Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/82749281-dcd3-4815-b087-b0547b678308.roa
File:                     82749281-dcd3-4815-b087-b0547b678308.roa (raw, json)
Hash identifier:          a2ne/MODwj/opfrV6nfFrFQtCHkXEiHiSEwawde/vfM=
Subject key identifier:   A6:75:E9:D4:A7:62:17:1B:13:D9:11:86:4F:77:92:F8:7A:E2:D2:74
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3037C805ACF7ADD1E4892E1430E0937119E0604E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/82749281-dcd3-4815-b087-b0547b678308.roa
Signing time:             Sat 21 Feb 2026 00:20:07 +0000
ROA not before:           Sat 21 Feb 2026 00:20:07 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1ec8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:37:c8:05:ac:f7:ad:d1:e4:89:2e:14:30:e0:93:71:19:e0:60:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 21 00:20:07 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=10281d158c3c4098457bd52952c4fc850bb411536c5d723209d87d093a2d0e26, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:cb:ac:99:bf:eb:6b:e0:24:24:89:d7:83:
                    f1:5c:5a:a6:c7:9c:5b:c3:7f:18:b0:4a:0b:d2:d2:
                    a7:89:1d:68:3b:52:a9:fc:f7:43:cf:01:3c:b9:e2:
                    f6:e4:fe:37:8b:f8:01:97:b6:54:00:dd:fc:c7:7d:
                    db:80:6f:fc:49:b6:8f:11:84:b5:c9:ff:43:fe:25:
                    80:b2:50:f7:5c:52:c6:37:f3:79:a4:34:d1:45:8f:
                    8c:21:ba:06:c6:80:27:a3:1b:e0:80:f8:d9:d2:8b:
                    60:d7:f8:31:9f:d4:66:18:41:dd:84:b1:2b:f9:cd:
                    d8:b6:96:ac:f3:86:d4:88:3b:61:c2:f0:be:69:6d:
                    d7:28:2d:d8:da:86:87:c2:b1:a9:e5:ae:f5:98:db:
                    6c:08:c1:4b:5d:a5:5f:e0:ac:7a:28:8b:00:99:5d:
                    78:b5:99:60:bf:3b:1b:83:e9:19:bc:50:8a:df:a0:
                    51:da:ac:bf:f5:7a:fa:90:d7:cf:a1:60:80:d5:12:
                    e4:d1:53:00:db:6a:17:be:80:a0:5e:98:e4:bc:f7:
                    c1:22:d3:da:03:f4:fa:32:68:e5:a2:76:ba:8e:ef:
                    22:5d:ff:19:2d:2a:1b:bb:4e:bc:a3:5f:9d:31:c7:
                    5a:0a:78:e0:0f:2d:88:b2:ef:d8:8f:cf:e6:c7:72:
                    a3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:75:E9:D4:A7:62:17:1B:13:D9:11:86:4F:77:92:F8:7A:E2:D2:74
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/82749281-dcd3-4815-b087-b0547b678308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1ec8::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:68:64:ff:2f:56:da:86:66:19:27:20:7c:ea:98:13:81:2f:
         00:9d:dc:4f:e6:cb:51:86:5e:34:fd:0d:33:5d:bb:38:5f:40:
         7c:df:ae:49:ad:82:95:00:8d:3b:16:5d:35:a7:98:d3:b7:50:
         1a:62:be:13:d3:6b:c6:32:32:87:78:d6:11:48:d4:a0:26:12:
         7e:c9:43:9b:9e:9b:6e:fd:30:7f:ca:ad:3c:04:38:c5:3a:66:
         b1:e9:83:80:73:5c:25:d7:a0:00:dd:8b:cd:0a:a9:98:75:ae:
         49:7c:78:8b:7a:30:b0:50:56:cf:fd:49:9d:8a:78:e2:39:62:
         1d:9f:7d:fb:ca:35:7d:91:02:f9:71:81:bd:20:7d:60:57:29:
         5d:62:a3:26:6c:5b:b1:f4:8d:5e:23:35:34:7a:9e:1f:15:f7:
         db:1b:9f:0e:8f:55:3f:35:78:8b:b9:95:be:89:c9:13:2f:0a:
         d0:59:97:fe:c8:69:55:55:91:14:41:eb:25:94:67:9d:fc:55:
         34:40:93:77:14:a2:dd:5d:04:2f:71:6a:cf:1a:3e:07:f1:6b:
         f8:e6:d7:0d:f8:34:36:7a:7e:e4:22:ad:ca:31:95:46:9c:84:
         1a:ec:19:bc:91:57:bd:05:23:aa:5b:82:82:d4:b0:6e:a0:47:
         39:be:0f:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:50 2026 by rpki-client