Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c062fc8b-5582-4bee-abae-6c58ae218b55.roa
File:                     c062fc8b-5582-4bee-abae-6c58ae218b55.roa (raw, json)
Hash identifier:          ZnL9nMrN4gd8VgyXfuH221Z89G4DMdB0bTLvDYdu8fA=
Subject key identifier:   68:FB:A2:66:20:95:A8:CD:13:FA:90:3D:7F:C5:AC:4C:71:0D:F6:55
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       48E78F4CEE5B28903B611EE1E52855D54643212A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c062fc8b-5582-4bee-abae-6c58ae218b55.roa
Signing time:             Thu 12 Feb 2026 00:10:08 +0000
ROA not before:           Thu 12 Feb 2026 00:10:08 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e5e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e7:8f:4c:ee:5b:28:90:3b:61:1e:e1:e5:28:55:d5:46:43:21:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:10:08 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=7b28fd94f93d56cb0dd6dd5d19a7667096308dcd06ae362d99590f7f52f44732, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fb:1c:3b:cc:a4:f6:b6:a0:6a:a6:f0:b7:dc:
                    db:80:2f:ab:4f:fa:0e:f0:3c:2c:de:94:d2:ff:55:
                    98:58:e7:4a:d8:c7:7b:4d:d2:49:39:4b:fd:b8:5e:
                    3f:7d:95:a1:de:ab:23:c7:20:a6:11:59:cb:95:a2:
                    ee:9e:e3:a3:09:64:49:c4:e2:e9:04:4f:bb:cf:79:
                    df:62:f0:d5:b8:5c:37:c5:f8:02:98:2b:e8:a1:a3:
                    21:da:59:d9:94:d3:68:17:67:71:92:5a:9d:86:98:
                    4b:54:a2:f2:e3:78:e6:e1:d6:c1:90:51:50:b3:18:
                    04:a7:86:8e:47:2b:4e:75:7a:c8:8c:44:c1:15:18:
                    d6:6f:1a:e0:72:db:51:15:03:bf:f1:30:72:4d:81:
                    fb:a1:67:3d:7f:d9:ca:d2:05:d5:51:1f:22:81:04:
                    40:1c:32:f3:3c:1e:47:89:31:72:bf:d0:09:30:b8:
                    2b:25:58:36:5c:05:2a:2c:87:28:fa:29:9f:27:7f:
                    74:f9:d6:7c:c4:cf:cd:cb:aa:09:1e:fb:c0:9c:6c:
                    5a:0d:43:30:c1:b6:65:4b:ac:67:df:40:c1:34:9b:
                    09:ce:39:6a:9b:61:c1:40:82:9d:4b:75:84:3d:cd:
                    38:88:f2:18:01:2c:23:1a:05:59:af:b6:76:0f:24:
                    e8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FB:A2:66:20:95:A8:CD:13:FA:90:3D:7F:C5:AC:4C:71:0D:F6:55
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c062fc8b-5582-4bee-abae-6c58ae218b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e5e::/47

    Signature Algorithm: sha256WithRSAEncryption
         b8:83:a8:27:9e:46:e6:25:10:67:42:67:81:0f:24:6b:34:f4:
         b2:08:86:f8:7f:39:76:a9:f3:f9:0b:cf:ed:a6:06:af:02:d2:
         e1:f5:8d:94:79:e9:dd:d8:2d:77:3c:ef:1f:99:9c:20:a0:1d:
         9e:b4:78:34:33:b2:74:32:9c:63:d1:d1:88:43:0a:c7:ef:d7:
         30:de:3b:fc:28:5f:98:b7:18:12:2b:29:33:d0:73:50:d7:45:
         be:5c:e6:f2:7f:8b:ff:d8:69:95:85:21:ee:bd:6a:20:9e:cd:
         65:95:03:be:2b:32:b2:07:c1:6c:36:5c:75:3e:51:50:5e:4e:
         b9:14:b1:4a:ac:c9:c4:d8:d0:9c:2f:e3:36:55:b0:35:2e:2e:
         26:b4:87:38:38:a4:90:89:fd:ff:9b:b6:16:c5:6c:95:a1:a4:
         26:12:d9:c0:9f:db:ae:64:07:79:b1:db:08:a1:61:ab:75:66:
         c8:a7:4e:7d:da:f0:69:03:8b:44:89:29:67:8a:74:a0:07:ec:
         1f:3b:ea:0f:23:1c:ef:04:06:5a:8e:5e:57:86:30:6c:d5:b9:
         69:e6:44:4c:e8:4d:c6:2a:53:68:02:9a:2e:a0:96:a8:3a:ce:
         af:f4:1f:59:c9:77:bf:5b:92:1b:d9:29:42:e4:df:2b:d1:93:
         86:01:ed:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:00 2026 by rpki-client