Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/79bb7971-9e5f-4c8c-bd31-0211b3f863ae.roa
File:                     79bb7971-9e5f-4c8c-bd31-0211b3f863ae.roa (raw, json)
Hash identifier:          BY9R8wDqtvqCff7zrRCif5Cx5MEGCMt0c1m+CE0a+/Y=
Subject key identifier:   14:CD:C1:86:4B:F4:0D:A5:0D:F3:CB:12:B5:14:68:EE:9F:C6:2A:1E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1D4D5E4E9EC8CA9CCB26CE4844C8F8A0F3126391
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/79bb7971-9e5f-4c8c-bd31-0211b3f863ae.roa
Signing time:             Fri 13 Feb 2026 04:11:34 +0000
ROA not before:           Fri 13 Feb 2026 04:11:34 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d48::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:4d:5e:4e:9e:c8:ca:9c:cb:26:ce:48:44:c8:f8:a0:f3:12:63:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 04:11:34 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=2ecbedeedb4d90eadbb52cce545df52b0102a7c315355db8e15ea952fe332faf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:f5:71:3e:9d:1f:b5:33:ca:67:65:97:f9:
                    00:4c:b7:19:b7:fb:ae:1e:78:67:b4:91:00:c4:f1:
                    b9:73:c7:3c:ef:9a:4e:76:9d:f4:a1:58:22:cd:b1:
                    c5:20:92:f8:50:98:a1:4c:43:78:ac:72:30:6e:c5:
                    22:ed:3a:d4:15:3c:e0:b1:bc:7b:86:af:62:b1:38:
                    97:40:61:6b:3c:61:12:be:66:f3:28:56:f3:47:ce:
                    02:eb:4a:3e:53:7f:a2:a9:c7:55:28:c1:02:55:56:
                    bc:ab:cc:a4:6b:10:5c:2d:88:7c:b5:fc:2a:22:e6:
                    a9:7c:29:c4:5a:95:9c:d2:7d:77:49:09:05:8c:d4:
                    0b:5a:bd:94:fe:e7:3e:ae:95:a7:be:5b:ef:53:51:
                    1a:52:45:ad:42:ad:dd:62:18:83:ae:14:55:66:a1:
                    f9:f5:f0:27:14:dd:57:25:27:57:97:ea:8e:0d:db:
                    64:1d:65:3c:38:d8:5e:60:88:f2:98:97:ce:70:ca:
                    86:c4:c2:6c:91:e7:d7:df:c1:c6:c3:8f:fd:c7:88:
                    af:37:ae:b9:35:7e:84:6f:20:b4:e0:7d:8a:80:74:
                    01:12:ee:a2:9d:66:3d:98:80:9e:58:71:5e:7a:04:
                    10:18:63:0b:4a:09:51:44:23:d9:75:e8:c2:46:2d:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CD:C1:86:4B:F4:0D:A5:0D:F3:CB:12:B5:14:68:EE:9F:C6:2A:1E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/79bb7971-9e5f-4c8c-bd31-0211b3f863ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d48::/46

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:b3:9a:8c:f7:cf:d4:f0:ed:9c:be:31:a4:b0:9c:69:5c:
         d5:7c:52:39:79:84:07:a8:27:93:fb:f2:09:91:00:4f:4f:7b:
         4c:88:ba:e6:d0:cc:b6:76:33:ce:2c:6c:f9:58:88:13:22:86:
         6e:ab:e5:81:18:ec:d7:44:39:a7:9a:87:24:cf:e8:59:9d:ce:
         6f:53:2d:df:cd:11:1e:35:cf:03:83:5e:d1:90:23:a5:96:59:
         a9:54:10:52:b5:fc:64:d8:b9:a1:70:49:47:7a:b8:2f:e1:d0:
         0a:57:12:2d:a7:d7:09:b1:8c:17:45:3c:27:29:2a:9c:c3:4a:
         e3:37:3b:de:06:ed:e6:5f:51:2d:30:35:27:21:74:6c:19:17:
         d9:e6:b9:2e:e0:17:ab:b0:6f:d7:63:b2:62:8f:64:03:30:41:
         b0:c7:ec:d1:b6:5b:38:58:c1:c9:3f:97:2e:e7:75:52:1b:dc:
         be:72:5b:c1:a1:7d:2b:f7:85:cf:99:14:73:3b:dd:44:3d:37:
         87:75:1d:97:77:92:5c:a0:d4:a6:28:8d:96:12:d0:2a:15:00:
         da:f0:33:b4:42:80:84:83:4f:46:78:cf:0b:2c:26:b0:fe:af:
         94:8d:4d:c0:e0:61:70:2d:4b:4d:eb:da:68:a1:b1:4e:5f:eb:
         26:f3:69:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:26 2026 by rpki-client