Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/96eb039f-29cc-4dea-baa8-d023430bc179.roa
File:                     96eb039f-29cc-4dea-baa8-d023430bc179.roa (raw, json)
Hash identifier:          9yB+VjjL22stG0FRR7E3Lr837HuVQdASoZ/GgJ6IzVw=
Subject key identifier:   E0:C7:E9:5F:F0:CC:31:B3:33:77:EB:C2:FF:6D:E4:31:A0:F4:8D:C9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       15433B86C29C78B49FC507B66B9D2BB9D27F68D3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/96eb039f-29cc-4dea-baa8-d023430bc179.roa
Signing time:             Fri 13 Feb 2026 13:21:56 +0000
ROA not before:           Fri 13 Feb 2026 13:21:56 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ce0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:43:3b:86:c2:9c:78:b4:9f:c5:07:b6:6b:9d:2b:b9:d2:7f:68:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:21:56 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=faa1f1eed66c6568ff0abd9b44a538e5923b9b5fdb873c06eb33ac6cbb37b604, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d8:b3:d1:e2:23:4f:4d:ba:b3:d2:26:b1:8f:
                    08:a6:f1:b9:64:e2:24:09:6e:eb:fc:e1:10:a3:06:
                    e9:b5:ac:6a:62:76:2f:c3:8f:ac:f5:a8:45:6d:38:
                    1b:c2:13:25:f4:79:56:40:ad:db:1f:bf:1d:63:cc:
                    5e:bc:ab:96:48:dc:9d:58:8f:9b:d2:35:4d:98:ef:
                    25:a0:33:2c:ff:77:db:09:07:b5:2c:55:d0:65:6b:
                    ae:d3:22:b3:db:94:c6:34:ae:90:93:08:5f:82:85:
                    6c:db:cf:49:34:18:65:b3:32:b2:ab:2d:8f:aa:9e:
                    3b:48:c8:ce:d8:b2:73:a4:d9:bd:7e:a8:bf:f2:57:
                    c8:30:c4:a3:3b:2d:3e:dd:1b:ae:27:0a:ad:1e:98:
                    7d:6a:05:81:f9:63:74:29:a1:12:77:e2:79:67:a1:
                    d0:a7:98:dc:30:1f:84:d0:bd:19:0e:22:61:6a:f3:
                    7c:75:5d:56:2d:e9:5b:97:a1:96:cd:4d:a1:f3:47:
                    b8:fc:64:c2:cf:9a:f8:ad:1c:d9:1b:55:aa:c8:de:
                    54:49:8d:8d:7c:50:9d:ae:55:69:16:9d:0b:ea:50:
                    a6:1b:e2:93:21:15:ad:bf:6f:93:0c:e6:5d:83:dc:
                    37:f4:5d:4e:47:fd:6d:a3:29:43:90:8b:b0:a8:7f:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C7:E9:5F:F0:CC:31:B3:33:77:EB:C2:FF:6D:E4:31:A0:F4:8D:C9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/96eb039f-29cc-4dea-baa8-d023430bc179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ce0::/44

    Signature Algorithm: sha256WithRSAEncryption
         17:d5:13:90:c3:f6:11:d7:a6:b6:05:47:ef:ec:3d:9e:4c:e3:
         34:a5:76:31:08:3c:bb:5b:42:45:20:28:9f:0d:59:30:70:6c:
         5d:fb:b6:99:e1:ab:08:c6:8a:00:14:4f:a6:97:b8:7d:32:dd:
         95:34:b3:3c:a2:3c:d1:0a:4e:1f:de:81:ec:0a:f9:b6:da:02:
         f5:28:99:9c:94:5b:c9:b1:1a:20:22:a9:b7:b7:1f:1f:23:62:
         1a:16:35:78:a4:2e:56:bf:27:2a:86:e1:16:da:4f:98:ad:e7:
         1f:96:6d:af:91:e5:ca:65:83:16:f9:8a:00:45:ef:6b:13:aa:
         b5:7e:fb:ed:9c:36:66:73:8e:8c:27:24:dc:ed:c9:0d:28:60:
         36:52:8a:44:4c:23:7c:7a:ea:bc:ff:1f:24:59:17:a9:2d:49:
         47:4f:18:fe:45:f3:2e:76:3c:18:7d:5f:e2:2c:7e:d2:75:85:
         51:f6:e5:a6:ca:3a:98:7c:c8:c8:5f:ac:4b:58:e3:da:01:4c:
         73:0b:65:e0:16:f8:ca:d9:e8:f2:8c:23:81:30:75:6e:79:d8:
         2e:b0:9e:33:32:ca:af:47:d3:3a:4f:4f:e7:74:f2:0e:10:88:
         bf:ab:3f:34:ec:15:7d:cd:09:72:d1:ea:87:f1:62:5d:da:4f:
         78:e1:93:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:11 2026 by rpki-client