Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/da43d96b-fd6a-4d23-b125-b296a2df2bf2.roa
File:                     da43d96b-fd6a-4d23-b125-b296a2df2bf2.roa (raw, json)
Hash identifier:          9t05JU3IeHTDVJTAAHXSfaZWYZt9z7GpuZJxJWktPLc=
Subject key identifier:   27:2A:BA:FB:9C:92:CB:D7:2C:46:32:C0:AD:67:42:1D:FB:EE:3C:BB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       473B41D25C7A8E14FA02A59A7897EFF0ED78EDC2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/da43d96b-fd6a-4d23-b125-b296a2df2bf2.roa
Signing time:             Thu 12 Feb 2026 01:21:18 +0000
ROA not before:           Thu 12 Feb 2026 01:21:18 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f96::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3b:41:d2:5c:7a:8e:14:fa:02:a5:9a:78:97:ef:f0:ed:78:ed:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 01:21:18 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=428579da2cf5d7ead6868d4281f31631a7a30be5b679cea929c7a8ac1e7097ce, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:96:90:05:8d:2f:1f:f0:e6:c1:a2:58:7c:
                    ff:c8:b7:73:a5:ee:6e:cc:3f:92:b8:56:77:6d:ab:
                    fc:f4:71:5e:b9:3f:22:16:f5:20:db:21:4f:12:74:
                    7b:e0:7a:33:88:a6:af:bf:1a:6d:e3:51:b6:68:15:
                    a9:5e:05:8d:68:e9:6c:5b:25:87:e7:16:9e:0b:1a:
                    51:50:9d:f6:4e:14:51:e2:67:f5:a1:7b:6d:2b:6d:
                    28:94:2e:b0:b7:f2:a6:47:17:45:c5:42:0a:e7:d1:
                    39:20:33:6c:47:bf:bd:94:73:fb:c4:f4:33:72:93:
                    23:57:38:2e:db:f2:a0:f1:48:4c:23:d0:dc:4d:ae:
                    12:07:19:85:78:b6:a0:3b:b9:9e:67:c7:0d:e3:b9:
                    1b:38:d8:84:ec:fd:69:14:a3:da:cd:4e:ea:b3:c5:
                    21:a4:91:e6:2d:32:14:fb:13:4a:12:ac:1b:16:f0:
                    42:b4:3f:c9:b4:78:e2:f7:85:64:84:b1:01:f0:45:
                    b4:aa:40:02:99:d4:ce:9c:e9:f7:41:e9:c1:72:5a:
                    55:e7:de:0a:0d:6d:18:1c:bf:a8:05:be:7a:04:50:
                    0f:db:04:27:9a:1b:d5:b3:d9:b4:38:d2:08:c5:dc:
                    55:61:92:a8:67:4e:41:f9:00:f4:65:a0:47:e3:04:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2A:BA:FB:9C:92:CB:D7:2C:46:32:C0:AD:67:42:1D:FB:EE:3C:BB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/da43d96b-fd6a-4d23-b125-b296a2df2bf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f96::/47

    Signature Algorithm: sha256WithRSAEncryption
         ac:33:cf:cd:4e:7d:8b:17:3b:68:af:2e:49:b4:73:a7:d0:ef:
         b8:0f:ae:e4:ca:aa:22:58:f5:c9:3c:7d:53:a2:49:59:c5:c7:
         63:8a:4e:91:45:e2:5d:6e:52:34:23:ce:85:fb:6a:d7:2c:7d:
         75:78:77:0e:d9:86:0f:06:62:5a:b9:6b:59:b1:9e:f7:55:fd:
         90:6c:e0:d1:90:3b:c7:b9:3f:28:55:e9:4f:06:79:ba:3f:b4:
         26:7c:9e:a3:d6:15:90:bd:38:46:48:62:d1:b9:1a:b8:e5:32:
         bf:56:84:44:11:f7:1d:e5:a3:9a:3d:64:0d:11:d5:20:d8:3b:
         92:18:17:a2:d5:01:98:dd:8f:21:0b:58:10:1e:a0:42:84:5f:
         f1:45:47:f1:0f:7c:ca:d1:9f:25:53:86:41:fb:21:d6:f1:2c:
         51:bd:2e:cf:65:67:19:32:94:0f:34:73:73:e3:3f:54:44:8b:
         3c:61:a5:5f:ed:8a:c8:7d:c7:01:ae:d9:a1:68:e6:09:73:49:
         f1:5f:95:f8:48:d9:26:7b:81:10:34:aa:00:55:ab:37:7a:24:
         8d:f0:f3:5e:78:2b:ab:a5:37:32:e3:64:75:09:78:b0:99:a0:
         1b:d5:2c:ff:80:3e:04:19:d0:38:04:66:ca:89:80:eb:d0:9e:
         bc:85:43:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:57 2026 by rpki-client