Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eda3d0f5-1f6c-4df6-8d8e-737d329672d5.roa
File:                     eda3d0f5-1f6c-4df6-8d8e-737d329672d5.roa (raw, json)
Hash identifier:          tDWgoluyy8tVuc+OgGFi1nXctWoeeAdkxPi0j6RJlfY=
Subject key identifier:   37:5A:04:01:F4:92:ED:BA:B0:06:82:1E:EC:57:97:20:8E:C6:D5:F5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2AF2BE73472F57745D013CA594FE072C71B139CC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eda3d0f5-1f6c-4df6-8d8e-737d329672d5.roa
Signing time:             Fri 13 Feb 2026 06:42:08 +0000
ROA not before:           Fri 13 Feb 2026 06:42:08 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3eec::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f2:be:73:47:2f:57:74:5d:01:3c:a5:94:fe:07:2c:71:b1:39:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 06:42:08 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=68882b9a996551bbc03b79375fbafc1f161c73a9e1dc8fab4dc183688439b178, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:2b:8b:17:5c:07:ab:51:59:66:2b:a9:b0:
                    f7:ef:5b:8c:7b:a1:b8:4b:38:b7:4f:96:ae:4a:d7:
                    cd:02:61:d1:7c:b4:78:47:ec:c5:08:1d:f4:b8:ae:
                    99:5c:2a:c0:04:bc:9f:06:a3:55:47:8a:6c:5a:d0:
                    e8:a3:b7:e7:6e:a2:07:60:ad:2c:0c:33:e7:99:ca:
                    07:1e:da:97:72:8b:4f:cd:af:fb:20:d1:ff:dd:a2:
                    4c:34:f3:6e:8b:4d:bf:01:26:e6:85:95:d2:51:be:
                    b0:c8:7d:c7:4e:07:be:09:4c:53:60:6f:ce:78:1d:
                    42:3c:e0:8b:a5:f9:64:79:09:34:55:b5:42:10:a6:
                    77:fd:ce:8b:9d:ec:14:1b:db:9c:58:15:37:1b:5c:
                    6b:46:d8:4b:c0:8c:7d:78:cd:98:0a:73:4b:36:68:
                    0d:a3:49:55:b1:b9:fc:c6:65:f7:0d:0f:25:47:d5:
                    66:d0:0b:fa:80:ce:a5:b1:66:9e:82:50:98:a2:06:
                    0a:7c:a4:0d:7f:c7:3e:02:b0:2e:3a:6c:02:96:0f:
                    9c:4d:17:bb:c5:00:cf:8c:db:ad:30:6d:8e:ac:3b:
                    73:b1:7e:e2:ff:74:53:52:74:96:21:44:12:4d:0a:
                    3e:43:47:5b:fe:04:3d:28:7c:ac:ec:18:31:b4:4d:
                    91:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5A:04:01:F4:92:ED:BA:B0:06:82:1E:EC:57:97:20:8E:C6:D5:F5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/eda3d0f5-1f6c-4df6-8d8e-737d329672d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3eec::/46

    Signature Algorithm: sha256WithRSAEncryption
         94:4f:a5:3b:87:65:a7:f4:2e:3b:d6:ae:97:9a:5b:85:e4:20:
         13:cd:ff:c6:7d:d3:52:eb:d8:8e:86:b6:69:42:0c:91:89:22:
         f2:68:1d:68:45:c3:bb:7d:6d:76:d4:87:b8:9f:fa:5f:99:1e:
         8b:11:35:ed:2f:26:6a:cd:15:4a:db:06:b0:1b:e2:87:0c:9b:
         29:a5:e8:84:16:05:2c:e2:ec:3a:fb:9d:84:56:7d:d5:31:21:
         95:32:73:7e:39:e3:92:be:9d:62:69:a1:1b:f0:4e:9b:fc:3f:
         d5:10:71:3c:6c:8d:e8:a7:19:18:f4:9d:9b:14:37:15:9e:15:
         63:ce:a9:23:9e:1b:22:d6:73:76:a3:42:01:d8:03:4f:07:74:
         9f:f1:62:96:23:a3:5e:03:88:73:98:6f:01:b8:c3:67:7f:71:
         e7:80:68:f7:d4:24:56:3e:63:7e:bf:b0:0e:30:85:14:7a:05:
         bb:32:41:00:4e:19:e1:ec:3d:21:15:78:de:4d:da:48:f0:f1:
         84:9e:c2:5a:5e:07:96:11:ae:45:ba:16:26:ff:e4:9a:fd:f8:
         00:6c:34:a2:f2:2c:f1:1e:d6:e3:4f:8d:4c:57:dd:7a:d9:1d:
         37:a8:f8:57:39:cf:f6:f6:f1:29:07:b2:13:1e:54:fc:69:e7:
         8b:c4:db:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:15:45 2026 by rpki-client