Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/794e06ca-14bc-4a12-8f29-4c698f999dc8.roa
File:                     794e06ca-14bc-4a12-8f29-4c698f999dc8.roa (raw, json)
Hash identifier:          UKhQUDMANY0Wu8iJh7/468irAIRAcKsixDZFOPWeGfI=
Subject key identifier:   DB:3D:82:FD:A0:0F:54:BB:8F:14:CE:4A:27:50:B2:7C:11:49:90:DE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7D8646D92BFD69337CB7AF483BC001CE8F52BD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/794e06ca-14bc-4a12-8f29-4c698f999dc8.roa
Signing time:             Fri 13 Feb 2026 09:10:46 +0000
ROA not before:           Fri 13 Feb 2026 09:10:46 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3528::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:86:46:d9:2b:fd:69:33:7c:b7:af:48:3b:c0:01:ce:8f:52:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 09:10:46 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=fa187915abcd39fe1f66a98ca7222a805f48666a820314bb983f75856b2b05e6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3e:d4:1a:7b:7e:bf:80:2c:0f:3a:b2:18:0b:
                    d1:b0:d7:4d:e8:ab:28:ea:0c:7e:51:9c:59:d6:7e:
                    65:ef:c1:45:03:4b:8f:a1:6b:32:46:c8:c7:a0:df:
                    f4:2a:6c:06:36:d5:b3:09:10:c1:9f:ea:cc:23:27:
                    9a:d8:c2:54:bc:bc:16:10:cc:3b:b8:38:8c:cf:72:
                    ce:9a:a5:f9:a0:11:83:e8:3a:3d:9c:83:cc:8d:a2:
                    73:a0:13:7f:fe:9f:7c:f1:2f:b8:d0:31:94:91:a5:
                    88:ba:5d:fc:a4:93:5c:f1:c6:f4:09:18:27:4d:4a:
                    c0:58:79:9d:84:38:96:20:6b:38:91:e7:d9:f9:80:
                    80:08:ed:59:36:49:05:93:fc:fd:b3:e8:18:4f:fb:
                    de:61:88:a0:ae:58:7f:54:9d:03:cc:5f:e1:33:c9:
                    b1:3b:94:c8:df:90:96:03:b6:33:cb:fc:a4:c6:d8:
                    12:75:22:18:47:12:99:06:04:c5:f8:42:0e:ab:9c:
                    af:9c:86:94:be:bd:45:e9:8f:af:52:57:60:5c:4e:
                    79:5a:23:7e:7f:8c:30:41:ed:9f:47:b4:84:b0:99:
                    c3:b8:c1:21:2d:9a:7e:38:45:76:4b:0d:82:3d:be:
                    3f:1a:a1:e6:78:5d:75:c3:0f:7c:77:bd:f4:31:94:
                    17:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3D:82:FD:A0:0F:54:BB:8F:14:CE:4A:27:50:B2:7C:11:49:90:DE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/794e06ca-14bc-4a12-8f29-4c698f999dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3528::/47

    Signature Algorithm: sha256WithRSAEncryption
         44:de:c7:8b:4e:e6:e7:be:6d:99:e0:0c:5c:b0:ab:1c:f2:e1:
         1a:97:62:fe:68:e9:5b:a8:95:a0:a8:5a:b3:0b:c8:81:cb:9f:
         17:99:38:d7:63:d8:38:89:1e:d2:fb:6b:ff:07:d5:0f:14:17:
         f7:de:73:6b:12:df:de:aa:df:08:53:46:da:b5:c3:e5:30:8e:
         1a:84:fe:f4:39:1e:56:73:a7:8e:d2:9b:4b:8e:19:2c:a7:4c:
         f9:d2:90:84:ba:27:2a:76:0c:a7:74:08:0f:e4:87:73:33:c2:
         bc:af:9f:d3:e1:2f:14:19:92:49:97:c8:34:de:45:09:2f:6e:
         2f:a5:24:aa:e1:45:75:78:53:20:89:5f:11:ff:e7:10:5d:9a:
         2d:7e:66:b1:86:bc:65:38:bb:b7:4b:e6:ab:00:a3:44:51:20:
         8f:9b:45:2b:64:67:47:6a:8a:76:07:71:fd:5f:85:1f:b8:db:
         bd:0b:74:82:38:ae:c0:4b:03:40:15:e2:01:28:cf:6c:78:87:
         9e:6f:2b:41:e5:4f:16:db:90:5f:17:66:15:19:e8:b4:d2:be:
         5d:62:61:9a:c4:a7:ba:55:56:54:82:6f:69:23:ff:fb:0e:6b:
         0c:99:8a:c6:86:8b:ea:72:ad:c2:ab:d3:6b:b2:00:ec:fe:06:
         66:b9:95:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:21:47 2026 by rpki-client