Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2a94a2a-8730-45f4-acc7-027b69dc3af7.roa
File:                     a2a94a2a-8730-45f4-acc7-027b69dc3af7.roa (raw, json)
Hash identifier:          aHktgMFi/JTMWkSHnSihUrSq/jL9DOkaUnyVej3Zk9A=
Subject key identifier:   73:4D:5D:2F:02:EC:CB:6E:58:7F:1A:F4:92:79:92:92:FB:5A:3F:B3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1AB97AF03E15893818FD0F21D9E6BB63DACB82
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2a94a2a-8730-45f4-acc7-027b69dc3af7.roa
Signing time:             Fri 13 Feb 2026 11:20:38 +0000
ROA not before:           Fri 13 Feb 2026 11:20:38 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3adc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b9:7a:f0:3e:15:89:38:18:fd:0f:21:d9:e6:bb:63:da:cb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 11:20:38 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=fcc8507bde8cb2d378eaba0b88225b1f9f47a192dc0f3ff87e5b6e14c5e95133, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:69:75:c1:27:02:90:76:c9:2f:59:4a:a4:dd:
                    fa:cb:38:f4:6e:b3:ef:32:7f:f6:d1:38:6c:89:8d:
                    53:cc:d1:36:49:f1:5a:71:f8:41:d0:bb:da:1d:f4:
                    28:24:e4:70:20:20:cc:6b:28:11:45:bc:43:fe:83:
                    a1:b2:04:e8:cd:cd:80:22:88:03:97:4b:34:0b:10:
                    c3:96:27:4d:c3:06:21:07:aa:23:9d:cb:c4:0f:50:
                    f1:ab:9c:5c:f1:6b:b2:b9:bf:4d:0e:ab:3b:4d:dc:
                    ca:14:bb:d5:22:c0:38:59:b2:23:e4:7f:a5:4e:f5:
                    d7:8e:c1:86:8c:63:dc:e8:b2:a3:6a:64:3d:e1:12:
                    85:c6:99:ff:03:6a:85:17:52:5c:bd:28:45:36:8c:
                    b3:0e:eb:01:8d:b2:4f:79:45:d3:c2:70:fa:e3:28:
                    5c:0a:80:bb:af:40:ab:e9:41:5a:49:7b:a7:20:09:
                    99:a3:26:a4:dc:1b:4c:d1:41:c2:01:31:3e:9a:70:
                    13:56:0d:0a:f2:c6:8b:f3:c3:57:c6:ce:32:60:1c:
                    e2:bd:12:77:9e:d5:01:5e:c5:c8:25:20:17:fd:3c:
                    91:11:d1:ea:eb:b0:2b:b6:74:c1:05:74:38:f9:0a:
                    6c:91:1e:f9:9f:c0:9a:1f:cd:75:36:d5:8b:ba:44:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4D:5D:2F:02:EC:CB:6E:58:7F:1A:F4:92:79:92:92:FB:5A:3F:B3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2a94a2a-8730-45f4-acc7-027b69dc3af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3adc::/46

    Signature Algorithm: sha256WithRSAEncryption
         62:69:1d:07:92:6e:b4:e7:ec:e0:f8:7e:4f:5d:12:8c:03:64:
         63:ef:70:8b:14:ad:ef:4b:7d:df:25:cb:b2:01:f8:43:dd:84:
         a5:e7:34:a2:1d:e7:42:31:74:5e:26:a6:df:4e:d0:4c:79:c4:
         0f:37:7d:61:ce:8a:dc:05:f6:f4:57:da:fa:14:43:2a:7f:b5:
         d9:bc:c8:c0:ef:3c:6a:41:a9:07:24:6a:39:ad:72:95:ed:24:
         59:08:bf:15:09:da:20:28:1d:90:7f:d7:5e:24:3b:89:1e:f3:
         1a:8f:b1:4b:f0:da:88:0a:ee:f8:8b:7c:b5:86:6a:dc:b3:c5:
         d0:12:7c:71:81:c4:b0:77:68:89:c2:bf:95:9b:c6:38:59:99:
         3b:9a:53:7f:51:21:5d:c3:87:03:67:c7:01:c2:35:5e:c5:32:
         1e:bf:82:de:06:5b:12:36:30:51:f7:ae:03:89:b9:68:2b:59:
         ed:c8:90:51:5b:24:41:ec:62:39:af:85:2e:cb:f7:a0:ea:ad:
         76:f3:b6:d4:4f:8e:1c:3d:35:71:b0:3e:20:c5:8a:79:db:e7:
         8b:27:1d:d9:d5:d2:98:b7:ab:d4:21:f0:50:29:36:21:60:ac:
         21:d2:fd:1f:e1:83:b2:51:3a:67:6c:7e:92:14:44:82:08:a5:
         4d:88:ca:23
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:42 2026 by rpki-client