Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/752d61d4-93db-4ae1-8968-c1844486cc6a.roa
File:                     752d61d4-93db-4ae1-8968-c1844486cc6a.roa (raw, json)
Hash identifier:          YbJIytxKE62jIORVlVdJEm/nd3sgGH7B2Jie1rS3pDI=
Subject key identifier:   1F:64:C5:BE:75:C9:6C:50:66:4A:AC:2C:43:9F:F3:7B:28:1E:3D:7A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1199800C049826F0E7F4F606718FEC88BDC08EC3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/752d61d4-93db-4ae1-8968-c1844486cc6a.roa
Signing time:             Thu 12 Feb 2026 03:00:38 +0000
ROA not before:           Thu 12 Feb 2026 03:00:38 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e38::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:99:80:0c:04:98:26:f0:e7:f4:f6:06:71:8f:ec:88:bd:c0:8e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 03:00:38 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=567cb87e6f93a70ce44f298388e8f262a79ae0f922955b57dfc1e7bf1cc2264b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:ec:5a:ce:8a:26:05:81:50:5f:11:18:e6:
                    61:2f:fd:44:0b:82:3e:f6:b3:44:3c:3f:2e:b5:a0:
                    71:17:23:73:09:49:c3:48:5e:a4:40:2d:61:35:e8:
                    39:88:90:2d:51:0a:c1:60:f4:b9:50:f2:60:7c:4a:
                    62:ee:ae:f6:02:e2:11:72:f0:a2:3e:20:f7:a4:ab:
                    ca:48:bd:26:40:5f:dc:02:2f:8c:d7:54:46:75:35:
                    06:34:e7:4e:e1:90:48:af:1e:5e:b9:c4:b2:c2:04:
                    4f:60:d8:06:00:5e:19:7a:e0:37:e2:d5:ac:84:a1:
                    fc:aa:9c:83:34:10:03:61:9a:26:ef:94:3a:f9:5d:
                    ce:a4:1f:18:07:73:b3:fa:b8:d5:b6:2f:24:86:b7:
                    e9:2a:8b:aa:45:56:d9:ec:00:a4:ea:8d:aa:4b:f1:
                    3a:16:f1:51:15:30:89:2e:7e:eb:0a:56:62:b9:72:
                    ac:17:cd:97:1e:3c:9b:00:e6:2f:d7:2b:77:4a:db:
                    60:3f:04:9d:5f:4f:10:d9:bc:6b:59:f5:09:b3:d7:
                    77:23:be:6a:e4:c7:a2:cb:ac:6c:db:a6:88:c3:f7:
                    cc:ba:b6:6f:11:66:fb:19:9b:b8:83:18:a1:77:29:
                    50:3a:4d:99:6b:e8:ee:c5:58:82:50:0a:2e:52:e8:
                    5d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:64:C5:BE:75:C9:6C:50:66:4A:AC:2C:43:9F:F3:7B:28:1E:3D:7A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/752d61d4-93db-4ae1-8968-c1844486cc6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e38::/47

    Signature Algorithm: sha256WithRSAEncryption
         07:c7:75:c4:bf:37:a7:e9:60:37:e0:cc:37:56:f5:fe:27:86:
         6c:d5:48:b2:a2:9a:a0:ec:c4:f0:16:31:73:f7:c4:53:95:ec:
         ad:33:a2:c4:ea:08:5e:4b:cd:f2:70:0a:fd:e4:b8:00:30:c3:
         44:82:ef:0c:46:d0:44:6a:98:90:4b:f8:a0:e1:8b:ca:c9:4e:
         63:b2:ea:e9:1d:bd:ce:89:23:9a:a2:1e:49:3b:27:70:8d:29:
         1f:65:92:66:45:36:df:7c:80:75:a6:da:84:14:f4:40:e2:ad:
         a8:a1:7d:8f:5d:74:58:d6:fb:60:1f:b4:2e:83:fe:47:89:81:
         c0:4b:09:4a:f7:57:40:83:e3:f0:5d:2e:6f:09:fd:e4:e2:9e:
         5d:4a:8a:8c:34:c4:49:f2:f1:7d:b4:ae:5c:11:af:fe:34:d4:
         fb:1f:fe:88:ad:1e:3e:45:c0:3f:66:ec:fa:aa:ea:b8:fc:30:
         2e:3d:6f:8c:db:53:8a:4e:4d:c7:be:b1:c4:d1:e9:67:76:54:
         f0:40:5a:fb:19:c1:c4:72:8a:ef:8b:11:4e:eb:6b:59:dd:83:
         81:92:c5:0a:78:ed:b4:ec:4c:06:7a:5b:c6:94:b5:8b:10:ae:
         01:d3:97:76:ea:6f:1f:e9:1c:88:c1:6e:6b:8a:39:db:60:2b:
         8d:52:a6:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:48 2026 by rpki-client