Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d0280d6-2940-4103-8007-7758aea80eb5.roa
File:                     6d0280d6-2940-4103-8007-7758aea80eb5.roa (raw, json)
Hash identifier:          UI73f6zEc2oTlWyvkqkwUUQe54Q6mbdp/a783uzzUwU=
Subject key identifier:   B1:5F:EE:0F:F9:D0:EB:A6:D0:1C:D9:B7:1D:72:45:46:4D:51:0A:01
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6D8A9A7A08CBD29ACEE0338ED4856948061EA182
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d0280d6-2940-4103-8007-7758aea80eb5.roa
Signing time:             Thu 12 Feb 2026 03:31:27 +0000
ROA not before:           Thu 12 Feb 2026 03:31:27 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d54::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:8a:9a:7a:08:cb:d2:9a:ce:e0:33:8e:d4:85:69:48:06:1e:a1:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 03:31:27 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=a943dcb12d238df014d39f32f410a549c8c339698ecdddbbc67cdfe6f4a7b2cd, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:49:79:e3:30:a3:97:b8:61:9a:ab:b4:55:07:
                    62:8c:ad:6b:d7:ef:91:de:c1:bd:2f:01:76:5b:2c:
                    6b:2d:44:d3:17:cb:e2:f2:60:f8:de:6f:fa:07:16:
                    57:90:20:85:af:6c:ff:2c:17:f4:f6:d0:04:4d:89:
                    a6:dd:77:d8:a6:1c:4f:46:a7:32:90:e5:a1:ca:bc:
                    c1:ec:1d:04:7f:80:fa:ee:ba:d7:ab:83:83:44:ad:
                    01:4b:24:96:10:80:5f:2c:81:91:da:a3:5b:74:90:
                    8b:f4:ac:05:f9:de:18:c4:36:f3:15:fb:81:34:c2:
                    46:c0:56:e3:6f:ef:1a:76:bc:a6:35:e6:02:28:dd:
                    f7:37:c9:c3:65:2e:ab:4b:c4:26:20:18:8a:dd:fd:
                    4b:d5:6c:7f:38:8a:f4:8d:d6:d8:da:b1:2b:59:b0:
                    fb:e0:c5:db:57:a3:3a:07:c2:0c:e4:8f:8c:65:67:
                    ee:fa:71:2c:1e:0c:7b:c8:24:61:dd:6c:7f:ce:fd:
                    f9:d8:63:af:aa:b4:16:50:33:b0:4d:5b:11:9e:f5:
                    af:70:bf:39:98:2e:8b:6c:e5:28:c4:59:94:e0:75:
                    18:14:36:32:31:8e:fb:72:a4:1f:a2:80:ac:7d:bb:
                    70:85:c1:e2:5a:d8:29:d1:85:a7:1b:a8:e8:10:b5:
                    8e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5F:EE:0F:F9:D0:EB:A6:D0:1C:D9:B7:1D:72:45:46:4D:51:0A:01
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6d0280d6-2940-4103-8007-7758aea80eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d54::/47

    Signature Algorithm: sha256WithRSAEncryption
         3c:c9:78:86:61:a1:da:ba:65:df:b3:01:15:29:fe:f6:a0:eb:
         f0:d1:ea:f9:57:cb:63:70:6b:c2:31:d7:3c:7a:d8:d1:f0:c1:
         bb:3f:9a:6d:2f:14:f6:bb:81:7e:d2:00:a4:85:03:0d:e3:d4:
         78:ec:91:e7:01:83:30:d7:79:d9:cf:3f:84:2e:60:93:d5:1d:
         0c:cd:25:d4:8f:70:a0:9e:cb:86:70:03:5a:73:f1:49:fb:bf:
         8f:d3:97:50:07:f3:68:eb:7b:73:e8:1c:95:a7:64:bf:1a:b4:
         8b:12:5c:97:ac:2f:fc:52:04:24:a7:50:83:71:1f:f4:e8:e3:
         7c:50:66:a7:24:e9:46:b4:f5:ab:ab:46:a2:d5:bc:56:a4:bf:
         fd:31:04:6d:9e:b2:be:54:d2:c8:6b:0e:1d:23:ba:09:a3:ed:
         6c:2d:fa:5d:10:46:27:80:38:30:10:92:26:54:c3:f5:74:fe:
         da:21:06:e7:19:c6:75:ee:bb:fc:a2:bc:c7:e1:a8:14:c0:dd:
         ac:a4:7b:03:f5:9f:b5:d0:6d:3b:f2:08:6c:10:cb:69:dd:a0:
         3e:c2:55:15:63:d2:04:f5:df:d4:d3:46:b8:39:c0:6f:e4:b7:
         94:e0:de:70:77:10:5c:08:7f:6d:e7:d4:85:8e:c2:31:04:74:
         bf:a5:53:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:32 2026 by rpki-client