Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f176fe11-3082-4b0d-b077-1865b0d6e134.roa
File:                     f176fe11-3082-4b0d-b077-1865b0d6e134.roa (raw, json)
Hash identifier:          m3082C3nU7u9u36YiKkPLJtayZNjiyrSFSktcxnOLJk=
Subject key identifier:   B5:EE:E1:AD:F4:AD:89:74:6F:1A:6D:2A:35:1C:4F:62:CD:E3:C6:BE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       525E2B0DFBBF4D7227F992FE35190801B236B9AF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f176fe11-3082-4b0d-b077-1865b0d6e134.roa
Signing time:             Fri 13 Feb 2026 13:11:07 +0000
ROA not before:           Fri 13 Feb 2026 13:11:07 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:389c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5e:2b:0d:fb:bf:4d:72:27:f9:92:fe:35:19:08:01:b2:36:b9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:11:07 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=3bd454dfaaf59eb1205382fd94c8503278acc926ce998149d2bd98bbdfac6caa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:4a:63:02:3c:55:a7:7d:8a:c2:17:85:81:
                    19:4e:67:84:a3:16:4d:f0:a5:7d:6a:94:95:93:c1:
                    5b:19:26:2d:a2:b9:ff:70:38:39:d0:ea:b8:3d:0c:
                    dd:65:6d:8a:36:c7:cb:be:6a:ea:83:db:03:4a:68:
                    3a:cc:82:3a:73:b9:94:0d:5c:4a:60:4d:aa:07:f7:
                    15:ae:a4:8a:e4:69:6b:a8:09:eb:e6:05:4d:63:d2:
                    e7:d7:42:e6:da:e2:a6:46:51:f4:6a:e9:e2:44:38:
                    57:9f:47:24:4d:ef:59:8e:8f:85:d2:9e:c8:15:93:
                    dc:9c:f5:2b:0d:a5:d3:6c:8f:da:11:c6:26:31:b2:
                    e1:1e:17:c5:c2:70:78:aa:28:6d:df:64:b5:9d:b3:
                    2f:52:ba:ba:5b:90:9e:31:bf:f9:5a:43:a4:7c:ef:
                    4f:16:37:f5:e2:e1:35:d8:64:b4:3d:98:7f:9b:9c:
                    35:67:54:46:57:9e:dd:17:d4:ca:35:64:38:ca:2c:
                    d3:11:52:5a:37:a5:d6:5d:6e:e9:14:9f:7c:ac:ac:
                    2a:6b:36:b8:b6:5a:89:2e:dd:e7:85:09:31:5d:8c:
                    69:5c:c1:92:af:01:64:43:35:f8:10:c1:c6:9f:f9:
                    2c:df:96:ea:23:fc:d8:68:e4:9e:a4:12:02:08:d8:
                    ed:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EE:E1:AD:F4:AD:89:74:6F:1A:6D:2A:35:1C:4F:62:CD:E3:C6:BE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f176fe11-3082-4b0d-b077-1865b0d6e134.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:389c::/47

    Signature Algorithm: sha256WithRSAEncryption
         a4:d4:62:7f:67:c8:9d:18:6a:37:cd:85:e5:61:08:f0:fd:d1:
         9a:9c:ce:4e:b1:43:06:eb:ce:9c:0a:97:b2:87:33:06:dc:50:
         26:d5:55:96:e9:7f:17:03:f7:c2:71:13:30:55:fe:c9:ff:58:
         f6:bc:3b:4f:e7:1c:49:32:af:d4:62:d3:eb:f8:7e:3b:ba:74:
         8f:ca:fe:ad:47:38:a3:b3:b4:ba:4e:ab:06:79:7f:d1:fb:62:
         6e:be:14:c3:2c:7c:c2:64:ed:eb:c8:31:66:56:42:13:fe:dc:
         26:0a:17:c0:86:c3:fb:e6:a7:fa:a8:5c:ff:09:8c:d5:d2:9d:
         62:96:86:ff:5b:2a:ab:45:5e:48:4b:df:13:a6:66:7c:ea:7d:
         ad:9b:9f:4a:65:53:43:5d:90:14:42:42:97:0a:0c:1a:d9:54:
         ae:c8:e7:2f:fa:d2:41:07:b0:6e:bf:79:f7:48:0c:bf:4c:2b:
         ce:05:1e:e1:e3:bf:f4:71:07:f6:03:fd:60:a6:c8:02:51:91:
         ff:8f:2f:fd:43:70:27:a9:63:5e:4f:66:e4:05:73:53:b2:7c:
         c3:95:d3:71:22:53:bb:62:e8:b4:35:c0:dc:24:f6:92:6b:4a:
         81:10:1b:71:14:2a:b7:64:e6:22:9e:7c:2a:30:de:da:29:bb:
         53:50:37:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:35 2026 by rpki-client