Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/71c071cc-b466-455d-bdf2-2973ffa6ae79.roa
File:                     71c071cc-b466-455d-bdf2-2973ffa6ae79.roa (raw, json)
Hash identifier:          gyX8C22PEjIh/k4U60vEEbBM/9zcX0IEzsxCn+u7IRg=
Subject key identifier:   4E:A3:E7:44:FA:51:4A:A0:7A:F5:AA:88:8B:74:13:A7:EB:47:EC:3B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7A1637E6DEC84885BB8FD833B5543EF0B7A3F87C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/71c071cc-b466-455d-bdf2-2973ffa6ae79.roa
Signing time:             Fri 13 Feb 2026 07:50:54 +0000
ROA not before:           Fri 13 Feb 2026 07:50:54 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:5306::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:16:37:e6:de:c8:48:85:bb:8f:d8:33:b5:54:3e:f0:b7:a3:f8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 07:50:54 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=ee6e27428d6d2b0f8c8d0a4bead42f02e7fd086e5f852f28ab6c84501fe9442e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6d:4f:98:4d:cf:8d:31:f0:a1:3b:ab:bf:66:
                    63:ae:1c:1f:2b:ef:93:63:ac:b7:9c:4a:44:9e:0e:
                    2f:59:73:47:e7:c9:41:f2:1a:a8:38:6a:61:23:e7:
                    f2:90:3a:e5:df:c3:68:a0:c1:3e:21:17:6c:9c:74:
                    64:46:db:5f:b7:a8:80:d2:0e:69:ae:bd:86:51:b5:
                    7f:f6:3b:f5:f3:df:c5:13:8c:44:43:c3:d0:78:99:
                    db:68:fd:7c:45:d0:d1:c9:76:d6:25:aa:15:90:90:
                    4a:95:d7:3c:2d:4c:97:3a:8a:1f:d4:e5:5a:9e:16:
                    8c:f0:b1:d0:c2:e1:3a:ad:09:ac:44:bf:b5:ca:18:
                    34:54:40:41:c5:6f:1e:0e:4f:93:14:ac:50:55:db:
                    22:9c:87:d2:f9:3a:25:21:9f:ee:f4:6c:47:ca:7f:
                    d4:52:bd:7e:f1:78:76:0e:33:ab:1d:bf:48:37:1a:
                    06:55:94:27:bd:2a:dd:24:37:c4:58:60:26:2b:c8:
                    fb:3e:7c:5c:5d:ff:f7:fa:1e:ab:b6:a2:25:13:7c:
                    ff:82:3e:4a:fe:01:cc:fc:95:f7:b6:18:5c:e2:40:
                    0f:97:ae:bf:f2:3c:ec:c6:23:00:d1:88:82:e0:78:
                    ce:9a:24:67:ad:3d:b0:2f:09:4b:17:cb:05:60:51:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A3:E7:44:FA:51:4A:A0:7A:F5:AA:88:8B:74:13:A7:EB:47:EC:3B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/71c071cc-b466-455d-bdf2-2973ffa6ae79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5306::/47

    Signature Algorithm: sha256WithRSAEncryption
         b3:70:16:5b:cd:41:b8:5d:66:14:94:2b:80:a5:be:60:4a:c1:
         ba:35:ae:06:46:27:27:90:8d:69:47:0b:26:75:b1:4e:92:56:
         ce:a2:a5:2b:52:c6:bb:5a:20:e9:97:94:f7:1f:60:de:fc:21:
         22:35:60:07:7a:89:6a:c9:ec:a0:a0:a2:e3:3b:0d:6f:04:06:
         2d:4e:e1:1e:72:f8:ab:87:b8:37:82:c1:b6:b4:81:15:c8:ef:
         71:c9:b3:64:ab:f7:78:f5:ea:02:51:14:28:dc:04:93:db:5f:
         55:3c:ff:11:19:70:1b:c7:af:a8:20:c1:49:41:64:ac:eb:c6:
         b3:ae:f2:79:43:ea:a7:9e:60:08:b8:14:b4:d0:08:63:e1:23:
         d0:5a:d1:6d:00:72:d0:3b:25:eb:e6:6e:71:28:8e:95:6a:73:
         3d:25:39:0f:33:13:6c:5d:56:59:67:7b:5b:97:54:7a:60:01:
         e8:87:09:12:5f:2b:1e:cf:5a:6d:40:4e:b4:62:4b:59:8f:c3:
         22:f4:cd:51:ec:9a:07:a3:ec:6a:bd:b5:6e:3b:2e:ec:c6:57:
         4f:50:19:46:74:45:5e:a6:6f:a0:6a:da:bb:91:21:4c:83:7f:
         d2:58:b4:8d:34:cd:ad:53:93:26:f0:98:de:75:fc:b5:87:d0:
         c4:1a:14:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:50:08 2026 by rpki-client