Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6c63ad9c-3bbc-4c54-93f7-b45f4c08ac3e.roa
File:                     6c63ad9c-3bbc-4c54-93f7-b45f4c08ac3e.roa (raw, json)
Hash identifier:          LcPdgoH5tOtUmeppGI2I1kKrO9KFRJ719wPK/qLWRt4=
Subject key identifier:   BA:DD:0A:97:16:55:B5:74:65:2F:9F:6B:BA:C2:1F:67:96:1F:DD:75
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       547C174887DB95293E9523430E6E385D2C665133
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6c63ad9c-3bbc-4c54-93f7-b45f4c08ac3e.roa
Signing time:             Thu 12 Feb 2026 02:10:39 +0000
ROA not before:           Thu 12 Feb 2026 02:10:39 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f0e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:7c:17:48:87:db:95:29:3e:95:23:43:0e:6e:38:5d:2c:66:51:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 02:10:39 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=1ea03c023d58e40a0f83d5e73c9a48b29c5944b450f3aeab98cd42bb24ac26b1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:0c:f0:c9:af:3f:c0:07:e9:e6:6b:18:96:
                    98:f4:e7:df:4c:ee:73:31:b5:59:8a:7c:b8:41:76:
                    cb:44:b3:f3:14:bf:fe:19:7b:39:9f:5c:03:53:f3:
                    df:25:a2:9f:de:58:53:cb:17:93:cf:da:14:29:d3:
                    75:ee:41:1e:d9:ec:92:c3:a8:6f:7c:51:b0:38:5f:
                    9c:75:63:5f:39:b3:e9:fa:40:fc:94:b1:0d:53:f7:
                    2c:3a:3e:25:96:00:76:62:d6:90:b7:08:7f:03:99:
                    dc:1b:32:48:2b:61:34:f5:ad:b1:a4:97:cb:ff:09:
                    03:71:e9:8b:d6:eb:60:30:16:4e:9b:bf:69:27:46:
                    b6:37:1f:53:90:61:0e:8f:dc:59:ea:a9:07:62:4f:
                    d1:d6:86:16:f7:cb:e6:bf:7d:7e:0e:3a:79:32:95:
                    be:c5:86:00:26:ca:c5:db:1f:73:ff:74:3f:3c:8b:
                    89:2a:e3:fb:cb:e5:f7:a5:38:81:4d:0f:0f:ab:bc:
                    97:7b:eb:31:1b:c4:fd:f0:3b:cb:8f:a4:8e:06:45:
                    71:59:d3:36:4b:25:df:d3:03:d9:3d:2b:32:3a:dd:
                    7c:13:54:e3:fc:7f:06:aa:37:8c:7e:4c:ec:42:e2:
                    88:d2:a2:46:b9:73:8b:48:4e:61:82:e2:bd:41:72:
                    12:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DD:0A:97:16:55:B5:74:65:2F:9F:6B:BA:C2:1F:67:96:1F:DD:75
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6c63ad9c-3bbc-4c54-93f7-b45f4c08ac3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f0e::/47

    Signature Algorithm: sha256WithRSAEncryption
         c1:43:fe:61:08:2c:c0:3d:eb:ba:c6:e8:9b:0d:90:86:fb:96:
         18:05:d0:f5:46:81:b8:03:38:97:a4:df:bd:30:dd:60:10:b7:
         fa:b2:59:d9:4d:7e:fd:93:bd:09:1f:1a:7e:22:be:2c:0d:1c:
         b9:71:90:2e:25:66:9d:24:f1:56:e1:5a:36:1a:b8:f3:b7:c1:
         2d:06:bb:ff:df:fc:d6:83:f8:72:fd:65:10:0f:ac:f5:13:72:
         86:ab:12:95:e8:64:a1:ae:73:72:89:ef:90:67:c9:dd:13:dd:
         6d:fc:23:e5:92:86:1d:cd:58:13:64:ce:3c:2b:22:31:78:f7:
         46:c4:8c:2b:3c:28:f6:01:75:fa:73:8a:41:12:03:ac:9f:65:
         94:48:76:3e:c1:d7:72:f6:48:59:4f:76:58:ae:08:38:58:30:
         6c:2e:22:73:a6:f7:8b:0c:a5:60:82:b5:2d:6e:a5:79:6a:72:
         dd:b2:80:36:91:be:92:00:75:ed:6e:48:39:ef:f9:11:63:23:
         0d:4c:ca:e2:8b:df:7d:61:5c:c3:7a:33:3b:c4:01:fc:22:66:
         ae:e3:eb:5d:58:95:02:34:56:68:35:2a:c1:80:92:1a:be:c2:
         86:66:fd:15:2d:b6:6f:67:a6:58:8e:32:fa:b5:b9:81:10:d0:
         f0:3d:f8:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:34:09 2026 by rpki-client