Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b65a7165-9b1a-4fac-bc17-685f9bd68997.roa
File:                     b65a7165-9b1a-4fac-bc17-685f9bd68997.roa (raw, json)
Hash identifier:          fkbL/ah/oK/E+2uSCAPL4bBauEqW1/GzMHOz//dqh4U=
Subject key identifier:   8C:2A:79:1A:17:81:FD:90:53:F5:50:33:96:98:97:2C:DE:42:C4:0A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       025EBFCC6EB9A45D731E1BA43A16B743D880A405
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b65a7165-9b1a-4fac-bc17-685f9bd68997.roa
Signing time:             Fri 13 Feb 2026 05:00:49 +0000
ROA not before:           Fri 13 Feb 2026 05:00:49 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ca0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5e:bf:cc:6e:b9:a4:5d:73:1e:1b:a4:3a:16:b7:43:d8:80:a4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 05:00:49 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=9531a417f30e8b50b2164cea254940f3480b629c610edcbf8b344da40580213f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:18:76:a2:90:9f:e7:13:27:45:0f:d1:d6:70:
                    1d:4c:5c:e1:57:8c:80:e5:a8:b8:83:96:79:44:19:
                    0e:e8:bf:d3:58:81:07:48:41:cd:de:45:bc:7c:f4:
                    0c:3f:6c:dc:1c:6d:3f:9c:a2:ed:4c:30:2b:52:db:
                    bd:c1:79:0e:41:fc:ab:46:d7:8c:89:1e:cd:25:29:
                    b7:d3:2e:22:7a:a2:00:40:a7:d9:ec:fc:46:d1:68:
                    a9:cc:99:78:db:4e:1a:aa:41:72:0c:5d:b5:92:4f:
                    f5:89:11:0f:d8:5e:ef:a8:43:cf:3e:78:03:8b:70:
                    d6:92:24:85:1d:75:0a:27:ee:51:d6:94:39:86:77:
                    5e:db:6b:9e:09:2a:b9:6d:fa:9b:fe:04:68:92:a5:
                    77:09:8b:85:f3:d4:bc:ae:2c:82:4c:6c:93:a6:58:
                    2d:32:a2:21:de:56:16:32:8d:a8:2a:60:f6:ef:4d:
                    c5:36:da:9b:a2:c3:2f:f6:a0:f1:b5:fe:db:50:d8:
                    dc:99:7c:1f:e9:02:99:94:0e:18:20:60:16:e4:7e:
                    f8:ba:5d:cf:ca:6f:54:d0:8c:84:f8:84:7c:cc:e2:
                    61:86:7d:90:84:e6:aa:d6:b3:3f:50:72:ed:2a:b9:
                    4b:1b:4d:47:27:48:72:aa:e5:0f:88:2f:25:b1:af:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2A:79:1A:17:81:FD:90:53:F5:50:33:96:98:97:2C:DE:42:C4:0A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b65a7165-9b1a-4fac-bc17-685f9bd68997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ca0::/45

    Signature Algorithm: sha256WithRSAEncryption
         3e:7c:4d:81:f7:ba:f4:36:e1:37:0d:f6:ed:ef:58:64:00:a1:
         dd:53:4b:77:ed:ad:93:69:de:56:d4:04:fd:83:ea:b8:9a:09:
         80:ad:4a:31:31:9f:c3:b1:2a:9b:37:e0:0f:15:2b:32:2c:9c:
         da:3e:56:24:f9:97:20:a6:4f:73:f5:6f:44:14:ff:54:b0:15:
         db:7c:b7:fa:cf:e6:7d:58:12:ee:b1:88:e8:bf:a5:b4:bf:9b:
         e9:68:0a:37:2e:bd:2a:fe:dd:3a:53:d3:73:ef:b3:d1:c1:e4:
         7e:f3:73:38:28:1a:3c:38:11:c7:77:51:73:db:bc:24:0b:40:
         54:5f:3b:87:be:6e:a5:c2:65:ce:e0:21:a4:1b:0a:3b:5e:48:
         9d:57:70:2b:b2:40:bd:d8:4a:be:ea:c9:73:4a:ac:7c:9b:0c:
         ee:aa:ea:f3:15:c4:eb:c7:b7:f2:47:31:b4:d5:0f:37:af:01:
         a7:0f:62:f6:c2:e5:8b:03:80:0b:3c:1a:19:b2:d6:a4:e2:d2:
         30:ca:64:e0:77:6b:7a:f8:a7:77:9e:81:74:1d:11:94:b5:9e:
         4d:ca:71:56:ae:ff:8a:7b:cc:9b:ad:83:2e:35:e8:60:56:42:
         4d:73:e8:93:ab:87:11:61:ef:9a:1e:fa:c4:87:4f:b1:3d:2f:
         77:dc:1a:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:31 2026 by rpki-client