Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2de7d0d-d17b-4c1c-bdf5-946b4ec5c353.roa
File:                     a2de7d0d-d17b-4c1c-bdf5-946b4ec5c353.roa (raw, json)
Hash identifier:          MVhwt7uByf8TlZy5/k6STSnvzR25I1UIUWRrlRQ13mg=
Subject key identifier:   72:11:45:01:2A:3C:86:B4:78:13:EF:AA:19:CB:99:83:85:AA:7B:4D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       01271D91C6697CC071AA9B900E788EA2ED9DA228
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2de7d0d-d17b-4c1c-bdf5-946b4ec5c353.roa
Signing time:             Fri 13 Feb 2026 13:31:07 +0000
ROA not before:           Fri 13 Feb 2026 13:31:07 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3c40::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:27:1d:91:c6:69:7c:c0:71:aa:9b:90:0e:78:8e:a2:ed:9d:a2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:31:07 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=e771dbc3bd8ae71380ee733a30ad1492fee27416bde8d60f8fc23fb7f8294771, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:a8:8f:8a:be:dd:76:4b:fb:b9:e0:2c:34:
                    bf:36:8f:2a:21:ac:84:41:11:04:0b:fe:92:58:b2:
                    7d:c6:ce:6d:75:ac:87:98:a1:13:6f:e7:47:8c:91:
                    4e:15:4e:5c:57:9d:db:87:ef:f6:17:a7:60:83:da:
                    4d:e6:8e:61:2d:99:6e:8e:0e:67:1c:85:b4:1c:4f:
                    9b:d2:f1:d2:49:1f:b1:64:45:db:f0:bd:c4:44:15:
                    7a:62:77:35:27:2e:bd:f9:95:e2:3f:25:54:09:3b:
                    94:31:f2:dc:ba:b6:e9:3e:67:dd:2b:fa:f5:e3:53:
                    cb:74:e4:5d:13:f2:84:b2:be:7a:54:74:99:66:20:
                    30:d4:7d:94:fb:a6:95:5d:82:af:08:c7:b4:4b:53:
                    a0:48:d4:21:7c:d3:9e:05:94:f8:b9:9f:1e:eb:92:
                    a9:97:99:09:2f:17:54:ed:d4:d0:2f:ef:c7:4c:7d:
                    4b:33:b1:98:d9:f7:3e:51:b3:5f:21:bb:4c:53:ca:
                    26:be:83:fa:f1:52:56:7c:a7:88:bd:1d:a5:c6:49:
                    4a:f9:36:6d:59:ff:42:e6:dd:40:a6:e2:6c:75:b1:
                    9b:f9:b4:a8:4b:a3:bc:13:bc:ee:42:05:3a:05:04:
                    d7:b7:fb:75:b9:58:b8:16:de:b1:44:97:a6:e6:78:
                    d9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:11:45:01:2A:3C:86:B4:78:13:EF:AA:19:CB:99:83:85:AA:7B:4D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2de7d0d-d17b-4c1c-bdf5-946b4ec5c353.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3c40::/43

    Signature Algorithm: sha256WithRSAEncryption
         94:fa:a8:12:a9:a6:a3:b6:72:3b:63:15:1f:65:cf:16:23:ac:
         f1:2f:83:b9:e9:95:1a:ff:db:44:53:0f:b1:e5:2f:de:e9:33:
         f6:65:62:0d:35:f5:33:eb:6e:8f:fe:f4:cb:ac:53:88:58:63:
         e5:c6:08:c6:65:3f:41:0c:26:66:95:17:83:40:9a:ab:7c:4c:
         e1:a4:7d:0b:12:47:82:8b:62:48:75:3a:85:34:50:cb:08:51:
         26:df:01:81:32:7d:f7:3d:db:d3:b8:8a:bc:09:ec:97:ef:f0:
         c6:0a:f4:b7:ed:94:16:2e:d5:b0:91:3a:d4:0b:ae:a0:5b:2f:
         2c:41:dd:f0:77:6e:64:e1:12:e6:7f:e2:34:cf:91:65:1f:73:
         d3:cd:b4:89:2a:8d:a3:50:f9:d8:3c:16:b2:97:e6:b4:c3:14:
         c6:e9:0c:8e:ed:78:e8:fb:4d:b8:f5:a9:ee:97:30:09:8a:87:
         da:3f:11:59:fd:21:fe:f1:ea:f3:1e:bc:c4:69:38:c5:88:6b:
         23:fb:07:b6:2a:8a:25:76:36:b9:80:52:de:d3:be:c5:fe:01:
         11:27:6a:bf:00:6b:b7:6f:8d:57:51:91:f9:99:d3:e5:06:2b:
         ce:38:d4:02:d6:c9:c4:77:fd:5a:37:76:d5:97:cc:a3:36:fb:
         48:3f:69:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:10:04 2026 by rpki-client