Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/709a1499-d2ec-4bd1-8730-c6d64ca59ea9.roa
File:                     709a1499-d2ec-4bd1-8730-c6d64ca59ea9.roa (raw, json)
Hash identifier:          kWOhK0L0zNuASQAPtk5Si8SB0a4/glQXJHcCwdfalV0=
Subject key identifier:   03:92:C8:3B:2D:76:14:47:48:B4:B4:6E:FE:3E:B6:FD:CD:2B:E8:F7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       22A0B4A2890E87DAAD596CFE6282B75240DA7DC0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/709a1499-d2ec-4bd1-8730-c6d64ca59ea9.roa
Signing time:             Fri 13 Feb 2026 12:21:53 +0000
ROA not before:           Fri 13 Feb 2026 12:21:53 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:34d8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a0:b4:a2:89:0e:87:da:ad:59:6c:fe:62:82:b7:52:40:da:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:21:53 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=e0cd37504b3766a13ea8efd2269808bf39867f544a39752e4fdbe1d337d3a836, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:90:7f:ba:c6:6b:58:a9:0f:a9:56:f1:b3:
                    45:2e:99:35:e4:39:4e:86:7a:51:c9:ea:4e:f2:8b:
                    9a:6b:18:35:f9:82:47:bc:dc:a6:94:56:c2:cd:f7:
                    64:ae:ae:c3:45:aa:ae:dd:f8:e3:be:63:a2:f2:ec:
                    ea:8f:23:f8:58:cc:95:db:a2:f3:6b:71:57:d0:e3:
                    f6:95:c8:a5:5e:cc:02:3a:23:1c:89:39:3f:d6:33:
                    a8:6e:95:53:b5:fb:38:b1:a9:3c:8a:c9:12:fb:7d:
                    2e:24:1a:30:48:b1:94:47:b9:72:b0:fd:8f:d1:30:
                    c6:89:98:70:4d:fb:b0:fb:c5:02:35:ae:55:b8:84:
                    12:44:f9:70:93:f2:7a:0d:05:09:ce:09:e0:f6:d6:
                    00:1b:c9:9b:c3:a1:b4:a9:e7:fd:19:e7:57:ab:73:
                    8f:fe:4c:17:bd:f2:02:9a:a3:41:14:0b:ba:46:18:
                    ab:19:3c:9d:aa:0c:04:45:c4:1f:de:6d:93:f5:2e:
                    eb:f8:ae:f5:23:c5:b4:03:58:10:59:31:80:44:dc:
                    5d:47:5c:94:fc:82:59:4e:17:a6:ac:d0:57:15:e5:
                    12:5b:94:78:8d:78:73:5c:02:36:ff:db:79:17:b5:
                    c1:fe:04:ba:e8:6a:83:b7:91:91:74:4c:17:0e:13:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:92:C8:3B:2D:76:14:47:48:B4:B4:6E:FE:3E:B6:FD:CD:2B:E8:F7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/709a1499-d2ec-4bd1-8730-c6d64ca59ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:34d8::/46

    Signature Algorithm: sha256WithRSAEncryption
         01:a1:b9:23:af:06:3a:d2:2b:96:60:95:86:f1:d4:5a:d7:a6:
         02:45:03:9c:07:41:23:c7:28:c8:5c:be:c0:af:17:1c:45:84:
         7b:bf:49:59:35:28:a5:a8:47:d5:f3:62:4c:7c:45:92:cb:99:
         81:cc:8e:e7:f3:4f:f0:dc:0e:3b:19:46:b3:01:d7:7f:7d:fc:
         dc:fc:52:d4:fa:23:fd:a3:c6:4c:ff:3a:35:21:1a:37:46:a5:
         87:03:cd:0c:5c:7a:b2:2f:a2:1b:18:72:a3:5a:15:96:6b:b0:
         89:4f:4c:f7:b2:0a:68:14:e5:55:d3:1f:1f:b2:ba:79:05:84:
         e8:1d:15:f2:8f:fd:57:0b:a7:d7:a8:b4:4e:e3:c5:f6:c9:c3:
         4c:19:33:c3:e0:90:0d:c3:66:08:1c:80:6b:3d:cf:d7:83:71:
         ac:b6:6c:8c:61:7c:fd:88:58:67:84:91:3c:d4:d1:2e:38:74:
         0d:d0:b2:d4:e4:60:32:83:a4:bb:5b:32:06:27:cd:cd:46:df:
         0b:0e:33:79:34:c1:eb:8e:cb:6e:c1:ef:df:0d:ad:6b:c1:44:
         04:29:df:a7:35:3e:36:9f:93:5f:c4:a1:7b:a5:13:26:8b:3c:
         17:11:c7:db:d2:b0:3a:c3:6f:2a:cf:9d:7f:81:92:89:46:e5:
         c4:66:68:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:55:48 2026 by rpki-client