Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9a73692-2e28-45c3-b0e7-5747e9644154.roa
File:                     c9a73692-2e28-45c3-b0e7-5747e9644154.roa (raw, json)
Hash identifier:          nDnz1kw2QWmpehG3TuAhargwjGQtpzpVVUA23BNkU7c=
Subject key identifier:   9A:0D:46:9F:AC:41:FA:F8:C0:FD:5C:57:76:67:D5:AC:81:89:A3:47
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4F1B2B9BB5C6ED85541FC543C5D7CE553662FA4D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9a73692-2e28-45c3-b0e7-5747e9644154.roa
Signing time:             Fri 13 Feb 2026 03:00:52 +0000
ROA not before:           Fri 13 Feb 2026 03:00:52 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3e40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1b:2b:9b:b5:c6:ed:85:54:1f:c5:43:c5:d7:ce:55:36:62:fa:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:00:52 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=195054770888c110d82adf34758af743aa4eef4e76b072d5d8a93d8f82174855, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:92:49:c7:af:a2:0c:e0:14:05:5f:d2:48:
                    1a:e6:a6:c0:39:45:d7:dc:4f:ec:49:44:78:92:98:
                    fb:9c:98:4e:be:58:a0:dc:08:04:57:5c:f4:64:c4:
                    17:3e:cb:a7:8b:71:fc:ba:a1:26:3b:55:d3:58:19:
                    b3:e1:7e:35:de:f8:90:e5:b8:5f:a2:14:4f:f4:e4:
                    b7:1b:e6:11:a3:db:f6:ab:47:2c:78:70:16:16:39:
                    fc:76:82:d7:c5:80:b2:a4:82:96:f3:0b:02:49:1b:
                    b7:f7:96:6f:54:91:2d:60:cd:bc:76:80:87:40:6a:
                    a8:68:0d:44:7f:29:d4:27:4b:1d:6f:39:de:e2:27:
                    e1:59:f1:b2:06:8a:d9:5c:53:25:38:76:8e:d4:14:
                    38:41:2b:52:04:9e:9e:bb:17:0a:39:ed:ed:64:29:
                    9d:18:23:c7:bb:08:3b:ef:0e:34:8b:fb:ff:6a:9d:
                    07:23:df:c9:1e:e1:29:ff:fe:be:59:f5:61:2e:c8:
                    6b:01:22:92:75:2d:21:20:59:ac:db:b3:d1:27:47:
                    a0:3a:b3:b7:d3:49:9a:ca:d8:7e:f1:9a:c4:98:a1:
                    82:d2:05:11:d6:6c:33:5f:9a:f6:08:4b:03:22:b8:
                    a6:f9:0e:04:02:88:62:16:db:f6:10:4f:2b:d9:78:
                    a1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0D:46:9F:AC:41:FA:F8:C0:FD:5C:57:76:67:D5:AC:81:89:A3:47
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c9a73692-2e28-45c3-b0e7-5747e9644154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3e40::/44

    Signature Algorithm: sha256WithRSAEncryption
         9f:f2:98:d3:a3:64:2e:74:fd:08:c5:fe:3d:24:3f:80:9c:b8:
         c7:b6:9f:1b:3f:7f:18:5b:84:9f:28:45:12:ec:2e:1f:95:77:
         03:73:37:65:20:22:a2:4a:3b:d1:05:5c:55:1e:ff:2e:1b:a8:
         c2:11:95:00:58:10:96:a1:3f:3d:81:9e:ef:20:7e:9e:89:8d:
         d7:c2:57:fa:66:dd:97:c4:1e:f4:ea:70:58:69:65:a8:69:54:
         03:a1:cb:0b:70:1c:e6:00:32:0b:10:f4:20:44:5c:54:7d:bf:
         31:9e:59:28:d5:21:4b:26:06:7c:cc:5b:24:8b:aa:92:49:28:
         ac:c3:ee:31:d5:8c:71:46:8c:cc:a6:79:94:3d:82:8f:c7:bd:
         a4:3c:19:44:bc:ea:e9:d4:7f:77:e0:4f:9d:b4:cf:d5:8b:0e:
         97:ec:c4:c7:bb:88:7b:be:b8:d1:b4:23:26:88:ca:57:d6:29:
         85:fa:07:70:a3:ba:ff:af:2a:94:cd:ff:6a:b9:b4:ec:c4:5d:
         f6:e7:54:a2:d3:3b:94:f8:57:9c:7a:5c:08:36:d4:cf:e2:5c:
         5c:94:16:e6:2c:63:7b:84:f2:40:f9:b2:6e:a2:8a:15:90:04:
         f2:86:49:c0:41:fd:28:41:29:a6:d7:54:95:f3:85:03:5e:9d:
         8a:d4:1d:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:25 2026 by rpki-client