Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a7789b27-4f0c-4fec-83af-439de678e508.roa
File:                     a7789b27-4f0c-4fec-83af-439de678e508.roa (raw, json)
Hash identifier:          0KDfy16K5ZOsmkPXEs6kWFRIIVUIki5vlHsckc6DiQw=
Subject key identifier:   FB:BE:69:AB:08:35:EF:F7:A2:F6:BC:0D:E4:90:E3:CA:A5:BE:5A:1B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       01BF9BCFB8B765E455D7584567056A6A0ABA9BAA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a7789b27-4f0c-4fec-83af-439de678e508.roa
Signing time:             Thu 12 Feb 2026 00:50:08 +0000
ROA not before:           Thu 12 Feb 2026 00:50:08 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2730::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:bf:9b:cf:b8:b7:65:e4:55:d7:58:45:67:05:6a:6a:0a:ba:9b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:50:08 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=f2600355a6ecad787891993b258f64d52189f31d7c19a5dae508c7e3e357e10c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8b:0c:4f:85:05:1a:be:4f:42:b1:e1:b0:af:
                    a5:9f:85:96:5c:c5:74:7e:a4:c9:85:b9:5d:77:36:
                    a0:87:a0:37:04:a3:94:b7:76:28:a7:dc:b8:f4:fa:
                    5a:16:50:be:db:a3:e7:b0:13:c4:9a:46:12:4a:85:
                    3d:aa:b0:dd:7f:dd:d2:17:14:21:a4:87:1a:1c:46:
                    06:d3:dd:47:b7:b7:83:67:bb:a3:4f:92:cb:c8:90:
                    90:16:6e:d7:8e:fb:d7:46:9a:fa:fe:ac:d0:ac:a2:
                    4c:2b:ad:01:de:75:a2:9d:20:59:cd:b0:60:43:9f:
                    22:ed:f1:61:f9:c6:fc:3f:96:81:63:8a:7d:a2:a7:
                    7b:33:fa:e0:0b:a9:b5:3f:e1:21:26:3a:bd:13:ea:
                    1c:b1:ed:f9:97:b3:08:49:ce:7a:08:4c:fd:8b:79:
                    56:46:36:8a:e2:e9:0e:37:f8:5b:ce:52:6b:c5:69:
                    64:9c:42:89:6e:d7:d9:19:b0:d9:37:52:2d:08:d5:
                    cb:78:6b:78:ad:54:c3:eb:b0:85:58:46:8f:6c:8e:
                    95:48:f8:9d:bb:08:27:b5:2b:29:cb:a5:24:12:54:
                    aa:85:59:c5:2c:04:44:83:fb:16:d7:05:b1:62:13:
                    10:2b:07:8e:e8:69:c7:1e:7b:68:12:42:36:94:c5:
                    5f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BE:69:AB:08:35:EF:F7:A2:F6:BC:0D:E4:90:E3:CA:A5:BE:5A:1B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a7789b27-4f0c-4fec-83af-439de678e508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2730::/46

    Signature Algorithm: sha256WithRSAEncryption
         6c:24:60:2b:51:38:5b:bc:dc:16:75:eb:17:be:c9:14:f4:a9:
         a0:bd:17:71:59:8d:a2:2e:47:72:37:c0:89:e0:68:90:a4:45:
         3a:92:ed:bd:97:fc:a3:7f:95:10:97:65:57:d4:0b:ae:3f:6b:
         c4:47:70:2c:f2:fa:35:ec:62:d9:d1:7e:73:88:13:d5:ba:77:
         f1:31:67:46:bb:6a:f4:af:c7:bc:5b:ab:fb:ce:e7:de:f8:50:
         ea:13:1b:27:68:fa:f5:81:85:5d:64:72:78:69:e9:21:4c:ae:
         23:cd:a0:9d:53:ff:4b:cc:09:6f:6f:14:a9:f5:0d:c5:4b:4f:
         4e:43:eb:34:fe:e5:4f:50:c5:82:97:37:ad:67:d1:62:22:f5:
         fe:4a:e8:6d:f4:02:f4:4e:98:f1:11:7a:79:b0:eb:63:f0:fa:
         41:42:05:c7:23:af:98:c9:3d:ed:14:30:58:97:fd:82:5c:f4:
         26:2c:2a:21:39:df:9f:a1:c7:d2:39:c4:f5:6f:e4:53:da:bb:
         68:97:29:17:ea:e3:40:6a:89:c4:fc:3e:8e:34:6f:f6:13:96:
         72:8d:f1:0e:c1:b9:a9:fd:37:64:52:51:34:5e:e3:45:00:b9:
         cf:87:15:35:8c:fb:ef:b0:af:69:2b:ae:27:e7:d4:60:c9:da:
         4b:c3:f2:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:50 2026 by rpki-client