Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b74de488-1770-437e-9ae7-5074c1d89e53.roa
File:                     b74de488-1770-437e-9ae7-5074c1d89e53.roa (raw, json)
Hash identifier:          lULaQ9ewuXvgPwhL1TWq+pE1gDCd5A6RxZgpKg9GIxA=
Subject key identifier:   D4:6F:EB:A0:1F:6C:B6:FB:95:A0:79:F3:00:DA:83:32:BC:9B:A1:00
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       40E4A317A8B60BA7D352B34F7E0C6736603D2FBF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b74de488-1770-437e-9ae7-5074c1d89e53.roa
Signing time:             Fri 13 Feb 2026 11:10:46 +0000
ROA not before:           Fri 13 Feb 2026 11:10:46 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a02::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e4:a3:17:a8:b6:0b:a7:d3:52:b3:4f:7e:0c:67:36:60:3d:2f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 11:10:46 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=90f9b90701da63e29b84e7b206cd2b97168d15aa441a8cf3fd97dcc2393efc67, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ba:01:59:24:8a:7f:78:67:5b:5d:78:63:64:
                    55:56:d3:43:e9:8f:29:c3:ac:44:41:cc:0c:87:ca:
                    32:71:a7:a8:4b:9f:b5:48:20:4a:35:b9:ae:ff:74:
                    f3:ba:fb:46:99:17:3e:2b:c9:81:34:0e:7c:29:65:
                    1b:05:cb:3c:d6:d3:a1:12:ca:56:ef:eb:73:c4:e7:
                    cb:87:ee:4f:3c:52:42:f6:b8:59:08:d4:81:8a:de:
                    e4:29:1f:64:77:04:55:06:83:38:da:8c:09:29:0a:
                    d6:6c:41:e9:32:0f:77:e3:62:ba:d0:d3:b3:67:b1:
                    91:de:7c:66:06:24:de:82:c4:5e:fb:2c:7d:39:ab:
                    9e:bd:a9:4d:70:32:41:36:d6:22:53:fa:9f:5e:ae:
                    90:0b:70:4f:0f:75:37:35:bb:c7:68:79:92:46:98:
                    7b:ce:1e:fe:64:c5:24:30:83:93:d2:17:f5:01:7e:
                    7f:c7:dc:84:71:0a:9e:9f:4c:37:96:d7:5b:95:52:
                    aa:0e:9b:81:0b:0f:17:6d:da:35:24:a0:cd:c0:8b:
                    fb:63:4e:9c:60:22:f3:87:fc:a1:8a:a0:cf:92:46:
                    19:ff:6c:cb:3a:6a:cf:b9:e3:5c:57:24:f0:5c:03:
                    6c:16:1c:17:47:ea:0f:61:64:4a:38:8a:48:97:fc:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6F:EB:A0:1F:6C:B6:FB:95:A0:79:F3:00:DA:83:32:BC:9B:A1:00
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b74de488-1770-437e-9ae7-5074c1d89e53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a02::/47

    Signature Algorithm: sha256WithRSAEncryption
         4e:a6:b5:39:50:ad:ef:eb:f7:f2:3d:08:7a:6d:d7:fc:e6:03:
         86:b8:47:84:3a:f0:bb:19:13:9d:ee:95:06:66:4d:54:72:f7:
         55:ba:a4:9c:af:77:1f:cf:bd:09:36:5d:15:4f:98:2b:2d:49:
         ce:6b:d6:e7:2f:6a:eb:ed:2b:fe:55:d5:97:bf:01:81:48:ac:
         af:6c:5f:b8:ce:87:aa:66:42:c8:2d:75:05:f5:28:47:5a:8b:
         5d:43:85:f4:82:86:ab:a8:56:89:a6:21:f1:a8:47:09:96:c1:
         af:06:c4:ff:83:15:f1:a2:aa:d7:e6:d0:eb:bb:f4:73:63:76:
         50:44:b9:34:14:9d:72:ba:db:fb:34:77:6d:28:98:59:9f:9f:
         55:e4:8f:60:97:be:82:8c:c6:76:53:29:17:d7:7a:c8:1b:94:
         1c:f8:59:7c:62:47:62:7d:44:b5:f8:f1:95:e0:3f:34:b2:1a:
         aa:34:ec:96:5f:a4:45:45:2e:e1:ef:19:76:e6:b6:fc:fa:73:
         00:5f:91:3c:ee:aa:f7:20:d5:4f:73:9e:b4:96:7a:04:3f:81:
         52:a5:ff:40:b1:7a:a6:d9:10:09:4e:cb:92:28:d9:0c:eb:aa:
         bf:54:ed:e2:19:d5:1a:c7:d0:6e:b9:b3:fa:16:55:09:50:77:
         9e:e3:7e:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:26:56 2026 by rpki-client