Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9fa01c59-2d48-4aac-8f99-df9f37292fd8.roa
File:                     9fa01c59-2d48-4aac-8f99-df9f37292fd8.roa (raw, json)
Hash identifier:          XR/putApd9VZTsb9nuh3GxOROyAXi2hhklzd333NUsU=
Subject key identifier:   C4:5F:AB:BB:8F:73:F4:A9:02:E2:E2:5A:FF:19:08:E6:9D:35:27:AA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2C4EF4C82DDD8799043135FE61EEF1A9358A060C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9fa01c59-2d48-4aac-8f99-df9f37292fd8.roa
Signing time:             Fri 13 Feb 2026 13:11:11 +0000
ROA not before:           Fri 13 Feb 2026 13:11:11 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3bf8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4e:f4:c8:2d:dd:87:99:04:31:35:fe:61:ee:f1:a9:35:8a:06:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:11:11 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=ecaa57d03709ea6a8764cfa94360e1ca9eaf20a39b969e02358d5365eb580af6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:a1:27:d5:82:b2:81:f9:30:43:5a:a9:36:
                    6b:6c:dd:10:84:a2:06:50:44:dd:35:42:68:24:69:
                    74:a1:5f:2e:5d:c0:42:fc:c8:a5:2a:1a:72:6c:5b:
                    f2:0e:06:3f:b8:74:e0:7e:d3:af:90:e3:36:f7:2c:
                    53:a8:ce:29:c9:82:c0:db:30:cb:61:1c:8f:27:69:
                    80:6c:72:88:ae:13:97:ca:92:99:2c:50:1b:bc:30:
                    c9:d0:70:e1:13:a5:26:c0:d2:75:be:3c:a5:6d:5d:
                    ac:50:ca:e7:45:47:be:b2:ad:8b:3b:4e:30:76:8a:
                    35:d2:22:80:96:2b:d1:9e:52:9c:09:52:f7:14:62:
                    d1:9a:d8:bb:a5:9e:76:69:d9:c6:b8:c8:91:9b:e0:
                    fe:c5:39:e1:1c:7e:b4:f2:cc:55:4e:46:af:de:e1:
                    9c:51:b7:df:4b:7e:56:38:ba:cd:61:6d:c1:ad:16:
                    e6:58:82:37:cc:45:e8:26:df:68:1e:8d:58:ad:48:
                    80:48:11:27:37:74:8f:d0:7e:79:cc:25:05:cb:65:
                    b3:fc:26:a1:ba:9a:4b:51:9b:a4:3a:8b:df:a1:2a:
                    a9:41:b1:bb:f3:61:4e:03:19:6d:83:bb:ca:fd:26:
                    84:b8:e2:b2:d9:a6:be:0a:be:f9:0c:35:be:78:a3:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5F:AB:BB:8F:73:F4:A9:02:E2:E2:5A:FF:19:08:E6:9D:35:27:AA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9fa01c59-2d48-4aac-8f99-df9f37292fd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3bf8::/46

    Signature Algorithm: sha256WithRSAEncryption
         55:a8:3c:f4:cd:66:47:c2:75:12:25:0a:d5:2f:f7:dc:a3:5a:
         37:cf:20:92:d9:4f:1c:7c:cc:e1:1b:f4:0a:28:d9:28:2f:39:
         f6:8b:69:43:4d:70:ab:57:c8:87:be:9d:df:f6:79:07:ce:18:
         85:39:fa:83:9b:31:5f:90:29:17:7f:a6:f2:2b:6c:19:b0:45:
         f5:c0:df:6e:3a:76:6a:56:f3:e5:0a:a3:61:ef:33:d0:46:25:
         83:49:83:ad:c6:f0:aa:6e:3a:91:9c:2a:e0:50:58:09:1b:95:
         c7:03:e9:f8:e6:8d:36:c7:ed:88:dc:61:9d:35:3f:6b:a9:08:
         6a:e8:e6:5f:10:8e:79:15:2a:d3:be:b0:96:e0:40:3d:11:de:
         4d:4c:3e:1b:72:95:5b:7f:d3:bf:58:65:36:d1:ef:6b:8d:79:
         a4:3d:da:98:38:58:bb:f4:03:1a:7f:b6:64:fe:37:95:fd:ff:
         3f:18:85:cf:a1:4d:70:9e:c2:23:3d:f2:5f:9f:3d:f1:02:98:
         b4:b0:1f:b9:33:96:cf:b6:5a:96:ec:6a:16:73:a7:03:18:02:
         c3:56:3d:fe:8a:18:f1:17:7e:57:f8:0d:1d:bd:bd:f2:a4:bb:
         ae:9e:50:cd:ce:4e:32:cb:07:48:08:18:90:bb:ab:dc:2d:e2:
         be:2f:3a:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:09:00 2026 by rpki-client