8fdb8e75e0539ae8c2249cfcd9f3275c3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:18:e3:1e:84:95:57:c7:fa:41:dd:0b:da:
                    a4:71:b1:99:4b:5e:03:71:9f:14:fa:2d:8d:75:2f:
                    3a:6c:b0:97:c5:fc:a7:e7:bb:f0:a2:fc:38:08:ef:
                    21:40:12:70:49:40:b5:f5:37:d0:11:5a:30:ec:91:
                    ec:bc:58:c9:6f:01:1f:42:8d:6a:10:4d:81:06:e1:
                    ae:c7:33:a4:ab:65:2e:a0:40:37:da:ba:f8:86:a5:
                    fc:7d:c7:74:69:a4:36:5b:d7:1c:48:c2:79:96:ed:
                    b7:74:38:90:d2:57:7d:d6:e1:d7:b6:12:02:a1:e0:
                    47:1d:41:19:f0:bb:eb:34:6f:fc:7e:da:53:d1:5f:
                    7c:0d:7b:35:8a:44:5d:ba:20:95:0a:8f:92:4e:a5:
                    3b:c2:4a:79:6d:db:65:d1:d5:1e:98:0e:d5:9d:c4:
                    d9:8a:cd:e3:f3:bc:cd:bf:32:60:3f:1e:7d:bf:99:
                    af:d9:80:7d:fb:e3:5e:6d:8f:45:c9:5d:00:75:70:
                    85:b8:c1:cc:eb:99:d5:3c:0c:3b:6e:43:c6:8f:2c:
                    d5:01:94:2b:d8:e5:31:1a:1e:1a:53:82:45:39:a1:
                    2e:1a:b4:98:43:bc:b9:21:14:ce:56:bf:44:90:87:
                    a3:97:5b:a9:ca:b9:e7:e6:bb:79:fb:ca:ac:73:3a:
                    66:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C7:7C:1B:C1:29:2D:58:87:DF:66:2B:64:5B:BD:D7:9B:A2:7D:9D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6881c183-4325-4bc4-bca4-9ebb4504d57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:34ec::/46

    Signature Algorithm: sha256WithRSAEncryption
         bd:71:e9:48:48:57:c8:87:8d:6c:06:53:7c:e4:e6:bb:d9:bd:
         bb:fe:9a:bd:82:59:22:ab:16:2f:a8:48:3c:70:0c:f3:d1:f7:
         59:6d:6c:65:da:f0:e4:1d:7e:af:4c:cf:3a:b7:f2:e7:b7:96:
         fa:02:ba:09:e2:a3:d8:4a:b0:04:8d:d0:c1:5b:c9:f6:a8:60:
         5e:95:a2:a9:9d:41:81:6c:f8:43:8c:63:04:aa:be:13:77:64:
         18:bc:e5:1e:dd:4b:e2:5c:e0:b8:17:aa:66:8c:53:9a:6f:ca:
         5b:78:ac:5b:5b:87:71:eb:77:11:8e:cc:49:6b:3d:72:52:7b:
         13:23:a6:51:62:71:b6:d7:53:6d:9b:66:58:ec:1c:82:ed:44:
         e0:3c:9c:62:82:58:8f:d3:16:78:6a:7e:ee:42:97:55:4d:10:
         b0:dd:98:2e:7d:e2:3b:14:26:5f:5b:9f:93:d9:e6:55:c4:ce:
         ef:92:7b:5b:85:e8:b7:db:54:a9:c3:37:6a:29:f7:6c:1f:2d:
         40:4b:92:4b:05:d7:26:73:3c:ec:46:a6:58:03:c0:3d:d1:98:
         d8:2b:c8:c1:0b:df:aa:6e:49:60:26:9a:49:7f:82:74:8b:55:
         8e:e9:33:8d:f3:e3:65:c7:41:e2:73:b6:86:47:6b:30:f5:fd:
         21:41:3d:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:10:09 2026 by rpki-client