Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ad12ab0-670b-4b7f-9239-f9adf8fedcb5.roa
File:                     9ad12ab0-670b-4b7f-9239-f9adf8fedcb5.roa (raw, json)
Hash identifier:          CfZQfOJogRnOQVdjcMaD8/GU39LCPwNU7teb9JU0v+M=
Subject key identifier:   CC:D2:D2:77:E7:EB:7C:6C:CD:C0:8B:7D:27:D5:43:82:91:F5:F4:6C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6972CE345BF974A557C33708769C68621F309DFC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ad12ab0-670b-4b7f-9239-f9adf8fedcb5.roa
Signing time:             Thu 12 Feb 2026 01:50:51 +0000
ROA not before:           Thu 12 Feb 2026 01:50:51 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b00::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:72:ce:34:5b:f9:74:a5:57:c3:37:08:76:9c:68:62:1f:30:9d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 01:50:51 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=a6fa061b093c710eac948236546adeaf6bcba5cbe8d5d7b49f8a6d053b52db5d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:b3:fe:da:8d:c7:f1:3b:6b:62:e1:fd:d2:
                    24:6f:5e:8f:f3:5a:70:16:f4:8f:8c:32:0c:31:89:
                    97:19:5c:71:54:9f:a8:a6:5d:41:28:d0:e2:b1:a1:
                    90:a3:f6:e6:a3:f9:91:a0:52:53:9b:ac:68:e1:0f:
                    ca:42:53:35:53:77:9f:41:48:5a:7d:f8:11:7d:ca:
                    7c:3f:dc:8e:63:92:c7:19:39:78:e1:25:ad:cf:8f:
                    95:d3:fc:e6:99:52:9a:4d:bb:5b:40:ff:b7:5b:20:
                    f0:6e:0d:47:f1:a8:9c:fe:44:57:21:c0:48:00:af:
                    31:be:e1:74:3b:f0:74:0d:cd:f7:15:55:19:83:c6:
                    bd:22:b8:c0:2e:1d:49:e5:16:c9:9d:11:5d:75:7b:
                    1c:83:6b:f6:e7:7b:3d:85:40:0c:da:b7:28:6b:11:
                    c3:da:1b:c8:3b:63:2a:1a:3d:8d:8d:60:27:a9:ba:
                    67:79:98:60:8e:9b:34:6a:43:f6:5a:da:a4:ce:92:
                    22:2b:8a:8a:86:5c:ee:70:0e:0f:88:58:eb:7f:e2:
                    d3:bb:fd:bc:5f:17:b9:ec:75:1a:da:66:34:d0:c5:
                    bc:d1:3f:d2:d6:c3:32:cd:fc:ca:6c:57:41:96:4e:
                    66:88:c1:88:9a:8a:a6:71:65:8f:9f:c0:ed:b6:79:
                    a0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D2:D2:77:E7:EB:7C:6C:CD:C0:8B:7D:27:D5:43:82:91:F5:F4:6C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9ad12ab0-670b-4b7f-9239-f9adf8fedcb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b00::/47

    Signature Algorithm: sha256WithRSAEncryption
         c1:40:fe:de:3f:65:d9:93:0d:05:c4:8d:a8:6e:12:6f:33:2f:
         00:ea:04:50:c7:5c:d8:6f:dd:5c:66:31:79:d5:b8:f1:1b:de:
         48:3f:41:67:ed:36:58:6b:5c:2c:77:1e:7f:f6:29:b4:4d:e9:
         cc:e0:ec:7c:3e:ce:24:86:87:cb:c5:b2:d5:8b:c3:60:c8:0a:
         ad:1b:e8:6f:55:a7:e6:56:3b:0e:15:04:09:58:f9:be:40:a1:
         f1:c2:32:d9:76:18:cc:01:8e:c0:9a:2a:c8:c9:a1:ba:81:0c:
         26:26:8e:21:91:e4:12:e8:42:54:97:b5:e1:6a:c0:84:96:8d:
         96:66:b5:80:f1:4e:78:20:c9:0b:9d:f4:80:22:d0:a3:c1:e3:
         84:dd:3e:a0:17:3f:11:1e:3e:6d:1d:78:f7:87:00:f7:d3:ae:
         1c:2a:9e:0c:0a:b4:c7:cc:b4:3d:80:6e:49:43:b2:0c:01:5e:
         25:99:c0:8b:51:de:29:e8:07:8b:34:1f:8c:b6:d4:26:07:02:
         de:71:5a:33:bb:6a:c3:7d:e3:5c:d6:7f:c3:41:69:88:be:bc:
         61:a5:46:fc:0d:38:6a:af:a0:5a:6e:ac:10:94:67:89:8f:10:
         30:80:fa:c8:17:c6:e4:84:eb:e1:3d:e4:0c:77:46:16:a7:7f:
         a3:e8:d1:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:20 2026 by rpki-client