Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c59f6547-91be-4a60-a04f-c68c44072773.roa
File:                     c59f6547-91be-4a60-a04f-c68c44072773.roa (raw, json)
Hash identifier:          dVgNQuMkq0s3Yg1xsxlsVek4jl17PlO16ad2J4Is81o=
Subject key identifier:   79:59:CA:4C:AF:BE:A5:45:AD:94:E8:2D:4E:0B:BB:E6:B6:1F:D4:4F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6660FFA00535E2346654C1FD857A966ADADAE106
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c59f6547-91be-4a60-a04f-c68c44072773.roa
Signing time:             Thu 12 Feb 2026 02:40:48 +0000
ROA not before:           Thu 12 Feb 2026 02:40:48 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:26aa::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:60:ff:a0:05:35:e2:34:66:54:c1:fd:85:7a:96:6a:da:da:e1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 02:40:48 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=c1eb91154dc2ec730cce70cd3f0229c367bb99d42e1a327d57f324e2a0735cb4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:db:2f:90:dc:80:67:69:7b:b3:93:71:d9:
                    04:75:48:9d:da:c2:b7:8b:8e:4d:3a:6a:27:ce:56:
                    79:38:c8:95:2c:3a:72:81:61:63:f5:8e:84:75:37:
                    ad:27:1c:eb:28:01:c0:c4:e4:ae:20:8e:7d:89:ec:
                    f6:cd:b6:38:b4:2e:57:aa:ed:74:1d:a4:00:0f:bc:
                    9a:22:37:d0:85:d7:72:f0:d9:0e:f7:a5:01:b6:6b:
                    1b:cd:dd:96:26:75:6f:a9:a3:c6:0c:e8:b4:96:2a:
                    ab:d9:48:7e:85:72:1d:83:de:99:a1:dc:28:74:5d:
                    94:5b:e0:51:0e:39:f0:51:8c:2b:85:84:6b:b3:e2:
                    1f:75:ee:69:94:d1:01:57:f7:42:3a:e7:0e:a4:0e:
                    e2:49:90:87:20:ce:50:0d:91:c8:82:a2:54:37:e3:
                    f3:11:04:f1:4b:12:0f:0c:9f:f3:69:0f:c8:ca:2e:
                    e5:96:5e:b1:ab:17:6c:cb:02:a9:23:d7:6b:b4:ec:
                    a7:51:51:aa:16:ac:3c:07:f3:4d:21:f3:f4:1d:cd:
                    44:c5:fd:86:45:cb:cc:28:52:11:9f:12:0b:88:74:
                    ba:0d:a1:cc:1e:0f:26:7f:9e:21:44:d1:2f:2d:9a:
                    17:e7:38:09:3c:e1:52:b6:c4:66:9f:70:38:58:25:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:59:CA:4C:AF:BE:A5:45:AD:94:E8:2D:4E:0B:BB:E6:B6:1F:D4:4F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c59f6547-91be-4a60-a04f-c68c44072773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:26aa::/47

    Signature Algorithm: sha256WithRSAEncryption
         1c:d9:6f:7e:ef:97:c1:d5:2f:b7:af:74:7c:19:61:08:14:3d:
         d5:a5:6e:82:e8:4a:8b:cb:6d:4b:b1:a8:e4:6c:0e:fc:e7:f2:
         f3:d5:4d:2f:d2:aa:fb:cc:1e:97:98:de:4b:44:fd:bc:e1:24:
         ca:06:7f:cd:0b:f6:33:1f:4e:4d:c2:46:7d:91:b0:11:86:a7:
         1b:c8:e6:b4:bc:22:ee:fd:07:db:24:d7:07:23:15:87:db:a9:
         45:e9:96:7e:53:62:c0:1b:e5:4c:f4:f4:df:20:70:3b:a8:b3:
         82:62:2c:09:aa:26:a7:28:79:70:b3:d6:b4:11:9d:07:e1:cb:
         5b:75:a9:b8:85:55:ad:e1:9e:76:77:40:a4:70:c1:5e:1a:4e:
         b3:7e:35:6e:a1:24:06:68:14:89:10:0c:34:03:fc:65:7f:ca:
         98:6d:9d:9a:e7:04:ef:61:16:aa:cc:0b:29:12:95:77:d3:fa:
         28:b4:79:0a:ff:75:a9:35:9d:f5:6a:3f:8d:a4:e6:e4:f8:09:
         6e:82:bb:c0:2d:84:7d:50:74:1e:fc:76:0f:b0:a6:9a:46:45:
         e4:4d:2f:a2:59:94:19:0e:e1:3c:05:4f:51:58:63:44:18:c7:
         14:cd:83:45:28:b4:22:55:52:c6:bb:57:f1:2b:a1:8d:c2:fd:
         dd:93:97:a2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:22 2026 by rpki-client