Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2442cb2-2412-4d7f-b57f-6806776ef754.roa
File:                     b2442cb2-2412-4d7f-b57f-6806776ef754.roa (raw, json)
Hash identifier:          +Gdh8E6wyOuaCMEJnS+dyqxAcVpS6/nC6edMchts0SA=
Subject key identifier:   EF:9C:81:C4:87:53:84:01:F9:6A:75:31:7F:1E:6F:9B:C6:F5:83:7D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0DB5E886E145C43C97FEB34855D3DD31ACCBAF85
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2442cb2-2412-4d7f-b57f-6806776ef754.roa
Signing time:             Fri 13 Feb 2026 10:40:35 +0000
ROA not before:           Fri 13 Feb 2026 10:40:35 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3d60::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b5:e8:86:e1:45:c4:3c:97:fe:b3:48:55:d3:dd:31:ac:cb:af:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 10:40:35 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=46901e8774c1fea57863f2cb612248a2182056df14228678b0e0d87ed70417b1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:10:e8:0a:ca:45:a5:0b:55:3b:8b:b8:36:
                    f7:ce:d4:49:78:5d:ae:13:19:3c:c1:6a:df:f5:72:
                    a0:fe:9d:0d:f0:bb:cb:0d:2f:37:f4:b5:0c:73:f3:
                    c8:7f:87:b6:de:37:bd:70:e6:b1:9a:df:c7:89:bf:
                    32:9e:c2:aa:e3:06:30:1e:aa:c6:0b:8d:5f:6c:ec:
                    3b:1e:81:35:4a:28:be:13:f9:c4:ce:63:30:24:c1:
                    f6:d0:79:9f:b4:1a:29:e4:4a:32:c5:30:6b:8c:0b:
                    89:1f:e1:93:98:d5:66:dd:10:ba:81:99:f3:ce:24:
                    21:ae:ae:1b:30:36:ef:fe:19:18:9c:be:09:4b:5c:
                    59:c4:44:76:3f:d4:4f:f2:c0:a1:61:df:e7:cd:c0:
                    90:0c:93:44:8d:7b:99:ac:54:06:83:e9:75:59:dd:
                    b7:4e:c6:35:bf:5d:be:5c:86:6a:e2:13:ed:c9:fa:
                    2c:a1:c9:ad:c4:9d:78:4f:c4:76:df:ab:25:c6:47:
                    e1:ef:ca:78:ee:bc:81:c6:81:4c:5e:bc:a3:32:7f:
                    ba:72:b7:78:b7:7e:31:0a:dd:6b:11:c0:26:63:9f:
                    ca:26:3e:7a:23:41:04:79:e7:e8:94:51:62:80:ab:
                    d9:77:ee:ed:84:d7:70:50:70:c9:00:44:7d:31:cc:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9C:81:C4:87:53:84:01:F9:6A:75:31:7F:1E:6F:9B:C6:F5:83:7D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2442cb2-2412-4d7f-b57f-6806776ef754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3d60::/47

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:c3:21:33:9d:2d:b3:54:e2:8d:a4:11:e8:eb:b4:0d:79:
         fd:bd:17:04:4d:c7:e7:b0:1d:7d:d2:c3:bc:cd:54:56:58:ee:
         03:56:64:51:bb:56:36:07:2a:f2:20:72:07:f1:36:f3:12:22:
         b1:ff:0e:1b:6e:05:72:6a:b7:79:86:73:68:44:b0:ca:85:44:
         1e:b7:bc:18:a0:23:fd:c2:01:bb:db:35:a5:ff:35:66:3c:ca:
         4e:1d:9b:a1:65:32:ce:ec:81:ca:99:1c:a0:45:f6:d3:37:4b:
         4e:54:25:94:6c:8f:2d:01:7c:42:93:c8:9a:cf:2f:c2:17:92:
         d9:67:2f:fa:78:94:37:e1:20:ad:42:6b:c6:bb:ac:09:bb:a4:
         f8:71:f5:22:6b:b9:0e:ba:77:82:a9:b8:5b:da:4c:a2:af:e6:
         8e:81:3b:f2:2b:67:e4:c2:ac:c2:8b:b0:4f:f2:f3:16:99:34:
         f3:98:08:32:e3:c3:db:71:24:fa:22:d7:51:10:eb:c1:f5:4e:
         bc:f1:82:b8:75:eb:a9:6e:3f:25:0f:07:49:f3:66:3e:76:9c:
         0e:50:9f:91:29:2e:e3:50:1e:48:1d:04:85:f4:25:f9:00:0b:
         28:4d:7d:85:6a:78:7e:fe:5f:84:26:17:9a:9c:71:fc:ed:12:
         40:c6:cb:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:21 2026 by rpki-client