Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c3b4e7bc-8896-46ac-8274-10fc23a6a5b6.roa
File:                     c3b4e7bc-8896-46ac-8274-10fc23a6a5b6.roa (raw, json)
Hash identifier:          Z3IQsWVtr3MqGjfmph+vnCQXMWNxbs8aGwcInznIxII=
Subject key identifier:   58:4B:4D:72:84:C6:79:40:0A:F9:EC:88:1D:AE:D5:BB:27:E2:25:80
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4534858D185328D2BCFF33A74DA5EA3A9CE099FF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c3b4e7bc-8896-46ac-8274-10fc23a6a5b6.roa
Signing time:             Fri 13 Feb 2026 06:40:12 +0000
ROA not before:           Fri 13 Feb 2026 06:40:12 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3746::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:34:85:8d:18:53:28:d2:bc:ff:33:a7:4d:a5:ea:3a:9c:e0:99:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 06:40:12 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=6d84d1d69672c5753ff06eb6c8730841fd61c3b309c422717c03e0983219f74e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:7e:27:fb:4c:b1:ca:af:d1:99:f1:86:2d:
                    55:1d:e5:ef:94:a5:aa:96:87:b3:ff:21:eb:e4:f2:
                    f6:75:fc:4b:f6:45:87:84:0d:7a:61:7a:65:48:01:
                    84:b0:6e:6c:04:6a:bc:07:0c:c7:b8:4f:57:af:53:
                    af:1d:9c:52:8f:3f:43:4b:52:12:80:bd:da:47:41:
                    5b:f6:7b:dc:9c:f1:bc:44:98:16:40:a5:5a:16:01:
                    9c:95:7c:6d:dd:46:9c:53:b6:60:71:e9:55:b6:c5:
                    eb:91:4e:c6:25:ae:9e:88:c6:0d:ef:c3:f1:ba:19:
                    16:71:09:79:4c:a9:47:bd:09:f2:6c:36:83:73:7d:
                    e6:79:eb:1d:ae:4c:4e:f4:c0:3b:63:2e:fb:0a:c9:
                    0e:38:1b:2a:7a:c2:fa:d7:0b:b3:38:82:a6:8d:d6:
                    f3:ee:c4:bb:8b:d8:b3:3c:7b:97:00:73:fb:36:e2:
                    8a:26:70:5b:0d:e3:91:74:12:fa:c6:73:3b:64:64:
                    f3:65:6d:29:a9:64:fc:57:0e:66:e1:5c:b2:f2:b8:
                    6a:86:e5:6d:7e:76:c2:67:4d:88:b4:0b:3c:d2:1e:
                    f3:3a:19:60:b1:14:21:ee:34:d4:03:1c:d9:9c:69:
                    0f:ed:f9:11:d8:42:9e:0f:33:0e:53:b5:c8:cc:28:
                    46:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4B:4D:72:84:C6:79:40:0A:F9:EC:88:1D:AE:D5:BB:27:E2:25:80
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c3b4e7bc-8896-46ac-8274-10fc23a6a5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3746::/47

    Signature Algorithm: sha256WithRSAEncryption
         33:f5:3b:58:00:2b:2f:79:2b:11:67:0e:64:35:b4:c3:20:23:
         16:a4:a4:a8:da:c5:b1:4b:90:a3:29:9e:5a:03:58:2c:ad:c5:
         c8:e5:88:1b:30:9c:69:9c:0e:5d:d1:f9:73:c1:86:e4:25:93:
         d5:91:4a:d3:c4:27:b8:fb:93:ac:24:5d:b9:dc:fb:7e:91:bb:
         66:08:c4:bb:31:5d:df:cc:03:e0:30:e8:72:20:f9:d2:2a:1f:
         13:14:da:2a:70:8a:f6:af:4d:25:b6:df:00:18:ba:2c:ff:45:
         38:ac:48:9c:1f:d2:0d:50:e2:25:51:6b:34:c6:5a:5a:bb:7b:
         55:0d:00:a6:d4:b3:da:e5:10:a2:2a:47:07:09:e4:31:96:15:
         fc:66:21:b9:83:bb:e2:f0:76:56:4e:5a:e8:cf:92:8a:a9:f1:
         da:17:b1:b5:39:9b:96:30:86:2d:99:1b:06:e8:d0:b3:2d:6d:
         a3:7e:43:34:ae:7c:f8:02:df:fb:7a:81:c4:54:20:e3:dd:21:
         38:ac:53:44:ab:58:14:8c:4c:20:e7:74:5e:b2:b9:4d:24:41:
         72:fc:3f:ec:de:da:ce:91:c8:5c:4a:84:9e:46:5f:af:2c:9b:
         42:fa:70:21:a7:b8:40:0a:54:1e:af:07:28:e8:a1:4e:e3:5e:
         c1:d9:0b:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:59 2026 by rpki-client