Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4a32dcc-2e56-444e-86c6-c20791c0cabd.roa
File:                     b4a32dcc-2e56-444e-86c6-c20791c0cabd.roa (raw, json)
Hash identifier:          EfWhiwc1reDWWMn1iO1k84fCLzJHM4E++JjHJSkNCZQ=
Subject key identifier:   00:31:D5:9C:0B:24:14:8D:6A:E3:13:D5:58:AD:CD:2C:F2:25:C9:B9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1DFE3C57E3C04F3F95D923807389249437FEE9C2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4a32dcc-2e56-444e-86c6-c20791c0cabd.roa
Signing time:             Fri 13 Feb 2026 09:11:47 +0000
ROA not before:           Fri 13 Feb 2026 09:11:47 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:377c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fe:3c:57:e3:c0:4f:3f:95:d9:23:80:73:89:24:94:37:fe:e9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 09:11:47 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=f454e0fb133f43be9c0b8f65fefeac2bab5b154eee822cb2015011190f9d2949, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:97:4f:f6:d8:e7:bf:be:74:64:6a:2d:5c:9b:
                    67:b3:bc:3b:5b:8a:80:4a:48:71:3e:86:05:b4:cb:
                    3d:9d:be:86:34:98:77:f1:e5:91:70:89:4e:1e:4b:
                    fb:27:b3:81:79:8a:f9:01:08:1d:98:a0:ec:76:f9:
                    b8:f4:8d:ff:20:7b:de:12:e7:5d:f8:21:4c:ce:04:
                    64:eb:90:32:2b:a2:82:0d:dc:d3:bf:b7:4b:dd:a7:
                    d8:45:50:d1:88:e1:6e:55:12:59:d5:66:ca:f2:2b:
                    5d:82:81:da:86:58:f2:09:7c:81:a2:26:c3:2b:88:
                    63:c5:83:ab:6c:8b:6c:69:11:c3:e9:6c:3e:fd:2e:
                    1c:62:2c:37:43:8f:12:b8:77:5b:f4:a5:0e:26:6e:
                    e9:cd:9a:3e:d4:65:03:34:8a:63:0c:05:a0:f1:33:
                    88:c8:e3:8b:06:d6:52:5a:02:ec:21:1b:61:8e:4c:
                    f2:fa:09:5d:00:5e:94:5c:0c:c6:ba:89:87:b3:5d:
                    a2:6d:3a:52:83:17:d3:c2:f2:9a:78:37:f8:88:e4:
                    1a:35:75:43:d7:7f:7f:47:b6:34:2c:31:d4:11:02:
                    db:02:f0:f4:b9:8b:d7:55:cf:58:e7:d2:b0:8f:30:
                    5e:2b:4a:a3:0e:1f:54:0a:7e:5f:05:e0:c4:04:70:
                    e7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:31:D5:9C:0B:24:14:8D:6A:E3:13:D5:58:AD:CD:2C:F2:25:C9:B9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4a32dcc-2e56-444e-86c6-c20791c0cabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:377c::/46

    Signature Algorithm: sha256WithRSAEncryption
         77:b5:fb:90:db:dd:69:b3:73:d9:c4:29:a4:4f:25:89:b4:73:
         a5:9d:4b:39:f7:9b:fe:32:51:7c:40:b5:e0:ea:c4:5f:59:8d:
         12:fa:46:25:2d:e0:a4:99:ba:dc:33:50:4b:e3:6b:96:51:51:
         c3:ab:7c:b3:2c:9d:e2:96:0f:bc:0d:d1:b7:77:13:25:f1:4d:
         d5:3d:36:c7:db:c1:e7:1d:5a:26:3e:1a:05:66:cc:80:66:17:
         87:51:42:66:b4:a0:d9:65:53:ae:dd:6b:2f:87:ee:ff:17:40:
         00:fe:c1:28:75:e5:fd:3b:03:1b:58:12:93:50:93:34:c5:bf:
         14:16:77:6e:5b:a6:3e:b8:fc:39:a9:2f:e5:71:df:88:80:d2:
         80:e2:44:35:72:66:65:5b:9f:c7:cb:72:40:39:db:c0:6c:33:
         e6:53:65:10:48:4d:0f:4f:52:a9:ac:45:45:27:2d:2d:c3:ed:
         c0:c4:c4:82:df:08:c7:31:b0:2f:73:b1:2c:da:4c:be:ac:06:
         5f:ac:16:5c:25:f1:8f:bd:bb:a3:82:48:b8:af:7b:ec:5b:94:
         52:ed:e4:91:7e:d7:ef:e1:45:7e:59:30:40:92:a9:08:4c:d4:
         e9:06:12:69:c0:d3:b9:1b:43:fa:ca:de:c3:5b:8e:67:10:2a:
         5c:38:d5:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:50 2026 by rpki-client