Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7fb8dd6d-0a33-45f6-b898-8d83c14371f9.roa
File:                     7fb8dd6d-0a33-45f6-b898-8d83c14371f9.roa (raw, json)
Hash identifier:          PEL+gGHnSJcMkKF8uKNTeub4BbzIt9AjWs1siLQMUiQ=
Subject key identifier:   10:7D:63:E9:49:C9:AE:59:D4:F5:9F:02:A2:2F:96:D2:8B:0F:F6:B0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2D7C85F533C5A7C693DB29B138E55FD516042C5C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7fb8dd6d-0a33-45f6-b898-8d83c14371f9.roa
Signing time:             Thu 12 Feb 2026 01:30:15 +0000
ROA not before:           Thu 12 Feb 2026 01:30:15 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b2c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7c:85:f5:33:c5:a7:c6:93:db:29:b1:38:e5:5f:d5:16:04:2c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 01:30:15 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=bd8f89594e40c2539480384a67815a6e2cf52fb301b0092efaf90b62a975a3c9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9e:5f:2e:fc:12:0e:3c:b6:e1:72:1b:9c:f3:
                    af:bc:f0:a6:fd:77:7c:e9:13:79:a6:e3:b6:4f:f7:
                    58:ac:3f:67:46:07:cc:82:53:37:87:4f:6e:30:b8:
                    7e:42:81:f3:9b:e2:e4:67:00:53:df:e8:35:6b:4b:
                    61:f0:ee:48:17:8d:55:09:ca:09:10:b6:a8:8d:11:
                    33:cc:e5:b5:77:7e:5f:7d:46:6b:20:e7:fe:86:50:
                    b9:84:5f:9e:87:7a:b0:b6:74:b1:ab:97:5b:a2:9b:
                    c2:59:c1:b3:84:26:f5:f2:8b:8a:19:a1:76:73:40:
                    03:56:d9:75:f3:58:cc:b0:ad:cc:fd:3f:3f:6d:51:
                    cc:83:4d:c9:8a:c7:ca:f4:e1:0d:b0:76:17:b5:47:
                    e6:3f:46:e4:cb:b9:97:87:81:24:68:93:79:66:5b:
                    a1:49:68:3f:64:0b:0e:c1:80:c2:e5:3c:2d:4d:b8:
                    dc:37:0e:6d:39:83:77:d6:fd:f1:8b:5a:57:5b:3b:
                    f3:38:55:68:5a:59:6f:da:8d:45:87:ff:f2:b3:1b:
                    7b:61:41:13:22:dc:62:da:6b:1f:e9:c7:28:e2:69:
                    fe:a4:a5:f6:ac:f8:11:49:01:b9:d6:ef:60:c2:cf:
                    b5:03:ad:0c:e9:27:3f:a6:19:09:05:e1:c5:55:74:
                    10:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7D:63:E9:49:C9:AE:59:D4:F5:9F:02:A2:2F:96:D2:8B:0F:F6:B0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7fb8dd6d-0a33-45f6-b898-8d83c14371f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b2c::/47

    Signature Algorithm: sha256WithRSAEncryption
         33:63:5c:63:03:57:f5:4d:cb:e4:df:57:28:11:bf:79:e0:98:
         f0:b8:7c:49:d2:0f:75:a9:d4:96:bc:e6:d9:50:84:af:0f:10:
         8a:1a:34:36:17:8e:62:72:c6:73:76:a2:21:4f:7e:cb:d9:81:
         21:47:c8:ab:36:84:5f:af:b2:5e:90:ba:4f:e4:e1:7c:27:2e:
         d6:12:0e:b6:b6:f1:16:06:75:8c:80:92:b4:0a:85:4f:9f:a2:
         8d:8f:22:f8:1d:96:81:92:6b:bd:1f:33:ed:f7:8c:c3:fa:45:
         97:93:90:6c:2e:18:62:f9:09:bd:52:b6:fe:cd:04:78:a7:4f:
         e6:22:b5:7a:50:c3:c3:60:2d:64:4c:93:51:db:05:65:12:97:
         e5:15:e1:c9:5d:b8:9d:99:31:9d:0f:ad:18:69:91:93:fd:44:
         79:ed:cc:4e:88:5e:35:56:13:2e:78:83:88:b1:41:dc:ee:60:
         61:ad:42:15:d0:f6:5b:72:61:9e:57:fc:7a:38:47:95:c3:b3:
         eb:f0:a3:cf:34:4e:25:de:06:b5:ec:51:8e:24:11:69:12:9e:
         ce:29:64:2c:5c:6f:db:d3:6d:40:68:3a:cb:3d:ad:4a:67:04:
         e3:96:83:7f:3c:37:b0:83:2c:0d:9a:a8:8d:93:09:0b:53:ca:
         c6:98:de:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:19 2026 by rpki-client