Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef0b7126-abec-4cd8-b33c-5da19ddcbe5e.roa
File:                     ef0b7126-abec-4cd8-b33c-5da19ddcbe5e.roa (raw, json)
Hash identifier:          yDO3VvMs2MzmeDxJJ008CjMHb9K2JFKIqeA8HqLSB+0=
Subject key identifier:   42:D9:60:9E:AC:9D:DE:90:B3:11:7B:3A:90:39:16:58:3D:C4:30:52
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       23A7AF5F921F9903876EDC4333F7736D2D351649
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef0b7126-abec-4cd8-b33c-5da19ddcbe5e.roa
Signing time:             Fri 13 Feb 2026 07:50:54 +0000
ROA not before:           Fri 13 Feb 2026 07:50:54 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:36e0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a7:af:5f:92:1f:99:03:87:6e:dc:43:33:f7:73:6d:2d:35:16:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 07:50:54 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=ab6372fdb7ed39ee7656e293aea81ba6038b83cae7e850ba970d71da76988be2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:8a:ef:9b:75:a0:69:7c:eb:ac:95:ef:8b:
                    fa:1f:e7:db:5a:cf:ef:69:81:11:84:f9:33:54:25:
                    93:e0:a6:68:2e:ae:0d:1b:9e:a5:e6:d4:e8:c6:bb:
                    5d:63:b3:cf:18:98:bc:de:b3:9e:34:d7:48:75:b2:
                    52:dc:b6:53:7c:9e:50:05:f1:d1:b4:2e:96:5e:21:
                    2c:ff:00:70:4b:ef:a9:3e:41:5e:2f:6f:d8:fe:d5:
                    e2:0a:65:a8:45:f3:34:7d:57:de:35:46:ae:66:38:
                    16:08:47:9e:20:61:23:16:99:bb:57:c8:0e:2f:b1:
                    9d:c8:b8:dc:f6:3c:a8:3c:27:67:df:cf:f1:84:15:
                    99:0a:9b:a2:03:d2:4f:df:1e:4f:6d:28:54:d5:da:
                    c8:ba:42:93:27:16:8b:cf:4f:e5:8e:92:39:72:fd:
                    e5:1e:6d:0f:4b:63:7b:9d:de:9d:5c:5f:e4:87:27:
                    1f:28:b7:e3:4b:24:c5:83:8d:aa:ff:1e:2e:59:09:
                    e4:04:78:4e:d7:8a:41:29:01:14:5d:50:dc:af:d1:
                    8b:32:e7:49:92:b4:06:b0:64:88:1f:9c:95:e0:38:
                    09:5d:76:77:76:f2:83:91:21:29:fd:9c:39:69:21:
                    3a:91:2e:b6:6f:c2:8f:75:4b:78:b2:27:28:a7:47:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D9:60:9E:AC:9D:DE:90:B3:11:7B:3A:90:39:16:58:3D:C4:30:52
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef0b7126-abec-4cd8-b33c-5da19ddcbe5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:36e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:4b:b4:35:75:23:86:7e:38:ab:db:89:02:53:15:54:54:df:
         1f:36:17:73:28:fc:7d:59:d3:fc:bc:81:8a:1a:20:ff:9e:83:
         b2:bc:da:2c:0d:db:26:ec:40:5e:31:f1:56:59:05:ca:2e:3e:
         2d:72:c8:49:28:49:6e:b3:01:64:a4:8d:a4:45:02:6f:d1:34:
         da:ad:ec:16:56:3a:ce:dc:ac:d7:8c:95:e1:ab:e9:71:b0:ef:
         e9:dd:01:7b:85:68:4d:b0:3e:60:19:9b:c5:82:06:c3:a6:04:
         bc:dd:6a:c3:66:a0:da:df:5b:bd:0c:81:97:f8:59:12:ca:58:
         aa:ad:66:14:25:45:de:55:cf:ee:ca:23:b6:52:4f:03:9e:dc:
         cb:38:25:cd:3b:45:37:e7:5a:77:c0:35:42:41:08:52:6c:2e:
         09:b6:30:c9:11:e9:5e:da:cb:b8:99:d4:3c:8f:27:a5:33:60:
         75:07:d2:ce:62:6b:36:83:bc:99:b7:ad:e0:13:ed:7c:9d:19:
         d2:ca:d9:95:88:ab:bd:8e:93:ba:8b:33:2a:d8:66:1b:11:03:
         15:77:86:fa:a1:b1:c0:3a:e6:e8:ac:4c:aa:ee:78:fe:82:a9:
         43:db:1d:df:35:fb:c9:8e:2c:23:a2:53:44:9a:fb:aa:90:7d:
         5b:e5:ce:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:10 2026 by rpki-client