Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9a477552-0ad0-4982-8bab-95d734ea1596.roa
File:                     9a477552-0ad0-4982-8bab-95d734ea1596.roa (raw, json)
Hash identifier:          NXVXCF/3t0CCqAic61QX1Cpa03/bhlqOYqyzO2Onkew=
Subject key identifier:   D0:92:33:AC:CA:13:80:FA:11:A2:EE:58:EE:24:6A:60:81:06:EE:A7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       58A64105D60B32BA453D2847DD3B55FAF756D206
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9a477552-0ad0-4982-8bab-95d734ea1596.roa
Signing time:             Fri 13 Feb 2026 12:41:55 +0000
ROA not before:           Fri 13 Feb 2026 12:41:55 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d10::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a6:41:05:d6:0b:32:ba:45:3d:28:47:dd:3b:55:fa:f7:56:d2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:41:55 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=ec553a3a9156e9b911c2e6655f936b109d89ce301e7b6d6d1694140bcd617187, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:c9:f2:38:d8:fd:16:f7:c4:2d:2e:95:61:
                    1a:c2:a8:f0:29:8a:e9:be:bb:ea:ce:25:74:0c:aa:
                    0a:5a:69:cb:50:de:fa:e1:0d:23:39:13:64:40:20:
                    b9:c0:fd:f0:0f:6b:a4:4e:3c:f6:c7:1c:a6:7a:95:
                    f0:a5:c3:bf:db:e0:8e:7c:49:eb:7f:35:1b:b6:44:
                    40:8d:74:bb:87:49:ab:57:fa:42:42:f8:7d:1b:c7:
                    bb:59:1c:65:e8:79:64:33:69:7f:67:fd:e3:93:5d:
                    0e:a5:23:91:86:9b:a5:ad:2a:b6:8c:bb:14:b4:52:
                    69:ec:30:75:6c:25:24:2d:b5:6f:10:e0:dd:ac:2a:
                    37:a1:aa:ba:f2:02:8b:27:1b:b5:90:40:5e:5d:61:
                    05:78:5b:05:72:eb:af:ac:84:5d:45:65:80:8a:c4:
                    1c:40:5b:5f:2e:ca:33:cd:68:c6:9c:c8:da:21:42:
                    72:b5:f0:d4:64:c3:7a:6e:5b:41:9d:17:70:11:16:
                    fd:80:9b:cc:fa:8c:f8:73:ae:df:5c:78:97:19:07:
                    c7:4f:1a:69:70:a7:38:b1:c4:91:a4:97:d8:81:94:
                    e8:e9:f0:c5:28:11:84:a3:f0:7c:95:01:03:41:9c:
                    c6:d8:17:70:b7:df:89:f0:5b:35:1c:dc:0a:e2:30:
                    a9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:92:33:AC:CA:13:80:FA:11:A2:EE:58:EE:24:6A:60:81:06:EE:A7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9a477552-0ad0-4982-8bab-95d734ea1596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d10::/47

    Signature Algorithm: sha256WithRSAEncryption
         25:fa:85:e3:c7:56:4e:b6:86:f7:70:ad:9a:e2:30:de:7b:e1:
         28:68:fe:eb:05:39:35:bf:60:db:13:0c:f1:2e:c1:6e:c9:c4:
         6a:69:0d:7f:03:61:4b:90:71:24:16:5a:04:31:04:e0:8b:5d:
         3a:90:2c:13:a2:1f:4b:97:60:a4:5b:dc:52:92:43:87:d0:c2:
         55:76:6e:76:70:f2:24:8b:3f:63:70:20:c6:a7:dc:93:ea:50:
         ca:a1:ee:46:58:c4:cb:ca:23:c8:fa:b3:fc:6a:fe:07:d2:38:
         87:24:d4:c9:32:3e:e4:78:3b:2e:e6:fe:46:bc:65:6a:74:dc:
         4f:d8:8a:cb:72:e3:d4:cb:33:46:5b:4d:6d:b7:7b:ee:24:5f:
         3a:a5:4d:ff:9c:4b:12:02:0b:60:36:92:da:a9:8e:2a:90:59:
         43:36:73:55:39:76:2e:5c:52:44:3f:a4:d9:dd:ff:d8:64:41:
         f0:97:56:bb:a4:20:08:b7:b1:f1:47:5c:b4:76:53:6d:b0:70:
         58:8e:99:2e:eb:1d:5b:c3:1d:a1:39:f6:50:63:6a:21:df:6d:
         f5:2b:dd:17:02:22:73:64:cd:19:a2:0d:0a:2a:71:d4:82:f8:
         c9:2e:a8:dd:02:33:de:7b:98:73:74:14:ec:96:c9:16:89:03:
         27:d9:ea:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:55 2026 by rpki-client