Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/deb3fd55-1c0d-42af-9601-ce9dcec0a0f5.roa
File:                     deb3fd55-1c0d-42af-9601-ce9dcec0a0f5.roa (raw, json)
Hash identifier:          YQ+yRUiGPzmyMlW4CELXAK0aFFEXGlJI+KTQRRXsXOQ=
Subject key identifier:   66:09:39:E5:F8:E6:42:6B:B6:5E:B0:19:E1:29:EC:C6:D5:5C:21:7A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4AA8D48A600DA0AA780D45E0070C0F1491773350
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/deb3fd55-1c0d-42af-9601-ce9dcec0a0f5.roa
Signing time:             Fri 13 Feb 2026 09:21:25 +0000
ROA not before:           Fri 13 Feb 2026 09:21:25 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3dd8::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a8:d4:8a:60:0d:a0:aa:78:0d:45:e0:07:0c:0f:14:91:77:33:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 09:21:25 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=105f354eb1d7fa7e066793f33691820e1173f22b436f8e9840fbc730e6fb62ce, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:8f:d5:2e:07:9f:ba:54:62:65:b8:3c:d2:
                    d4:ca:a1:f1:7b:c9:a8:dc:33:87:48:7d:d9:59:b1:
                    06:64:0b:14:9d:e0:85:ca:21:4e:ab:0b:94:15:f8:
                    4d:80:0f:e0:98:d0:fb:b0:6d:76:c6:f0:06:37:9d:
                    99:70:c0:75:2f:12:9c:9e:34:39:b8:64:01:94:38:
                    8e:1a:fe:ab:dc:4e:3a:32:f3:61:00:dd:7f:ab:55:
                    d4:6f:31:42:c6:e3:d3:17:6d:29:c0:a9:e7:ad:a2:
                    7f:99:21:3a:f2:b4:02:e2:dc:44:aa:fa:83:6e:9d:
                    49:f1:c8:66:38:d5:a0:08:38:86:91:f5:af:c0:fa:
                    81:57:8b:a6:00:82:1e:dc:65:07:5e:fd:35:b1:9e:
                    38:b6:18:b3:e4:aa:8a:cc:2c:b4:b0:ac:ca:97:34:
                    8d:7a:ab:9c:d0:94:5d:3c:10:c2:7f:d7:ed:5d:e8:
                    ff:d3:e9:c0:a1:2e:b8:82:e9:12:3c:19:b6:b5:2c:
                    68:d7:1e:ac:c2:14:66:15:7c:f0:f5:8e:fe:1e:48:
                    f1:d7:69:a9:56:b3:6f:0d:7f:b9:f0:46:ee:e9:1d:
                    73:41:b0:ec:da:68:07:05:ec:7c:b9:49:bf:b9:fa:
                    69:50:59:0f:c6:58:96:45:55:52:d5:79:3c:ab:d0:
                    81:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:09:39:E5:F8:E6:42:6B:B6:5E:B0:19:E1:29:EC:C6:D5:5C:21:7A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/deb3fd55-1c0d-42af-9601-ce9dcec0a0f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3dd8::/47

    Signature Algorithm: sha256WithRSAEncryption
         8a:9b:cb:1d:2c:b6:9e:41:61:e8:aa:07:00:7e:0f:17:50:b9:
         d9:c5:11:4c:6f:e4:5c:93:31:d1:cc:c8:76:f3:7a:49:d9:f1:
         e3:d7:e4:6a:c2:d9:8f:1c:b6:ac:5f:ad:ad:6c:10:73:7c:24:
         41:a4:f3:45:26:c9:73:80:db:7d:3b:bf:e0:92:b8:d3:19:6a:
         4d:a5:72:2e:f8:47:75:c9:83:a2:16:28:4d:70:0d:79:80:d1:
         a8:60:49:54:9e:da:af:15:e8:a7:ac:20:46:92:7a:0b:c1:f2:
         bc:49:be:15:34:bb:80:37:4f:7d:42:ae:a7:05:56:8a:c9:21:
         f1:59:fd:b6:63:59:8e:d5:60:90:0f:26:9c:50:62:9a:4c:4d:
         3d:81:11:6d:d5:16:3d:8a:23:36:9b:5d:81:5c:5d:53:98:8a:
         77:6a:ad:9c:ae:4a:c5:4e:43:37:d3:d3:b0:fa:31:37:06:ef:
         e0:b6:c8:bd:f3:5c:c4:ab:fd:04:2a:cb:a8:2a:3d:92:d8:1a:
         2e:b2:b8:9d:36:f4:91:27:7c:28:c2:1f:4d:26:ba:f3:64:8b:
         cd:79:68:87:c6:b0:5e:c2:b4:40:e6:14:29:16:54:fb:9d:c5:
         c5:0b:9b:b5:e7:b5:26:0a:ba:a6:bd:e4:e8:1f:bd:79:4e:5d:
         00:af:f2:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:10 2026 by rpki-client