Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8e1e35f4-6769-4cf9-8fb1-1db742983408.roa
File:                     8e1e35f4-6769-4cf9-8fb1-1db742983408.roa (raw, json)
Hash identifier:          rppWv+8bTCy5itnNQ9HIumWvqF2zHa2OBzgquLX7hZw=
Subject key identifier:   7B:75:AA:FB:6C:C5:3F:C7:0C:42:8E:42:65:0F:B0:11:52:81:20:83
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0A5998D36CF82CA0C1A5531F414138A60821CB15
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8e1e35f4-6769-4cf9-8fb1-1db742983408.roa
Signing time:             Thu 12 Feb 2026 00:00:06 +0000
ROA not before:           Thu 12 Feb 2026 00:00:06 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d66::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:59:98:d3:6c:f8:2c:a0:c1:a5:53:1f:41:41:38:a6:08:21:cb:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:00:06 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=c4bd9276cf2d3caa7afd675ed48bc1ea1a60f67213eb4bf68e2cf9af9d8b9d3c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:ee:67:f7:b9:eb:77:1c:43:2f:da:03:a4:
                    eb:b6:60:62:08:22:67:cb:8f:ce:23:1e:58:bf:56:
                    f4:ca:a6:cc:16:26:78:13:cf:0a:01:c7:8b:68:c0:
                    4a:9b:18:c3:ac:6b:91:97:e2:6f:72:21:93:cf:0f:
                    43:06:9f:f3:3f:7d:fd:51:42:51:d8:3b:26:91:80:
                    8b:60:a1:ab:8f:8e:6b:96:5e:81:71:64:f7:43:bd:
                    09:55:b6:1f:34:a9:7b:7e:df:a8:0d:ef:d7:66:65:
                    5e:2d:8e:8d:83:ed:97:11:aa:82:68:41:7f:7c:e8:
                    ea:35:9d:71:8a:d4:3d:f6:b9:80:d6:62:05:6b:51:
                    e5:c7:57:54:13:44:57:a3:d9:85:30:e7:b0:d2:be:
                    69:e2:4b:e9:06:69:03:88:68:cd:ce:de:a8:56:ac:
                    69:d1:49:e5:2f:ea:85:28:7c:7f:cf:19:80:73:01:
                    e8:73:3d:53:3f:a4:90:ab:e3:d2:d3:75:22:35:fc:
                    fa:2d:c2:43:1d:86:0f:8c:e9:a0:da:10:4c:5a:90:
                    e8:65:a7:a9:d4:94:59:17:9f:e1:50:6c:65:10:87:
                    4f:22:65:6f:07:49:4b:cd:42:18:20:37:4a:33:f8:
                    63:b5:78:43:bd:8c:3f:65:2a:71:5b:8d:5e:be:9d:
                    24:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:75:AA:FB:6C:C5:3F:C7:0C:42:8E:42:65:0F:B0:11:52:81:20:83
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8e1e35f4-6769-4cf9-8fb1-1db742983408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d66::/47

    Signature Algorithm: sha256WithRSAEncryption
         7a:89:3c:04:34:36:4f:50:e6:d0:00:4f:da:f4:c8:38:a2:53:
         a2:78:76:46:df:dc:7a:f7:c0:c9:1f:77:1a:b0:22:3f:ba:9d:
         3c:65:b5:05:ed:5b:b4:62:cc:90:4f:04:f9:14:50:39:c1:ca:
         f4:a3:d3:9b:a1:6c:54:7f:63:79:de:43:56:05:40:7b:45:a4:
         e4:a1:7f:7c:4e:a6:9e:a8:f4:8e:d5:39:76:09:94:ed:bb:ca:
         b4:10:05:7c:f9:79:3e:4b:37:55:f5:f4:fb:0e:85:6c:f0:94:
         1c:39:47:9e:73:fc:37:f6:3e:ce:05:1a:19:37:ba:fd:db:57:
         5c:11:82:e5:46:97:f8:2e:e8:98:ff:53:75:90:1b:f1:39:7f:
         0a:88:72:3f:cb:6d:2d:84:cd:e4:47:7d:c0:e8:92:60:08:fa:
         4e:bd:fc:1e:04:be:1b:c3:78:e5:8e:6a:68:b8:14:33:fe:20:
         43:cb:9f:08:1d:f5:de:19:40:44:77:71:e1:75:c3:b1:5f:c6:
         db:46:8a:1d:f6:52:ed:67:7f:95:ef:ee:3e:67:f7:b6:60:f4:
         39:9b:99:67:47:28:22:06:8c:5c:ce:1f:9f:fa:79:2e:cd:16:
         16:36:13:0b:a1:02:95:ed:a6:65:89:55:4b:13:21:1d:f8:5a:
         65:61:f5:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:02 2026 by rpki-client