Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b423d1a5-2bd3-476b-ac0a-e2cb755d1bd5.roa
File:                     b423d1a5-2bd3-476b-ac0a-e2cb755d1bd5.roa (raw, json)
Hash identifier:          n9bpqD64w7uyNxQOpJORxBadB4sZHkZFDhqaEZrC0ek=
Subject key identifier:   01:B3:D5:11:D2:F2:D7:6D:2C:E9:C0:EF:12:B1:88:DF:4F:0A:0F:15
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       26F1714EA2767A3B6A1F82CE599FDEDD83B09E4B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b423d1a5-2bd3-476b-ac0a-e2cb755d1bd5.roa
Signing time:             Fri 13 Feb 2026 05:50:48 +0000
ROA not before:           Fri 13 Feb 2026 05:50:48 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2190::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f1:71:4e:a2:76:7a:3b:6a:1f:82:ce:59:9f:de:dd:83:b0:9e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 05:50:48 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=54b9e26042e61952c76d9d608dff89f0b06d6aeadc9dceb21e6f7a97bd70e773, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:b2:e9:09:60:c7:bd:b1:fc:cc:cd:08:25:
                    07:be:e4:20:2a:f3:ae:96:ab:46:69:7e:11:f2:d4:
                    5b:50:6d:00:3d:de:d9:6b:63:43:b2:81:fc:c3:c4:
                    38:b5:d2:9b:17:22:06:0c:ff:ef:d8:f2:92:ce:e4:
                    4c:88:89:1b:37:1e:e5:e4:ac:f1:86:6f:17:1f:7b:
                    a0:e9:08:52:29:ca:02:1f:3a:41:8c:fb:e5:c9:20:
                    3c:a6:81:2a:8a:4f:58:dc:74:3b:14:1c:59:a6:d9:
                    14:58:f0:38:b0:48:5d:58:4a:2f:dd:2b:0f:d5:1a:
                    7f:25:bb:fc:40:d8:1b:fb:e2:46:51:ee:20:1c:68:
                    1f:ab:71:1e:42:d5:ba:de:02:d2:d4:82:13:f9:4a:
                    3b:90:f8:29:23:a8:76:60:09:17:67:be:af:f4:c7:
                    fa:cb:ec:3c:dd:f8:87:6c:df:92:6e:bc:44:0a:71:
                    d1:c9:7a:13:02:43:03:2b:3f:eb:64:19:57:33:80:
                    57:47:a1:49:6f:76:d3:7c:23:ee:5b:c6:67:04:45:
                    15:0a:1c:67:95:61:71:59:24:f0:9a:5c:d9:01:f3:
                    5a:27:fc:ac:d1:b5:10:81:1c:11:2e:49:92:62:de:
                    bd:da:a5:9c:e6:72:cc:86:45:7a:d0:7a:e7:b7:24:
                    d8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B3:D5:11:D2:F2:D7:6D:2C:E9:C0:EF:12:B1:88:DF:4F:0A:0F:15
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b423d1a5-2bd3-476b-ac0a-e2cb755d1bd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2190::/44

    Signature Algorithm: sha256WithRSAEncryption
         9f:3c:4d:45:b4:0e:2b:32:38:77:77:a1:ed:af:57:68:94:13:
         36:0d:0a:69:d6:7d:15:6b:ee:43:c7:c2:38:04:98:97:55:98:
         3c:db:a5:a6:35:d9:47:8b:4f:dc:aa:09:f7:0d:f7:c6:62:2b:
         30:73:9b:41:5d:fa:ec:f3:cd:3b:d4:84:ec:72:48:49:e9:76:
         a6:99:90:57:c9:47:51:39:fa:06:28:57:56:7a:37:d0:3f:02:
         61:74:3d:60:6b:91:ae:ae:80:3c:77:63:12:7f:b8:23:69:a2:
         d0:3d:f0:58:2b:17:3d:ee:08:a3:34:25:e6:87:09:6a:d5:32:
         c3:f0:17:d5:38:c1:04:91:e2:25:0b:00:40:f2:f3:a0:7c:2f:
         ac:58:b1:a5:79:9d:f5:98:bf:85:90:64:41:e6:45:d3:8d:62:
         a2:b0:aa:23:c6:5f:94:48:67:2b:51:93:4e:62:f8:13:60:fe:
         57:c5:8c:74:63:fd:c5:a0:b5:aa:c5:dc:41:8a:a9:bd:21:b8:
         ac:8c:cf:a9:56:fb:b3:84:77:3e:d7:3b:19:92:d3:fc:53:54:
         77:96:f4:fa:ff:ca:f7:fe:0f:a6:9f:f0:fa:6e:f2:41:39:c0:
         fc:8c:0c:7e:f1:ee:5b:d3:d5:dc:e8:22:3b:d1:86:c4:84:b4:
         07:43:af:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:31:43 2026 by rpki-client