Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/72db51d6-3039-4385-a305-dbd6850a7acc.roa
File:                     72db51d6-3039-4385-a305-dbd6850a7acc.roa (raw, json)
Hash identifier:          Jgps4MIIlzgUTTwNmQBPUbV/XzsLKJIfDUb1XAd5BwY=
Subject key identifier:   C0:56:7D:20:9F:74:18:CE:08:76:2A:02:A1:B6:6C:E7:E1:5D:FC:A9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       76191A933D9E93ED7A864AB314C72CF45E802070
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/72db51d6-3039-4385-a305-dbd6850a7acc.roa
Signing time:             Fri 13 Feb 2026 02:20:11 +0000
ROA not before:           Fri 13 Feb 2026 02:20:11 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ec8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:19:1a:93:3d:9e:93:ed:7a:86:4a:b3:14:c7:2c:f4:5e:80:20:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 02:20:11 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=869a6e220d00acc2b50ed78aecccef396754255422f0451a454c0bf5edca8cfe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:42:6c:b5:54:c3:4e:2a:d7:65:28:0f:30:
                    de:dc:60:30:d7:ac:df:59:fb:01:59:13:45:6f:33:
                    2d:e2:8d:09:88:c3:36:81:ea:78:b5:cf:04:15:d6:
                    6e:dd:cb:19:7d:19:78:1c:c5:13:11:e2:c1:05:56:
                    d7:fb:13:5c:9a:95:32:c7:63:ff:15:18:35:03:ac:
                    16:d4:fb:d5:df:af:89:86:7f:6b:fe:df:3c:d0:e9:
                    99:e1:83:0c:f5:46:d1:78:86:fe:dc:be:9d:77:b3:
                    e1:65:85:e5:4f:8d:f2:6d:2a:a7:d6:eb:eb:90:b0:
                    d1:25:a1:2b:12:e9:29:20:1c:ea:0b:ed:30:a3:5c:
                    b0:18:1f:d4:0e:84:84:2d:04:50:ee:4e:72:db:75:
                    7a:68:56:59:76:52:9c:5c:b0:6b:ad:54:81:fc:1f:
                    9e:32:55:cb:53:7b:a3:04:68:09:8f:4f:f2:2d:0e:
                    46:d5:f0:1d:fd:34:40:ed:2f:4d:d7:81:89:5d:64:
                    e0:86:3e:48:1b:cb:14:d7:9c:94:cb:a8:75:ed:d6:
                    46:34:7e:50:77:13:76:7c:92:53:36:b3:1d:b0:0d:
                    a6:a7:43:d9:96:2a:00:a2:be:0c:cc:29:a5:ac:09:
                    76:c8:2c:6f:38:be:e9:85:8d:7a:48:9b:4d:bd:a1:
                    64:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:56:7D:20:9F:74:18:CE:08:76:2A:02:A1:B6:6C:E7:E1:5D:FC:A9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/72db51d6-3039-4385-a305-dbd6850a7acc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ec8::/46

    Signature Algorithm: sha256WithRSAEncryption
         bb:06:1b:cb:fb:df:b9:ce:a0:b0:cd:c8:b5:ac:66:d2:fc:fd:
         eb:48:1c:5a:5b:62:2e:bb:87:11:c6:d5:35:86:ab:c5:83:f9:
         c1:1d:0a:ac:b2:a3:a3:b0:a4:ac:a5:bb:98:8e:81:55:98:0d:
         29:86:d1:a7:f8:a2:13:4e:e8:2f:d1:b0:c2:50:0f:6b:49:46:
         b6:3d:5d:2a:f9:27:c0:bf:07:7d:6c:ad:4b:bf:2f:bb:02:fc:
         ee:d1:c6:8f:62:0e:58:b4:2f:88:83:e2:c5:bc:37:17:68:9f:
         73:7d:81:f3:cc:38:51:bf:07:f7:ef:95:94:9b:89:66:ff:7a:
         60:15:0b:09:60:a4:40:59:e9:2e:79:b6:93:bb:ab:7d:ea:2b:
         b8:dc:fb:3f:4a:76:44:b0:d0:f5:60:1e:e4:63:c1:c4:01:65:
         58:06:7c:c2:ea:e8:3e:f0:ec:db:9e:51:52:5c:07:eb:05:3c:
         87:1b:fe:1c:18:7f:e1:ce:a0:70:1e:75:6e:95:8d:2d:c8:63:
         a8:bf:0b:e7:73:64:35:ba:e5:88:0a:bf:65:b1:39:7a:74:cd:
         52:71:e5:3f:da:1d:e2:15:d4:11:9b:0d:7d:f8:73:1d:65:88:
         45:f2:22:a4:6c:6e:86:99:64:c8:e0:4d:40:4e:93:ab:15:b1:
         d7:48:ed:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:16 2026 by rpki-client