Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3c0e843-8076-44b2-baf3-210d111e8b24.roa
File:                     e3c0e843-8076-44b2-baf3-210d111e8b24.roa (raw, json)
Hash identifier:          FGKic9hW+tpfE3HO15pCEt6ShPKWQASavwy54nGj4WE=
Subject key identifier:   4F:D1:3C:E3:40:C3:AA:8F:E9:09:3C:1E:37:EC:3E:C5:B9:22:87:D3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1BD5E4919DEA74DD6D9914D2BD6D527645055A70
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3c0e843-8076-44b2-baf3-210d111e8b24.roa
Signing time:             Thu 12 Feb 2026 00:11:20 +0000
ROA not before:           Thu 12 Feb 2026 00:11:20 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:244b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d5:e4:91:9d:ea:74:dd:6d:99:14:d2:bd:6d:52:76:45:05:5a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:11:20 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=68952a9b1681c631334f77f8203effc790fbaea69363dcc77e04c39515502025, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:8c:f8:cc:53:25:ef:5f:f2:2e:ba:8b:0e:
                    01:bb:05:9e:8d:b4:c5:95:2f:d6:f6:24:93:48:a4:
                    c8:d4:8a:c3:72:ee:8c:d1:f1:17:b7:f3:67:f9:7b:
                    42:ca:00:87:bc:93:e6:17:94:6f:2b:20:60:c7:47:
                    e3:4a:5d:eb:2c:6c:10:92:d5:b1:13:cc:06:2b:c0:
                    73:98:db:17:68:35:70:d8:23:b5:53:2b:4e:27:2e:
                    7c:7f:1c:26:86:91:35:8d:f0:53:9d:3d:c5:a5:b7:
                    4c:29:6c:a5:c2:4b:36:7c:b3:a5:d7:6f:fe:d3:d7:
                    e8:fd:a6:47:50:8a:19:6d:e5:a9:c1:d5:af:90:44:
                    bc:6d:aa:87:ab:c8:41:1d:1a:99:f6:2b:0f:bc:e8:
                    ac:a5:fb:75:5c:02:34:f2:0f:d4:ad:a8:33:ca:38:
                    c7:78:f7:6e:ca:e0:5f:4a:06:4d:3d:8e:1d:3f:98:
                    c1:a1:ec:eb:03:03:8b:a1:66:e8:1d:ec:36:a9:70:
                    7a:bb:ad:39:3a:9b:9d:08:f4:ed:1c:55:e8:02:67:
                    ca:e5:78:27:65:94:a0:9b:12:11:b1:8d:74:3f:bf:
                    76:28:83:d0:89:ad:15:3a:da:ce:64:46:95:53:ef:
                    fa:48:c9:59:5c:16:7a:94:2f:cb:e8:4c:a5:3a:7f:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D1:3C:E3:40:C3:AA:8F:E9:09:3C:1E:37:EC:3E:C5:B9:22:87:D3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e3c0e843-8076-44b2-baf3-210d111e8b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:244b::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:8e:d9:f5:84:48:38:59:ad:42:bf:31:1f:5b:4f:3c:aa:c7:
         aa:0b:b6:d8:52:6e:aa:b8:cf:15:e1:70:2d:7c:49:e0:80:24:
         5e:6e:99:25:19:1c:57:e5:99:e9:1c:57:75:93:4b:9f:7d:61:
         bf:36:8e:7e:6c:0b:d2:9b:ac:7a:c1:7f:f7:ff:2f:9f:cf:96:
         00:73:5d:9b:29:3f:8c:0d:ce:53:4b:b5:0f:1f:0e:23:60:be:
         f4:4c:b8:9e:17:32:06:88:d0:04:f4:99:4e:b4:9c:50:ef:0e:
         9b:ba:63:3c:81:81:ce:b9:14:b6:3e:7a:92:79:3e:e8:33:e0:
         9b:f7:dd:d9:6a:44:ba:40:fe:f6:7d:72:35:40:6f:c8:b0:a0:
         c5:c8:be:56:bb:9c:b8:5e:40:25:4f:50:5d:a8:66:5b:1a:5b:
         be:db:60:7a:10:a5:7e:61:38:63:bf:00:50:e2:fc:3e:3e:fb:
         62:3a:d4:dc:fa:09:83:ea:09:44:33:88:cd:f7:57:87:70:30:
         04:f7:9d:a2:64:74:17:74:8c:1e:31:fc:3c:f9:b5:14:25:5d:
         0a:88:e3:50:00:5c:47:88:91:61:cf:de:03:8a:0e:a6:7e:10:
         9b:53:28:30:04:e6:aa:05:88:9f:65:9e:e0:58:1c:7a:fc:85:
         cf:77:6b:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:18 2026 by rpki-client