Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5c4a3c7-8dba-4115-aea0-6c5b1f7f991b.roa
File:                     c5c4a3c7-8dba-4115-aea0-6c5b1f7f991b.roa (raw, json)
Hash identifier:          H00S3xW05k3019gKDIhTFOxH0lIUFbLDulExtEc4C3M=
Subject key identifier:   56:72:7D:9F:E0:7A:86:39:20:BE:6A:EA:59:70:66:1E:FA:51:D9:44
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0946666E3CFFC00CDC0FF367690906F05A2F5F2A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5c4a3c7-8dba-4115-aea0-6c5b1f7f991b.roa
Signing time:             Fri 13 Feb 2026 12:32:14 +0000
ROA not before:           Fri 13 Feb 2026 12:32:14 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a4a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:46:66:6e:3c:ff:c0:0c:dc:0f:f3:67:69:09:06:f0:5a:2f:5f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:32:14 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=38eac1b26b79847b3b8d68873fb2b85b5d45bd581fc4c4d0b6a0d5877f0cf8d7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:a0:b9:e3:02:1d:26:96:66:54:fa:95:d1:
                    92:a8:be:8e:dd:dd:de:52:2b:62:6d:2e:e0:b2:a1:
                    e5:b9:11:d7:3c:2c:20:34:87:8d:7c:13:64:4b:c5:
                    7b:40:fc:04:58:0e:8a:ae:ab:a4:ec:4b:50:34:b5:
                    1d:df:b0:c5:43:c6:5e:44:29:b0:99:03:7f:bc:fe:
                    80:19:7a:41:d3:39:fa:b8:93:08:7b:46:9c:77:6b:
                    8b:83:94:4c:58:72:17:c5:2e:e3:11:b5:fe:15:e6:
                    0f:aa:46:0c:cd:8b:ee:fe:72:8d:25:4f:ae:b3:db:
                    76:d1:77:d8:67:fe:c2:91:93:27:03:bf:ce:01:bf:
                    37:aa:ba:f2:9c:e0:f3:df:e9:b7:d3:c1:1e:92:a6:
                    40:65:5d:1a:7b:b6:42:a7:45:67:18:62:9a:d1:bc:
                    37:ec:78:8f:8c:24:e6:d2:bf:0f:72:4d:f6:33:5e:
                    1f:b7:d8:c7:0d:4c:76:b7:b2:ea:cb:b2:c8:02:97:
                    d4:97:c2:0f:77:31:0d:3b:5c:68:4a:e6:22:54:7a:
                    8e:2b:27:3c:7a:20:45:69:a5:8e:e0:1b:3a:8b:14:
                    43:65:a5:b0:15:41:db:fc:c5:82:2b:1b:28:41:fc:
                    00:dd:22:45:bb:fe:40:7d:3e:02:57:a1:c9:79:7b:
                    3f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:72:7D:9F:E0:7A:86:39:20:BE:6A:EA:59:70:66:1E:FA:51:D9:44
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c5c4a3c7-8dba-4115-aea0-6c5b1f7f991b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a4a::/47

    Signature Algorithm: sha256WithRSAEncryption
         0c:21:0d:04:86:c6:2c:09:70:56:46:a7:20:71:70:e5:b8:a4:
         59:6b:6b:f5:2b:dd:80:77:01:6f:48:60:e8:de:1a:99:4a:2c:
         d6:08:3b:27:77:cf:c8:32:ab:31:b2:8b:1e:41:48:f4:91:c3:
         63:83:a3:ca:e1:8e:fd:67:0e:35:44:10:cc:13:18:36:95:14:
         e9:46:e9:91:59:49:7a:f7:26:8f:9b:f5:1c:1b:3f:87:a2:b8:
         e8:ec:43:b4:ae:02:9b:d5:6a:a6:04:f5:7a:12:b2:b1:a9:08:
         1e:ea:e0:7f:7b:db:c7:ad:e8:02:05:e2:e7:8e:af:e8:09:58:
         33:37:98:72:c4:7b:5b:05:62:3f:59:2f:53:8b:a1:fc:16:fd:
         2c:78:ec:27:dc:93:74:e0:b5:d7:bb:df:c2:fe:b4:57:64:b2:
         1b:2e:5f:d5:06:03:67:8b:8c:52:37:c7:9e:cc:5f:09:64:fa:
         f7:81:db:c8:b7:b3:b2:56:76:0e:27:1b:c8:12:8e:6e:09:fd:
         d6:cc:f3:8a:8d:14:2b:96:e8:5d:4a:8e:52:50:94:ee:0d:1e:
         1f:85:a9:4d:f0:78:b6:94:27:c9:59:16:80:9b:a1:93:2f:5d:
         33:14:b1:75:3d:90:f4:57:b1:19:4b:d2:46:84:bd:6f:b2:26:
         1c:9d:06:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:56 2026 by rpki-client