Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7aebc4ff-c00b-4ed2-a9c5-497e272932d7.roa
File:                     7aebc4ff-c00b-4ed2-a9c5-497e272932d7.roa (raw, json)
Hash identifier:          FrC3tEfTswXlnfnuXbaArNMjl+vbohzX/87kACxXAmA=
Subject key identifier:   5F:77:92:C7:3B:32:62:7D:0A:DB:62:F0:64:04:00:1F:03:A2:27:6C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       188985F8ECD8C5F06FFC81D736B4320A8F9BCB33
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7aebc4ff-c00b-4ed2-a9c5-497e272932d7.roa
Signing time:             Fri 13 Feb 2026 13:31:30 +0000
ROA not before:           Fri 13 Feb 2026 13:31:30 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3780::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:89:85:f8:ec:d8:c5:f0:6f:fc:81:d7:36:b4:32:0a:8f:9b:cb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:31:30 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=1cc41f910b63c60f8839f99422449d2b43b388b581b14faaaef8b6329dd14446, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f5:4a:e3:64:7d:cf:33:15:d5:8e:61:ef:3c:
                    0a:89:97:a3:6c:fa:e9:e4:00:2e:4e:63:3e:9e:6a:
                    51:4c:e6:c5:cc:70:5a:26:67:d2:7a:e4:35:e2:22:
                    0c:86:65:bd:1a:02:a4:8d:07:6f:61:da:84:d8:60:
                    1c:bb:cd:6e:7c:3d:34:51:88:f7:58:1c:81:37:14:
                    85:5e:01:4a:7e:50:9d:3a:0e:33:7f:56:2a:a7:a7:
                    da:ba:d1:b3:9f:7c:f3:03:8b:06:d0:1d:6c:c1:04:
                    37:33:be:24:97:ed:ee:79:45:2c:2a:85:e2:16:ee:
                    19:91:32:e9:78:1c:d6:21:ab:ad:8e:ef:ed:2f:8a:
                    0a:ed:65:d2:b8:a6:4d:34:fd:4e:1b:a3:25:69:39:
                    36:4c:15:aa:4f:0a:9f:67:e5:5a:65:0d:5d:4f:47:
                    c8:90:55:13:7f:5d:89:29:98:92:d8:43:36:87:5f:
                    b2:30:b5:78:bf:1c:41:20:15:21:e6:3a:6b:24:4d:
                    58:ed:13:9d:e6:2b:00:b2:d3:92:aa:ea:2a:07:81:
                    ea:2f:1f:9f:29:62:d9:63:22:8d:73:27:1f:78:4a:
                    53:68:63:1d:82:9d:c1:74:73:f0:63:bd:a9:c8:0d:
                    6b:a3:08:55:cd:48:a0:78:b9:ea:79:08:78:b3:b4:
                    ba:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:77:92:C7:3B:32:62:7D:0A:DB:62:F0:64:04:00:1F:03:A2:27:6C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7aebc4ff-c00b-4ed2-a9c5-497e272932d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3780::/47

    Signature Algorithm: sha256WithRSAEncryption
         25:62:7e:64:bb:71:69:75:62:28:c9:bc:d0:9d:f6:82:88:b6:
         ae:1c:df:a8:14:ed:4f:ab:c5:5f:e8:09:1c:c8:b2:d9:45:fc:
         29:75:c2:7c:7c:1f:62:10:1a:2e:42:7e:eb:09:26:55:d9:64:
         8e:b7:9b:71:07:09:6c:01:9f:31:8f:77:55:1f:92:9f:43:52:
         3b:b2:f1:a8:b3:66:94:82:65:3d:d9:30:9e:ae:0e:a6:fc:46:
         a3:03:04:fc:83:65:3e:ce:1f:90:d5:0a:c7:17:f3:17:2f:bc:
         29:f3:0b:33:2b:c7:26:05:24:59:d7:bb:47:4c:bc:09:56:88:
         c7:86:44:ab:05:7c:c2:a9:4e:60:75:82:48:61:1c:78:e1:75:
         8b:fc:5c:0f:b0:42:93:55:19:0b:32:5b:96:80:61:76:c3:61:
         66:3e:64:5f:e4:2b:7e:29:33:62:f3:6d:56:4d:ff:59:01:57:
         16:f2:fb:89:2d:36:59:57:80:08:f3:20:d3:37:e3:1e:f6:d8:
         22:fd:60:cd:a0:5e:31:ea:0f:8e:75:eb:b3:02:85:a8:c4:4e:
         55:91:a3:f7:21:10:e6:8b:b8:01:d9:5d:5b:2a:a1:b4:73:1c:
         f4:4b:ef:62:36:55:da:6c:bd:fc:33:c9:27:5a:42:6c:bb:5d:
         01:a2:1f:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:07 2026 by rpki-client