Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cb1ad410-61a3-4491-97e8-126f6a1d805a.roa
File:                     cb1ad410-61a3-4491-97e8-126f6a1d805a.roa (raw, json)
Hash identifier:          iuJdQhNPZy9CwWBA450suqddR4FIVM2xjw6Lmg7eQJQ=
Subject key identifier:   0A:B2:06:27:33:33:47:C6:D2:5B:92:2F:2B:A4:5D:6C:8F:EC:7E:D6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       716DE8C947FC6508099CDEF4C1BC9017E8DE5AF8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cb1ad410-61a3-4491-97e8-126f6a1d805a.roa
Signing time:             Fri 13 Feb 2026 04:20:48 +0000
ROA not before:           Fri 13 Feb 2026 04:20:48 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:344c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:6d:e8:c9:47:fc:65:08:09:9c:de:f4:c1:bc:90:17:e8:de:5a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 04:20:48 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=452e304a8740ab2a5e2ee5193be97d35b96ac362dbaf552f9b7c18309c2e9325, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:62:45:60:b9:a3:83:1a:07:61:3b:5f:1f:
                    ab:92:54:16:6e:f8:e2:29:f0:64:90:1a:68:91:89:
                    ca:b9:50:54:21:fb:bd:79:e5:8f:cd:a5:01:06:8e:
                    c2:ab:56:52:87:0c:1c:77:84:75:4e:ab:b0:16:54:
                    e7:93:3f:9e:ce:af:27:d8:ad:e3:25:80:60:ff:c6:
                    0f:95:f6:6c:e7:98:37:17:f5:90:2d:de:2f:00:1f:
                    eb:61:60:37:73:70:a8:db:9f:1c:30:68:8b:61:e2:
                    22:5c:63:fd:59:df:9b:74:0d:63:bc:f5:87:8c:03:
                    33:1d:c7:3d:d0:13:82:78:e0:8d:37:c7:c8:a4:6c:
                    8f:dd:06:c0:3f:16:f3:5c:8d:cb:e0:35:3d:20:dd:
                    b8:92:0f:d3:4f:45:c5:49:05:1f:c4:6a:0c:ce:03:
                    f6:bc:ef:57:eb:c5:ba:d4:d9:3a:36:1f:6c:fc:b6:
                    80:6f:16:bd:39:24:14:87:07:df:c1:3f:f7:50:c3:
                    7f:85:37:19:c1:47:e2:26:0b:68:bb:ab:f9:d0:8b:
                    86:f7:e1:21:29:39:e1:db:b5:8e:63:66:80:a3:72:
                    c4:e7:58:93:fe:67:99:43:22:7c:13:2f:08:a3:d8:
                    9c:18:59:44:59:07:02:8f:f8:db:ed:ca:e8:35:b9:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B2:06:27:33:33:47:C6:D2:5B:92:2F:2B:A4:5D:6C:8F:EC:7E:D6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cb1ad410-61a3-4491-97e8-126f6a1d805a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:344c::/47

    Signature Algorithm: sha256WithRSAEncryption
         bc:e0:04:71:a5:78:0d:15:4f:55:49:6a:94:43:6e:53:64:19:
         23:0b:24:f2:28:82:25:e2:3a:01:1f:2b:b3:84:3a:6d:63:82:
         a0:c5:b0:3b:ba:18:e8:0f:41:6b:d5:c6:81:f2:ee:41:ce:f8:
         38:84:13:02:86:f8:26:b4:3f:8a:55:ba:8e:c0:cd:b5:62:a0:
         5b:a5:ca:4a:dc:49:cb:0d:93:ea:ed:c0:1f:91:d4:63:23:b0:
         0d:dd:ce:1f:c2:e2:01:27:a4:46:8b:68:80:c1:cc:45:28:ff:
         4c:91:a7:1d:bd:7e:92:42:96:f9:83:b7:09:c8:3e:3c:df:b7:
         69:ea:39:1e:43:67:c0:e9:11:8b:e9:47:67:9b:f8:2a:11:2e:
         e2:91:5f:2b:6b:f5:55:58:c4:57:84:38:20:6d:ab:a9:62:0c:
         21:27:90:a5:77:c9:0d:23:e7:02:9a:22:d6:fa:65:aa:86:35:
         f6:ad:c2:06:79:c8:d7:65:4e:6d:1a:e5:ed:5f:58:43:5c:73:
         94:c5:25:a0:05:82:f3:0d:24:a4:40:08:a3:b1:a0:ec:e8:05:
         75:33:3c:55:e2:d1:4b:17:3b:66:06:a1:bd:b6:df:67:3d:72:
         d6:63:82:24:7b:c4:46:df:84:80:78:59:f1:a7:9b:18:85:d2:
         9f:8c:83:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:42 2026 by rpki-client