Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4076068-dc13-4325-a012-459109578db7.roa
File:                     c4076068-dc13-4325-a012-459109578db7.roa (raw, json)
Hash identifier:          NCykK7aLN5ugMzVe1lAbUqZKE1ZMkacxC9GuG62ehBw=
Subject key identifier:   13:34:2B:01:CC:47:27:70:EE:3E:11:01:CF:55:42:E9:DD:7E:38:5B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2C8C7DFE77B8EED12ED42545CB26E63B57AF1F06
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4076068-dc13-4325-a012-459109578db7.roa
Signing time:             Fri 13 Feb 2026 09:51:00 +0000
ROA not before:           Fri 13 Feb 2026 09:51:00 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:365a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8c:7d:fe:77:b8:ee:d1:2e:d4:25:45:cb:26:e6:3b:57:af:1f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 09:51:00 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=337a5dd91d7d1b1717a0888bdd6a19103d368d00e24bb3636a21b25b761de6f5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:89:ed:4b:aa:dd:61:40:95:e5:f8:29:3d:6d:
                    93:a8:ab:09:d0:9c:16:da:8c:31:98:0a:e2:ee:b2:
                    13:be:8f:e2:9a:8d:a0:f8:92:89:6c:b8:5d:80:67:
                    e3:97:fa:44:d5:9c:c7:f0:85:1c:66:93:84:f1:49:
                    67:db:3d:f7:5e:9f:f4:c8:69:ec:d1:6f:fa:62:83:
                    a7:44:2f:99:53:67:6b:28:4e:c2:9b:4c:e0:71:b9:
                    92:f4:81:ea:ae:5e:44:8e:99:f8:6a:f9:ab:d9:cb:
                    fe:82:dc:07:b1:85:e0:12:b9:71:87:54:1c:6d:f2:
                    9e:c5:7f:6d:9f:73:6e:50:15:6b:4d:b8:61:37:36:
                    38:f9:38:21:0b:d1:47:5e:75:0d:a2:e2:58:00:dc:
                    1e:d6:54:71:5c:a4:2a:9e:f0:ca:3f:75:d9:82:2d:
                    86:de:02:c7:b0:82:d9:d4:72:a3:a5:ba:61:a6:87:
                    c4:be:51:58:ef:b4:42:56:72:0e:69:44:99:4b:86:
                    a9:79:8a:e1:c7:76:5c:ad:25:ca:5b:9d:0a:89:52:
                    3e:68:15:a2:03:d2:fa:cf:ee:ee:7b:2f:22:f4:96:
                    5f:aa:dd:bb:9b:49:67:38:4e:b4:86:61:39:69:e8:
                    3d:8a:8a:92:6f:e6:15:a3:10:db:46:6e:ca:25:9d:
                    f1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:34:2B:01:CC:47:27:70:EE:3E:11:01:CF:55:42:E9:DD:7E:38:5B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c4076068-dc13-4325-a012-459109578db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:365a::/47

    Signature Algorithm: sha256WithRSAEncryption
         a9:60:63:69:a2:5c:be:84:e2:fe:86:8d:34:70:d1:de:cb:3a:
         02:ca:b8:d3:15:be:77:93:e3:0d:c0:16:0d:20:fd:9f:1a:4b:
         0f:4f:fe:e3:cd:8b:b6:61:5d:11:2d:95:89:9c:95:53:61:14:
         44:d8:ee:36:b7:62:ee:c3:83:2e:c3:a2:20:40:33:9f:48:a6:
         2f:01:ff:09:48:57:ad:fe:2d:c6:48:82:96:ae:96:62:59:4b:
         da:04:30:f9:5b:9d:5d:2d:50:c2:4a:04:0d:f0:84:28:46:a0:
         0b:a3:6e:2e:ef:f4:7b:06:ae:f8:07:bc:4b:33:3d:47:65:ca:
         a3:20:60:65:e7:1e:c6:74:35:df:e7:68:8d:ee:c7:d8:35:57:
         a6:1c:2a:e5:71:18:81:50:65:84:23:ce:4f:a5:77:e8:47:57:
         5c:52:92:6a:d1:d9:53:8e:15:0c:1b:08:28:7c:26:06:4f:24:
         23:70:5c:46:c4:4e:4c:a1:b2:66:75:77:03:54:2d:c6:e9:9b:
         38:65:14:6a:77:3e:cb:0e:65:91:d0:84:0b:e1:f4:ae:51:2c:
         a4:c6:ea:45:d8:75:e0:f7:fb:d8:86:42:08:11:d9:00:6f:a1:
         c2:81:fb:e8:50:c7:d3:84:6b:f0:35:bc:36:57:c2:9a:c7:e7:
         cc:96:41:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:40 2026 by rpki-client