Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef70ab07-a746-4a4a-92ea-4fb0f932a899.roa
File:                     ef70ab07-a746-4a4a-92ea-4fb0f932a899.roa (raw, json)
Hash identifier:          SjyNHmEWg5+eNLLglvut3VO89VGzha2rulnYF/4owM4=
Subject key identifier:   6F:BC:85:53:34:19:BF:E2:BC:A9:60:B0:0E:BD:E2:19:B5:4D:CA:FB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       02D92AD77230CC3B4F801DF93D69EB814C9F5CD3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef70ab07-a746-4a4a-92ea-4fb0f932a899.roa
Signing time:             Fri 13 Feb 2026 06:00:09 +0000
ROA not before:           Fri 13 Feb 2026 06:00:09 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d9:2a:d7:72:30:cc:3b:4f:80:1d:f9:3d:69:eb:81:4c:9f:5c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 06:00:09 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=a5b862dc13856cca55ad28868a3a47fa24a9a27d7de19503b1cdc197d995739f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:41:a2:5a:4a:0b:5f:5b:9c:19:1b:d3:bd:0f:
                    38:d8:16:32:c3:23:41:db:ad:69:53:e6:f9:9a:fb:
                    07:d8:da:90:1c:d0:ee:b2:a6:ca:48:ee:05:18:13:
                    15:a3:ad:23:e1:f0:f8:0a:13:34:35:f5:ed:40:97:
                    1d:46:0d:38:f4:d9:e5:88:1c:28:23:fb:4a:b6:af:
                    d9:86:04:94:40:b8:50:23:3b:e5:fc:61:27:f2:6a:
                    90:8d:7f:c6:a4:e0:4e:80:b9:19:b7:68:1e:e7:bf:
                    9c:2b:ce:d3:10:89:44:18:99:7b:ea:bb:8e:54:f0:
                    43:3c:84:e4:c6:4b:40:8b:8e:23:3a:73:99:a5:fb:
                    dd:d8:4a:7c:81:2b:2c:9c:2a:5f:e9:c7:29:77:6d:
                    a6:89:8d:ae:2e:18:04:df:27:c0:ed:d3:58:e1:c1:
                    31:bb:38:32:06:2a:e0:ed:86:6d:95:54:29:11:40:
                    10:0c:89:45:27:02:71:7d:34:a8:ef:4b:5b:5d:01:
                    3b:5a:8d:4f:a4:7b:fe:f1:20:93:ca:b5:9d:a3:3a:
                    41:56:8d:e3:ac:43:d4:48:c5:49:46:5a:1c:c0:be:
                    d1:da:3c:73:cc:7f:db:51:6f:7c:b2:4b:77:b1:c4:
                    50:24:b6:cb:fa:b7:46:73:4b:cb:ec:12:34:8a:e6:
                    a6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BC:85:53:34:19:BF:E2:BC:A9:60:B0:0E:BD:E2:19:B5:4D:CA:FB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ef70ab07-a746-4a4a-92ea-4fb0f932a899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:5c:bf:79:2d:29:36:34:70:c0:ea:12:77:d1:e6:84:39:89:
         f6:3e:93:e9:d3:cf:a8:66:76:b0:27:d6:bb:6f:66:ca:65:4d:
         c1:ee:fb:92:d7:f5:c6:57:b0:8f:89:c8:42:24:06:74:41:bc:
         84:0e:64:26:ed:68:c8:ed:34:88:26:3a:f3:3c:5f:e5:46:b0:
         8d:f7:3b:c0:47:51:3b:f1:80:ad:3f:07:00:38:70:83:ee:91:
         b7:1f:51:3e:8a:65:e5:88:2d:9c:ae:17:7c:e7:23:41:5e:ba:
         4d:e4:f2:68:53:ca:20:20:7d:fa:a8:5a:42:30:2c:db:43:cc:
         71:61:89:c5:32:7a:fc:07:2b:d2:c1:97:71:21:dd:e8:cf:35:
         9f:91:74:9a:c8:56:61:51:5b:53:96:4b:a0:3c:d5:e3:e2:c6:
         8b:79:c7:ba:b7:57:b5:67:10:57:9c:06:65:49:67:1e:05:4d:
         0d:6c:22:32:ca:bb:29:6e:55:1e:1e:c4:98:69:f7:3f:b5:7e:
         4f:34:c7:21:b8:7d:c1:85:02:f7:7c:d0:14:60:f7:cb:7f:26:
         65:c7:38:5a:bc:a3:a4:bc:ae:81:28:a0:fc:e1:9e:2f:fb:6c:
         d5:6b:27:3b:2e:10:37:58:98:89:56:c2:48:84:3d:2b:6f:65:
         01:2f:ae:13
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:51 2026 by rpki-client