Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/848f4284-0401-47ac-bf45-2884eca5e0ce.roa
File:                     848f4284-0401-47ac-bf45-2884eca5e0ce.roa (raw, json)
Hash identifier:          9Mb1aaEQpU8lelCkkIV4CTYJgJDoQxJrvsGFHblRbTA=
Subject key identifier:   7F:68:4C:61:45:B3:34:5D:22:14:46:3F:CC:92:22:B8:7F:76:24:E1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2C3420EE82D8F6499510D6E0FDDC627AC6CF298F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/848f4284-0401-47ac-bf45-2884eca5e0ce.roa
Signing time:             Fri 13 Feb 2026 10:01:43 +0000
ROA not before:           Fri 13 Feb 2026 10:01:43 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ba4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:34:20:ee:82:d8:f6:49:95:10:d6:e0:fd:dc:62:7a:c6:cf:29:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 10:01:43 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=d4c8b4bc2a626129781d31c53ba50064f80b748bf8cf668f8607d854837c7fec, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:53:a9:fb:15:58:73:e2:b7:ac:8b:8f:e0:
                    51:bc:80:7b:1e:64:f9:0c:d7:c7:45:f3:4e:5f:e6:
                    be:40:00:08:92:27:b1:d0:ca:a2:ec:2f:a1:40:30:
                    c1:90:82:5b:78:a0:11:4a:2c:12:a1:13:0f:2a:38:
                    c3:f5:71:d8:3a:8b:1a:e3:76:b4:af:20:c2:f9:4a:
                    a2:60:06:64:20:61:2e:a3:ad:33:3c:cf:7f:12:07:
                    c5:93:9a:ed:46:9a:33:f0:c2:96:14:11:d1:a2:26:
                    5e:ad:c8:76:3a:6c:72:a5:0f:63:7e:af:52:40:da:
                    79:f1:98:40:df:ea:47:78:bf:05:d3:c0:0c:c6:b5:
                    70:74:2a:04:53:f4:93:92:27:e3:04:37:10:e7:49:
                    7f:47:3e:bb:35:9c:75:fb:04:ea:57:79:92:ee:2c:
                    da:57:65:5d:b2:65:c2:90:a2:3b:e1:97:56:75:fb:
                    d9:01:51:f3:8e:3b:f3:7b:6d:c9:cd:01:22:56:14:
                    31:fc:d9:da:b1:b3:9c:bc:27:81:d8:c4:4b:76:50:
                    0a:e3:0b:b3:97:e4:9c:50:f5:6c:a1:f7:3b:de:c0:
                    1c:b3:43:d4:62:84:9c:3e:3c:93:1a:8b:7b:45:3a:
                    35:f3:80:63:be:9b:c4:9d:3b:0e:c8:b2:1d:66:b4:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:68:4C:61:45:B3:34:5D:22:14:46:3F:CC:92:22:B8:7F:76:24:E1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/848f4284-0401-47ac-bf45-2884eca5e0ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ba4::/46

    Signature Algorithm: sha256WithRSAEncryption
         62:15:70:8c:dc:59:ea:7b:82:19:bf:b4:dd:1f:59:60:be:a0:
         6a:d0:91:45:53:4f:1c:8c:44:ba:14:e2:e8:88:0f:27:1b:87:
         2e:4c:6d:78:ef:23:73:d6:dc:1e:ac:cb:e3:7d:f0:4b:10:6d:
         73:39:13:27:1e:b4:66:65:40:a4:b4:32:01:3d:18:ac:ae:09:
         99:60:62:a8:46:f2:3b:5e:1a:96:8a:d8:be:90:f7:97:d8:47:
         8a:5b:96:fd:c8:6c:d0:53:4a:20:ee:ca:0e:bb:f6:66:4d:f8:
         6d:ad:96:3b:ca:03:97:c0:68:9d:ba:fa:5d:fe:cb:0c:c2:0b:
         ce:bd:b8:cc:09:bd:c5:31:72:d6:aa:a5:f2:c9:26:d9:a4:4e:
         96:2e:fe:11:f1:d2:7b:00:20:06:07:8b:c6:64:da:c7:05:a7:
         c6:5d:ad:4c:df:18:cb:32:7e:36:03:d0:e1:11:fd:ea:ee:ec:
         7d:6a:c6:3c:c1:43:4d:84:b0:02:a5:a3:43:8f:8a:ed:2a:ab:
         84:aa:18:51:98:c2:1d:d4:d6:61:b3:f1:1a:5c:05:74:11:b1:
         c0:6b:97:46:54:8c:6a:92:b3:b5:11:85:ba:7b:8b:8e:71:f1:
         69:86:b9:4d:8e:58:c0:af:12:79:4b:cc:7a:40:c2:85:4a:62:
         d4:7d:5b:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:34 2026 by rpki-client