Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87ecb081-08fd-4d57-9889-7e30e3c362ec.roa
File:                     87ecb081-08fd-4d57-9889-7e30e3c362ec.roa (raw, json)
Hash identifier:          5ecExWgQ/B8GdE6JG1+p/nKOfRYJhCUsneXxN6s+F4U=
Subject key identifier:   67:1B:A1:D6:43:6C:0A:AA:76:E5:1C:A3:BE:B4:A2:6F:FF:05:9D:2C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7E3E5624E09D98B9DFC7CD98E259D398F252CCA2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87ecb081-08fd-4d57-9889-7e30e3c362ec.roa
Signing time:             Fri 13 Feb 2026 10:11:20 +0000
ROA not before:           Fri 13 Feb 2026 10:11:20 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2dcc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:3e:56:24:e0:9d:98:b9:df:c7:cd:98:e2:59:d3:98:f2:52:cc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 10:11:20 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=4d7623c53003283854994915e3d4163ccda98ed264dbd51056c6125377791cd2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:84:06:3b:18:5f:ff:84:2e:66:8b:42:98:
                    14:87:1c:b0:15:48:28:c1:23:bd:9a:8d:31:aa:e1:
                    d1:37:a3:18:9c:e3:b1:14:3b:de:38:7a:c6:0d:17:
                    b2:e5:d8:0e:f0:8a:61:0c:8b:c5:bb:33:7a:73:d0:
                    1f:20:20:4b:84:fb:a2:63:45:6a:e4:ad:f5:64:4d:
                    c7:b5:fb:28:33:f3:58:b6:58:42:b2:eb:fe:3a:ca:
                    e1:0f:a6:a5:9d:08:28:5e:68:d9:b4:b0:3a:76:d9:
                    c7:51:a4:64:ce:0f:28:95:57:b4:92:9b:0e:35:07:
                    23:56:5f:e2:2a:c7:20:3e:19:3d:95:89:10:f9:8c:
                    0d:f4:d6:57:13:67:69:83:0d:e6:67:c0:4d:7f:0b:
                    c8:09:6b:6f:ab:e6:7a:c7:7b:1d:15:fa:1b:0d:eb:
                    7d:94:0d:1d:a0:b1:11:41:49:1f:5e:6f:80:24:9e:
                    cb:91:f1:92:c8:fe:53:94:70:9c:4b:2c:52:dd:9d:
                    71:b2:74:86:86:55:3c:93:4d:da:9c:31:fc:52:1b:
                    7e:dd:d9:a5:ab:36:d9:ae:52:ef:d2:15:c7:f6:b8:
                    75:10:fd:fc:e8:7f:2a:5d:4b:22:30:d8:f2:07:c1:
                    cb:e9:fa:88:0e:1a:98:2f:ab:82:1a:01:e3:af:b5:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1B:A1:D6:43:6C:0A:AA:76:E5:1C:A3:BE:B4:A2:6F:FF:05:9D:2C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/87ecb081-08fd-4d57-9889-7e30e3c362ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2dcc::/46

    Signature Algorithm: sha256WithRSAEncryption
         84:d8:0a:63:5a:d4:84:40:06:8d:da:1f:fb:01:55:56:cf:a4:
         67:82:25:db:1b:bc:a9:54:c9:3a:99:0b:7f:6e:17:16:b2:7e:
         64:24:d3:3c:10:d8:7e:2e:5a:f5:0b:6b:13:03:bf:f7:26:f0:
         ee:1a:00:07:c3:59:81:ac:7b:89:22:e9:1b:a2:4e:bc:b6:3c:
         e4:cf:c8:7d:8b:12:3e:97:57:64:b6:a1:eb:d5:15:41:4a:43:
         53:c2:47:92:b1:ae:71:f3:8a:04:d8:c0:7b:a9:d6:7a:6c:4b:
         94:da:b9:64:55:75:e7:bd:16:c1:bb:b1:ef:9a:ac:5e:41:08:
         40:eb:e6:e7:1b:fa:b5:3b:3f:81:0e:d3:ef:53:64:ef:40:cf:
         46:8f:a0:b4:14:13:6d:08:25:72:0c:b9:cc:4d:b0:81:ba:c2:
         73:c6:ae:57:e6:f3:a4:5e:90:93:f2:a6:99:35:20:15:5e:a4:
         c3:3f:c4:91:c7:6a:22:85:6c:f0:3d:d3:36:c3:bb:9b:ba:ab:
         f9:14:b1:a3:9b:3c:f4:bd:b2:3b:d7:6c:ef:40:db:aa:80:6f:
         81:3d:3c:d1:56:ab:02:6f:a0:35:94:4c:64:3b:fb:12:17:9b:
         ce:92:69:b9:dc:3b:00:0f:16:f5:4b:47:f4:e1:1e:8a:fc:ae:
         25:83:76:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:03 2026 by rpki-client