Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b23eaf40-3a6a-4fb1-b7a7-cc3c0b9ad9f2.roa
File:                     b23eaf40-3a6a-4fb1-b7a7-cc3c0b9ad9f2.roa (raw, json)
Hash identifier:          qg2luhhVo0frbpAH8wkCskWWJ7O9lDScp2/WYdIhHxQ=
Subject key identifier:   02:8F:A7:6F:FE:2A:58:53:84:B1:DE:20:0B:4E:EC:6F:74:6F:3F:F3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2C582C955C5DAAC930D8A5A61DEE8E1C8D7814D8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b23eaf40-3a6a-4fb1-b7a7-cc3c0b9ad9f2.roa
Signing time:             Fri 13 Feb 2026 03:31:32 +0000
ROA not before:           Fri 13 Feb 2026 03:31:32 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2bc0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:58:2c:95:5c:5d:aa:c9:30:d8:a5:a6:1d:ee:8e:1c:8d:78:14:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:31:32 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=6002cfb6f4ff37259e196b5123a10d41dee89e5a89beed77e57509e36b7bae43, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:bb:3a:42:95:57:82:1f:d6:b3:e0:9e:a6:
                    b2:9b:3c:3c:2f:5d:5d:60:b7:68:38:9a:2e:f0:4e:
                    8a:99:b1:64:db:4a:24:a8:11:08:7f:f9:b0:6d:40:
                    6d:78:2a:36:8f:3a:72:09:b9:f9:35:b1:f1:18:60:
                    8a:5e:65:d9:94:4d:88:37:6b:c3:d6:07:ba:eb:88:
                    9b:7f:a4:3a:3b:1f:8f:59:f9:be:68:73:98:82:1e:
                    ab:2f:dd:ce:ae:d9:17:71:5d:88:ee:c1:46:2c:27:
                    88:8c:71:3d:af:ca:9c:1f:e6:85:51:aa:c0:f3:16:
                    18:2e:70:91:1c:c4:ff:ed:c0:83:23:c5:06:43:91:
                    b2:b6:d4:7c:d4:f9:eb:f8:0c:61:15:37:3c:29:c4:
                    7e:ee:90:a2:2e:be:9a:e0:58:d3:75:2e:9a:f8:1d:
                    f9:74:c5:fb:85:36:1f:67:d1:7d:1d:b0:bd:4e:ab:
                    be:f1:4c:27:cc:58:c1:cb:e6:38:32:f4:dd:16:10:
                    ee:ca:8c:ea:5f:98:7a:85:a5:2d:f7:9b:1a:ff:5a:
                    4b:f0:14:b1:ab:01:a4:96:aa:0e:ad:21:55:58:e8:
                    e9:76:09:c8:ca:e1:f2:76:8e:77:b0:bc:0f:a9:34:
                    2c:79:65:de:38:a7:05:80:e3:30:e2:91:84:c3:95:
                    5c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8F:A7:6F:FE:2A:58:53:84:B1:DE:20:0B:4E:EC:6F:74:6F:3F:F3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b23eaf40-3a6a-4fb1-b7a7-cc3c0b9ad9f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2bc0::/43

    Signature Algorithm: sha256WithRSAEncryption
         3c:10:42:c7:06:86:f3:df:09:9a:cf:4f:95:84:55:25:9b:64:
         b5:8c:ce:c8:ca:15:40:97:3c:ba:fe:70:e8:ee:04:e6:ac:77:
         c4:f8:31:bd:e5:d3:5a:75:40:a9:b0:dd:40:e2:08:54:4c:e7:
         94:39:cb:2f:a0:07:1d:c7:fd:24:1f:23:d8:25:d9:3b:e9:44:
         49:2c:a7:40:01:af:e0:e1:86:8a:2b:77:42:21:be:31:96:ee:
         04:e9:a8:39:4f:72:6e:ac:62:32:8c:a7:f1:67:5d:46:09:9b:
         17:c9:10:80:35:80:89:38:53:fd:91:82:fa:a6:db:4e:3c:ad:
         c6:50:7b:00:3c:50:0f:a4:52:63:85:23:d7:06:e8:77:61:36:
         95:aa:35:d0:9d:c3:34:94:2f:fc:ef:dd:06:49:16:62:06:a6:
         77:69:b5:59:68:b7:ab:10:fc:d6:cc:f8:5d:62:a0:51:b0:ca:
         6c:7e:06:66:49:a8:be:5b:d1:fc:65:04:ee:32:74:1b:ed:0d:
         5d:46:9b:63:c5:d4:3d:a7:89:76:e8:36:60:bb:28:c9:e4:72:
         2d:97:81:75:13:aa:04:1a:4e:a1:fa:bb:eb:f6:35:35:98:f8:
         fa:57:7e:a8:60:36:49:46:83:76:3e:98:dd:79:46:3b:9a:ee:
         17:94:b6:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:08:24 2026 by rpki-client