Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2a8c11f-2198-483c-8295-6d7ba53dbec9.roa
File:                     e2a8c11f-2198-483c-8295-6d7ba53dbec9.roa (raw, json)
Hash identifier:          ZTw5EbUEfRLL0TB/Xw95o1MR8kBUbv+DYa2/HucN+p0=
Subject key identifier:   D5:61:60:76:AE:22:CE:99:7A:7D:A6:81:BA:42:B6:DE:25:CD:7B:DD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       03ABE1697DA382F6F74D99DB1440E659698E5FC8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2a8c11f-2198-483c-8295-6d7ba53dbec9.roa
Signing time:             Fri 13 Feb 2026 05:41:40 +0000
ROA not before:           Fri 13 Feb 2026 05:41:40 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2460::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ab:e1:69:7d:a3:82:f6:f7:4d:99:db:14:40:e6:59:69:8e:5f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 05:41:40 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=d7759b3d756464ab222139c9edae33c09bcf7f7a17da95ffdc9c4c754406df25, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:37:35:e6:08:0a:45:ee:7b:85:fc:43:ae:
                    5d:08:6a:c4:06:6d:18:40:2d:65:fb:b3:c3:60:26:
                    76:35:c4:89:82:ca:07:ba:9e:d0:52:e1:1a:7e:d1:
                    6f:6d:80:2f:1b:ef:6c:99:6f:5d:d2:ee:ab:00:0f:
                    59:fb:dd:1d:eb:4d:40:4d:14:0e:c3:a1:c1:e2:b1:
                    89:f8:fc:35:5b:ad:e5:27:1e:f7:09:a4:3e:58:07:
                    98:7c:4c:ab:36:51:db:76:75:22:a6:eb:76:a1:27:
                    e3:e4:bd:53:db:e4:e0:00:d2:8e:0a:3d:44:00:8f:
                    40:e4:51:e8:e4:6c:c4:0f:a9:15:37:d8:88:57:30:
                    10:90:9e:c6:db:ac:61:50:19:da:be:df:e1:60:38:
                    0c:ea:a8:fb:ab:35:90:73:27:1c:37:70:88:ca:77:
                    65:06:a4:4c:2b:ea:ab:2d:ff:51:90:d6:54:e9:72:
                    82:37:f1:fc:ef:f1:29:a1:8a:39:08:bd:ef:83:48:
                    31:99:9e:2a:62:9c:bc:cb:df:4d:63:61:52:ca:5b:
                    af:bc:45:5a:d0:0b:89:31:b6:4b:be:69:9a:a4:37:
                    8e:43:0f:5f:aa:48:3f:dd:fe:a5:1c:70:37:0d:cb:
                    3b:91:dc:ff:bc:e6:e3:69:f6:0f:07:b4:93:2a:9e:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:61:60:76:AE:22:CE:99:7A:7D:A6:81:BA:42:B6:DE:25:CD:7B:DD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2a8c11f-2198-483c-8295-6d7ba53dbec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2460::/45

    Signature Algorithm: sha256WithRSAEncryption
         be:a7:1c:57:4b:49:6e:9e:fd:ef:8d:9e:8c:07:6f:99:5a:5e:
         f7:10:72:15:6d:82:24:98:14:e1:8c:e3:5b:61:d2:69:5e:6c:
         3e:50:50:54:d2:9d:a5:2b:a7:bd:a3:9e:6e:39:60:55:68:60:
         9d:f3:f9:92:1e:44:87:45:93:25:60:4e:80:ef:1f:83:98:b2:
         33:e8:a0:33:02:b4:1e:69:41:c2:9d:cf:07:4c:bf:eb:e5:21:
         bb:8c:fa:93:3f:4a:af:20:5e:68:d2:aa:84:56:a6:5d:f8:57:
         81:00:d8:91:2c:62:99:79:11:91:c7:3e:19:26:55:60:c8:9e:
         70:9f:55:34:a8:2a:2a:6d:21:f9:5b:77:61:05:56:29:0a:6d:
         6c:b0:73:27:b9:fd:7f:39:e0:cc:0b:5d:cb:6e:4b:41:05:2e:
         1a:8b:f5:05:e6:4c:f6:d6:f2:d5:15:9a:f9:bb:1a:8c:57:7f:
         bd:25:20:e0:6e:a7:03:0a:84:9c:6d:0c:87:31:d0:e5:7a:16:
         3e:47:21:9c:ac:21:20:c6:f1:1f:5b:be:16:2a:85:27:00:ff:
         00:0d:a2:ce:fa:6b:ed:2b:63:78:d3:e1:bb:3a:a2:10:19:16:
         1f:c2:5a:45:cd:b9:22:81:4f:bd:3b:1c:26:2c:fd:06:b5:a9:
         c1:ff:c2:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:58:43 2026 by rpki-client