Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9348db49-fbe7-46fb-a9b8-beadf5748535.roa
File:                     9348db49-fbe7-46fb-a9b8-beadf5748535.roa (raw, json)
Hash identifier:          QoYmfDYIL94OvkLqClnjz1A/Y7glj2Q3omSe7u9DOpE=
Subject key identifier:   24:D8:E3:22:CE:64:2C:C6:BC:E0:EB:86:74:C3:E3:44:F5:30:EA:DF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3E6C341092762CB7869E2D05EC46D9277C454AB0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9348db49-fbe7-46fb-a9b8-beadf5748535.roa
Signing time:             Fri 13 Feb 2026 08:40:08 +0000
ROA not before:           Fri 13 Feb 2026 08:40:08 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f80::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6c:34:10:92:76:2c:b7:86:9e:2d:05:ec:46:d9:27:7c:45:4a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 08:40:08 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=b4e88137c3381dff1f23473e026f87b7f11bd73973aaaee83d58ced9e1085cd0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:f1:d3:00:96:e0:99:b4:21:6b:ce:7b:85:
                    d6:a9:7d:1c:2c:9c:bd:13:c3:c9:6d:83:a8:ae:ef:
                    ae:7a:0e:0a:21:70:f4:8e:e1:fa:1f:24:36:c2:5b:
                    de:0a:6f:28:73:0d:a1:37:66:ae:92:51:af:5c:39:
                    6c:0d:ff:7f:56:14:b4:56:1a:64:44:21:44:49:91:
                    9f:04:2a:b9:ec:b0:d6:4f:a9:d0:e0:da:17:26:4e:
                    20:3b:04:3b:25:56:2b:da:b0:38:64:0a:d8:9d:8c:
                    eb:7d:18:f5:1e:78:70:cc:f2:04:ef:74:e0:3f:a5:
                    e6:4f:79:96:45:34:8f:e0:b5:a3:b9:7b:c2:48:37:
                    aa:8a:a1:a2:33:d6:65:be:9a:0f:2b:a6:52:01:5f:
                    c7:1a:9c:6f:87:3a:47:19:e7:ba:4e:69:ab:42:cc:
                    11:19:f9:7c:4d:c5:8a:b2:c1:09:01:39:b0:92:cb:
                    b9:5a:c3:50:69:0b:e0:04:86:10:18:1a:32:5e:94:
                    84:db:c5:15:56:3c:c9:b6:53:f5:f4:26:a8:af:55:
                    fc:24:e7:01:8e:3e:1f:43:eb:f0:bf:0d:91:24:bf:
                    c1:70:4b:66:71:cc:d6:e9:ce:d0:05:60:26:74:6a:
                    31:91:e8:be:9f:cb:04:f4:40:9a:96:e2:63:c7:fa:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D8:E3:22:CE:64:2C:C6:BC:E0:EB:86:74:C3:E3:44:F5:30:EA:DF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9348db49-fbe7-46fb-a9b8-beadf5748535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f80::/43

    Signature Algorithm: sha256WithRSAEncryption
         53:ae:10:43:bb:0a:ab:69:00:b3:7e:67:05:c8:69:5a:33:89:
         01:45:93:7a:ce:42:0b:23:53:24:45:d6:6e:86:d7:60:b7:90:
         e0:25:01:65:8a:c8:9c:17:14:bc:fb:64:82:82:6e:82:9e:88:
         bb:bf:a2:77:2d:87:57:89:dd:d5:8a:3e:69:b2:6d:d9:81:37:
         f1:48:b6:bc:66:61:27:b0:a3:36:62:03:62:6f:57:d5:c3:74:
         a8:94:be:65:ef:8a:3a:48:54:f1:cf:94:ae:40:5b:d7:17:0d:
         10:79:31:f8:83:ac:a8:2b:80:bd:3a:1f:1d:c5:54:4a:57:fc:
         66:e7:60:e2:a0:85:6a:8a:f4:95:85:dc:34:b8:17:3e:a3:91:
         5a:a4:5b:7a:fd:0b:31:39:0a:c1:f9:f2:24:08:f2:e0:43:f1:
         83:4c:fc:4a:4b:d1:56:66:85:8c:34:0e:af:9e:25:db:46:cf:
         0e:14:38:82:7e:49:57:57:b7:00:75:0d:f4:e0:b6:c5:a2:dd:
         b4:d1:a5:f7:05:aa:d9:a6:05:90:39:40:2a:a9:5d:2c:67:25:
         b2:5e:49:a0:8b:3c:98:31:6a:e5:95:1e:a8:0d:a7:11:f5:b4:
         d6:29:c7:58:8b:3e:96:b2:d0:de:97:40:5e:f0:df:57:8a:49:
         38:35:e8:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:23 2026 by rpki-client