Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de9d033e-92f3-4dd5-8304-b15dd3684627.roa
File:                     de9d033e-92f3-4dd5-8304-b15dd3684627.roa (raw, json)
Hash identifier:          e8X+X5taMEAEZ55HNgI887545fjzaqXv7+Plu5xXYVE=
Subject key identifier:   B8:32:19:AF:99:DF:2F:67:FF:7A:F6:50:2C:AC:14:01:D5:F5:47:82
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       645ABE34CB35A56CF094D586CE959AEB15120055
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de9d033e-92f3-4dd5-8304-b15dd3684627.roa
Signing time:             Fri 13 Feb 2026 10:40:39 +0000
ROA not before:           Fri 13 Feb 2026 10:40:39 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2d70::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5a:be:34:cb:35:a5:6c:f0:94:d5:86:ce:95:9a:eb:15:12:00:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 10:40:39 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=22ab29691034c7bd8ad146fc4939464228d8babef61327d50eead1a5075d0803, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4c:5d:df:3e:62:55:a5:17:e4:b9:a1:8a:42:
                    da:35:ed:32:a2:ae:ab:fe:d7:e4:c0:61:23:c2:7c:
                    7c:ad:30:14:c1:49:a7:43:73:77:3d:98:c9:a7:17:
                    95:96:2c:ca:09:8c:7e:27:f1:b8:5f:5d:e4:37:38:
                    7f:3b:8f:9b:26:0e:ec:f6:d5:e3:fe:78:fd:54:64:
                    a6:67:95:87:d6:16:2b:01:0d:16:ba:1d:2e:39:e4:
                    ca:31:b7:33:ab:6a:b6:86:cf:16:13:63:24:9b:c4:
                    72:49:0c:90:fb:3e:bc:db:22:da:23:95:bd:0d:71:
                    68:05:df:f0:0c:3b:9f:67:77:f3:a1:11:19:2c:16:
                    42:b5:2c:4e:e3:bc:8b:a5:42:ff:28:ae:7a:3d:5d:
                    05:ca:85:5b:f6:bb:28:26:fb:ae:05:5d:12:55:4b:
                    f1:4e:57:5c:a2:ed:47:3d:96:7b:8b:43:1d:c8:ce:
                    a8:d4:d2:2e:cd:87:f4:e1:bb:74:76:12:9a:73:7f:
                    cf:e3:19:a2:6b:02:92:42:cb:bf:42:e3:ce:ce:28:
                    c0:49:47:0c:7b:22:00:5f:99:46:31:45:b8:1b:9e:
                    b0:33:59:b3:85:81:bc:c3:d7:13:1c:35:28:93:b3:
                    a4:75:f1:cb:b3:28:2c:27:a1:51:af:65:f9:7e:b5:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:32:19:AF:99:DF:2F:67:FF:7A:F6:50:2C:AC:14:01:D5:F5:47:82
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/de9d033e-92f3-4dd5-8304-b15dd3684627.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2d70::/46

    Signature Algorithm: sha256WithRSAEncryption
         23:21:7f:be:ce:8e:5d:92:99:76:04:4c:6c:18:86:e7:58:2b:
         9c:07:ed:e6:f3:ee:f4:64:74:f8:cb:de:4d:64:bb:fd:ee:62:
         df:aa:23:9a:04:2e:9b:43:59:9b:2d:82:fb:17:9c:07:f1:e2:
         01:1b:8e:ad:16:4e:65:28:15:ea:6a:9f:f9:16:a7:9d:97:7a:
         1b:0a:92:8f:44:04:38:5e:e7:fd:ca:93:94:60:aa:27:c5:f6:
         1d:d1:0e:75:92:33:df:cf:45:ed:a5:af:bc:c8:bf:f8:c5:39:
         7e:72:b4:6a:f8:56:41:34:db:c2:d4:7d:1a:c8:7d:cf:b5:2b:
         a9:ba:27:04:c7:d5:16:c8:1d:55:30:7d:17:b2:04:ce:85:ac:
         24:a1:ab:82:2c:c0:08:1e:91:2a:f0:cd:13:8f:61:71:cb:c8:
         42:15:64:c5:22:71:bf:18:89:d4:bd:f3:6a:a2:22:1f:70:54:
         2e:3f:aa:66:78:ba:c9:4b:c0:5f:b6:d4:e7:31:84:3f:b3:6c:
         82:55:c5:b0:7b:aa:2e:35:41:e5:c4:54:07:93:3d:25:ba:37:
         a3:37:51:35:58:ae:2b:9a:c5:73:d4:3e:00:81:78:b1:95:27:
         28:03:ff:a6:10:7e:f1:60:af:75:d6:ac:6d:cd:64:10:88:6d:
         1b:f4:69:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:14 2026 by rpki-client