Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93300b8a-3dcf-45ec-9884-099439678f37.roa
File:                     93300b8a-3dcf-45ec-9884-099439678f37.roa (raw, json)
Hash identifier:          rx6ZFMjqQxwg5o1wR89nccJDoRhIL3Rhon7r+bdFD2Q=
Subject key identifier:   28:FA:2B:80:6F:0A:62:EF:E2:7A:A2:CA:12:DB:BE:F3:31:49:4A:7D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4CD7AB398B04FAAE07388DD7A9C33887AADF59E9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93300b8a-3dcf-45ec-9884-099439678f37.roa
Signing time:             Thu 12 Feb 2026 00:21:56 +0000
ROA not before:           Thu 12 Feb 2026 00:21:56 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2bb2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d7:ab:39:8b:04:fa:ae:07:38:8d:d7:a9:c3:38:87:aa:df:59:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:21:56 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=15b5cc59dfbb4233705925c7161e463a02e0b31afc5749a17556d5910180916c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:a8:42:ff:f3:14:48:66:48:e8:ce:68:64:
                    77:bb:12:9f:2d:99:b0:6e:cb:77:e9:a9:f5:13:7b:
                    5a:da:c6:ac:64:17:75:ff:72:ff:44:f1:e5:cb:11:
                    fa:40:ca:b0:5b:72:ef:da:51:e0:fb:00:9f:76:fe:
                    f6:f1:10:f5:2a:0d:aa:df:96:f4:9b:f6:47:01:89:
                    5c:a6:80:a3:18:4a:75:4a:c2:30:bc:be:4b:ca:3c:
                    0d:64:72:af:5f:e4:ce:a1:44:69:19:7a:06:23:2c:
                    89:48:c9:ee:f9:77:94:59:3a:9d:40:5a:d8:9e:43:
                    1d:1e:82:d1:84:a6:6d:d4:18:39:c1:cc:8e:48:71:
                    27:ba:d0:9e:8a:72:f2:36:2a:a4:19:8b:27:bd:dd:
                    51:a4:48:6b:27:f4:e3:64:71:94:7c:9a:69:ef:70:
                    7a:a6:05:d6:ab:a7:09:e1:ca:d2:c2:c7:aa:6e:8b:
                    cc:84:4b:c9:f1:ec:cf:7d:e3:e5:95:3f:81:c4:f4:
                    54:7a:d1:20:b9:86:18:19:0b:d9:7f:25:7f:18:e7:
                    5b:73:bc:dc:c5:77:b4:52:ee:26:e8:cb:6b:f3:37:
                    64:28:ba:56:95:b3:39:73:9f:05:27:81:63:6c:ae:
                    0b:a5:e4:60:af:f4:92:b1:e3:6d:d4:62:e8:3b:92:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FA:2B:80:6F:0A:62:EF:E2:7A:A2:CA:12:DB:BE:F3:31:49:4A:7D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/93300b8a-3dcf-45ec-9884-099439678f37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2bb2::/47

    Signature Algorithm: sha256WithRSAEncryption
         1e:fa:ee:e3:af:f5:1d:e6:c4:8a:b0:a1:29:92:e8:0a:34:ae:
         2b:67:48:98:45:6f:a2:88:c1:e5:04:cf:11:49:f1:73:36:c9:
         c6:b9:b9:29:d3:74:c0:96:f4:9f:9c:ac:21:47:da:cc:ca:2a:
         d1:88:9a:2b:61:fb:c1:72:5b:3f:4a:e8:dc:e3:b9:c5:87:c4:
         37:45:5c:61:2c:62:04:df:79:9d:6c:8a:34:c0:c7:f7:d0:88:
         8d:33:ae:d3:22:54:61:d5:c6:52:17:de:ad:3d:11:b7:c5:5b:
         33:e9:25:e0:a1:44:be:13:6e:de:5c:37:72:cc:b2:8a:6e:a9:
         bb:95:e3:47:a5:cb:5b:86:e6:79:df:bf:4d:ce:5e:38:2f:11:
         9e:63:9a:dd:db:4e:33:48:30:9d:28:53:b0:55:2a:3b:64:ae:
         11:70:3c:3b:9f:43:3b:9a:93:e3:90:67:37:a1:40:5d:9e:55:
         2d:c0:83:de:bc:54:43:05:13:b1:4f:76:6a:f1:59:f9:b4:c5:
         b1:a5:de:9f:4b:ce:af:88:5f:4d:2c:66:b4:0a:d0:b8:bf:61:
         c8:72:f0:6e:03:e5:d5:13:af:13:87:d3:9d:98:f0:f0:4f:0c:
         99:e3:1c:ae:ea:ad:00:7c:51:80:b8:5b:24:95:c5:14:15:c8:
         ab:d4:d4:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:24 2026 by rpki-client