Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2bbd9af-f216-4137-a1d0-362497fb7ab7.roa
File:                     a2bbd9af-f216-4137-a1d0-362497fb7ab7.roa (raw, json)
Hash identifier:          8RigAilhgqFpcS182ZOwLguKcxqaRl3ShpcR9IkzRJM=
Subject key identifier:   39:3A:CC:B1:EA:A0:46:95:F3:8B:08:3E:87:6B:C7:AF:9B:4A:CE:28
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7E1DBD030B74ED2907D8DE8C1C1AD8FD1491873D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2bbd9af-f216-4137-a1d0-362497fb7ab7.roa
Signing time:             Fri 13 Feb 2026 07:21:32 +0000
ROA not before:           Fri 13 Feb 2026 07:21:32 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3bf0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1d:bd:03:0b:74:ed:29:07:d8:de:8c:1c:1a:d8:fd:14:91:87:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 07:21:32 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=a5bc47803fc7aeff4f07a8c75fd3aaa02e7906b96cd02cb4c44c0f18874170a5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:1b:83:97:29:67:59:10:60:79:c3:e3:91:
                    8c:99:62:62:e7:c7:2f:3a:01:e2:b5:a5:90:c0:1d:
                    65:02:d6:83:8e:0e:94:50:42:ac:cf:bf:0e:92:7f:
                    09:a3:ae:e5:eb:70:a2:55:95:6b:a3:53:d6:45:87:
                    e1:8e:cc:3c:34:db:db:fb:6d:d7:71:f5:06:c1:88:
                    35:0f:77:78:f9:03:39:e9:b2:84:43:7d:9a:11:6f:
                    51:f2:b1:9a:08:c5:e2:23:8f:32:36:6f:d5:ca:45:
                    ce:03:a6:33:87:6d:12:e6:68:21:08:2d:dd:ee:8e:
                    58:16:69:70:40:66:42:74:1e:60:cb:36:d3:09:85:
                    b0:db:34:89:4c:7a:34:b3:e9:05:f6:eb:76:49:ba:
                    3b:76:cf:3c:26:a5:42:2a:d6:e6:4a:21:e8:86:77:
                    d4:80:e3:7a:4f:d9:aa:a7:c0:38:27:5b:05:bb:92:
                    3a:78:f5:cd:dc:4d:a7:e3:4c:6d:de:ef:41:ac:27:
                    f9:8c:83:14:71:36:6b:70:14:96:09:bf:85:eb:1e:
                    60:42:a9:7c:be:0a:db:77:22:61:aa:5f:0a:69:d7:
                    2c:fe:81:16:c2:ec:a6:70:73:30:80:45:64:6b:51:
                    aa:48:f2:88:47:92:63:71:45:77:d0:9b:8e:3b:0a:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3A:CC:B1:EA:A0:46:95:F3:8B:08:3E:87:6B:C7:AF:9B:4A:CE:28
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2bbd9af-f216-4137-a1d0-362497fb7ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3bf0::/47

    Signature Algorithm: sha256WithRSAEncryption
         0b:15:ea:63:40:7b:10:8f:67:0c:df:c0:11:c3:50:14:5a:90:
         73:c3:8c:5e:fd:61:70:25:14:f1:8e:d5:84:63:ec:70:fa:cf:
         c1:5d:1e:77:d9:96:ea:c7:21:14:e0:5b:4c:52:b1:7f:f6:e6:
         27:7a:80:87:88:c5:51:f3:d7:db:a3:fd:0d:38:51:27:c6:ac:
         a8:49:cb:3e:64:97:d8:43:ac:d7:fd:27:7e:61:ba:9a:d5:7c:
         c2:52:8e:c6:4e:f9:e3:7e:c1:a7:4d:91:27:e0:e6:b5:da:2f:
         d4:9d:ed:99:a3:1c:73:ab:4d:e2:4f:80:a1:33:02:66:d2:f4:
         06:86:0a:98:e8:7f:43:da:c1:2f:55:14:ba:2e:d9:6f:cf:5a:
         b9:c9:10:f6:71:c5:2b:97:b7:93:e0:f1:08:65:26:ea:4a:0d:
         f3:13:eb:54:af:03:66:25:07:f0:71:71:b6:21:55:bc:27:95:
         07:73:bc:fd:85:3e:ca:6f:df:4e:ef:37:ce:bf:0a:d8:65:61:
         8b:0a:97:f2:22:f3:43:03:2c:9c:15:82:12:96:2c:17:e7:c5:
         f1:e5:cf:8f:c6:20:23:55:ec:8a:24:73:ee:cf:ee:bf:e9:86:
         42:02:1d:99:84:7f:9f:42:7c:5e:73:2a:fc:39:58:74:43:29:
         6d:93:a6:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:59 2026 by rpki-client