Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d8794b5-5081-4273-9792-f8c024950b92.roa
File:                     7d8794b5-5081-4273-9792-f8c024950b92.roa (raw, json)
Hash identifier:          9zTtZ9JZHF0uJscAezTikAo+eFMDT0VhILvYoe3Lo4M=
Subject key identifier:   35:23:27:09:EF:8F:34:E9:DB:33:5A:47:8B:24:30:7B:6A:F4:36:49
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55664B1D2AF38B32E6AD872AD8D156D1F5F76B02
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d8794b5-5081-4273-9792-f8c024950b92.roa
Signing time:             Fri 13 Feb 2026 07:30:13 +0000
ROA not before:           Fri 13 Feb 2026 07:30:13 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2dac::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:66:4b:1d:2a:f3:8b:32:e6:ad:87:2a:d8:d1:56:d1:f5:f7:6b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 07:30:13 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=dd4eefe4f3acee030c1f8c5be99bb3a5281348f7aadc72530b260388e9ccdf6f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:7d:3c:80:9d:87:b7:2b:8d:ab:73:0e:61:
                    cf:67:d4:b7:d5:70:8b:13:2b:e2:b7:91:28:62:bc:
                    77:11:a2:49:a5:b0:53:7d:38:d6:b9:46:91:7b:5f:
                    50:44:10:96:82:64:6f:e4:14:fc:59:40:98:33:fd:
                    37:41:6d:db:53:c0:72:7f:dc:fb:8d:11:96:7a:65:
                    ef:3a:0e:7d:ab:73:41:a6:7a:e4:17:fb:e5:26:77:
                    54:0f:97:3a:88:c6:12:14:2e:9f:89:f9:54:e2:a4:
                    3d:5a:6f:6a:f7:fd:3c:d8:47:2b:6b:27:7e:88:24:
                    18:0f:e9:de:cc:0d:9b:38:af:51:44:8a:fb:51:9f:
                    3e:0a:56:29:0d:a0:26:3d:5b:8b:8a:60:18:09:3a:
                    18:ef:e9:5d:c8:9b:c6:f3:4b:9e:a0:db:5e:29:de:
                    39:b5:04:e0:98:1b:c5:65:c2:f0:b4:1c:65:96:1a:
                    ad:ff:13:79:91:4f:3a:42:37:15:f1:12:50:81:a8:
                    c9:a6:42:86:85:58:8b:26:72:07:c7:da:d4:5d:7f:
                    21:d0:50:c9:c6:cf:46:82:63:fa:aa:1a:fa:c7:e9:
                    07:63:19:01:61:f4:b9:08:95:02:2d:3c:31:d4:c9:
                    2b:74:f2:56:b9:ad:a5:ad:fa:9b:2c:9d:ee:3c:76:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:23:27:09:EF:8F:34:E9:DB:33:5A:47:8B:24:30:7B:6A:F4:36:49
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7d8794b5-5081-4273-9792-f8c024950b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2dac::/46

    Signature Algorithm: sha256WithRSAEncryption
         99:26:a2:c7:b0:d9:87:a1:89:33:35:7f:fc:3c:4c:a7:e7:ec:
         9f:2c:04:de:69:99:60:7a:a4:45:cc:8f:5c:f7:29:d4:2e:db:
         29:18:68:30:64:71:e8:8f:7b:e9:21:af:64:37:a8:13:6b:87:
         ba:49:19:2b:bf:84:88:6f:63:b7:b7:19:c2:8b:78:14:c6:85:
         48:4b:26:c4:8f:9c:c6:18:e6:da:db:92:48:a6:fe:ff:6b:08:
         f2:39:fe:eb:b0:a4:c5:49:90:eb:de:96:07:17:69:6d:81:20:
         c3:0c:f6:89:10:6c:74:db:18:a9:11:f1:77:ab:1f:67:dd:8f:
         f0:d2:cd:b2:ad:88:57:d9:a9:2b:d3:51:66:33:87:0c:90:98:
         1e:21:98:54:99:13:b3:f7:66:4a:30:b9:bc:42:ff:35:49:05:
         bd:31:e4:ae:3f:82:4f:e6:41:4f:15:22:4a:b4:2f:2d:64:01:
         85:b8:5c:0c:83:3d:0d:09:ea:a2:a2:df:93:f1:77:ea:ee:62:
         bc:1a:55:08:c2:c9:34:c7:5c:a7:e1:63:72:d3:2a:fd:d9:2b:
         ae:6f:cc:9d:d9:78:e8:9e:9a:ec:5c:0f:6c:96:e8:20:cc:19:
         87:12:25:15:4e:17:6e:36:35:bf:a7:52:f0:29:c7:ed:c7:5b:
         5f:ac:97:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:29:58 2026 by rpki-client