Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1817a45-233f-4bc8-a09c-ed1a52d5c8dd.roa
File:                     f1817a45-233f-4bc8-a09c-ed1a52d5c8dd.roa (raw, json)
Hash identifier:          xonIFXsPF6+JX+mW19DnQ4Qu4/gSJ76Sb2H1WtA7J98=
Subject key identifier:   25:36:9E:F5:58:55:E6:EF:B2:5B:06:BD:68:65:1E:49:EC:AC:AF:71
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3DACDCD0B57FECD52812BC6862F425C84F219F7D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1817a45-233f-4bc8-a09c-ed1a52d5c8dd.roa
Signing time:             Fri 13 Feb 2026 06:41:04 +0000
ROA not before:           Fri 13 Feb 2026 06:41:04 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:33c6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ac:dc:d0:b5:7f:ec:d5:28:12:bc:68:62:f4:25:c8:4f:21:9f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 06:41:04 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=59e813b68f87633a5cce1b519a003793ca340e8ced5181b568e675ebe53e1489, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:de:73:92:37:32:0d:51:8e:e3:e2:78:67:e9:
                    58:1d:62:9c:02:e2:6f:b2:12:30:50:a2:2a:77:48:
                    50:0d:54:d1:4f:92:a0:25:af:50:a8:d2:48:23:1d:
                    26:25:82:6d:ab:be:83:50:d3:c5:1a:f8:07:93:f0:
                    7b:87:2e:50:28:d8:0f:f8:24:d8:9e:ed:21:bf:df:
                    f5:68:91:5e:99:a2:9e:ec:dd:c3:9c:12:5a:1f:2b:
                    b7:4f:a1:2a:2a:d7:02:c9:8a:6d:37:f0:37:a6:fd:
                    ac:1c:8c:5f:4b:fd:ca:72:d3:bc:03:10:4f:48:85:
                    d6:60:b1:55:00:ab:24:25:e5:fc:d9:ad:14:28:88:
                    57:ab:36:24:c9:c6:30:00:86:8d:3b:2c:9b:98:60:
                    ca:9f:6b:36:3b:00:b8:20:0d:39:de:b7:7e:35:e3:
                    f2:74:72:ee:46:aa:b5:96:9c:e6:c8:68:98:84:41:
                    8a:36:52:dc:46:b0:fc:df:40:8e:99:84:57:f4:1a:
                    fa:86:17:ec:96:91:8e:ab:fa:1e:c7:ce:df:58:f5:
                    56:b5:9c:60:1d:a9:0d:45:16:02:97:77:1f:2e:b9:
                    c9:2c:ee:27:e9:36:4d:fb:89:77:87:04:f7:26:c8:
                    27:8e:cd:6b:d9:fb:9c:ba:9a:38:8b:d3:14:80:14:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:36:9E:F5:58:55:E6:EF:B2:5B:06:BD:68:65:1E:49:EC:AC:AF:71
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f1817a45-233f-4bc8-a09c-ed1a52d5c8dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:33c6::/47

    Signature Algorithm: sha256WithRSAEncryption
         65:9b:9a:f8:94:d4:58:af:24:91:1e:7e:d9:5b:37:8d:47:bd:
         c4:12:be:99:d2:ac:e4:e8:ec:a7:ec:50:ab:f3:f6:96:2e:38:
         ed:43:ca:d6:95:6d:91:27:e3:e9:9b:4f:a1:9b:f1:fa:01:68:
         ff:75:df:22:74:92:6e:ff:e5:0c:5c:a7:c6:4e:fc:f5:bb:df:
         f7:3a:01:60:87:1b:3a:53:72:6d:bd:7d:28:2a:bf:c5:8b:54:
         10:22:c6:46:5e:99:02:60:3d:d9:c9:98:22:f7:5b:62:6f:8f:
         10:63:b0:5b:8e:20:91:24:59:8a:e9:c7:b2:f6:fc:a1:65:0c:
         ed:33:43:54:9c:3e:ab:5b:ba:bf:71:e3:d7:6b:02:ec:49:e4:
         d4:e9:2c:eb:bb:d9:4b:dd:9c:83:5b:f4:3c:42:d4:92:6f:2f:
         f8:9e:a1:78:d7:07:cc:4a:8b:22:1a:ef:71:43:68:a6:c3:79:
         e3:8e:8b:1c:06:fa:52:6a:92:da:08:47:22:ee:b4:e6:3a:ba:
         45:09:33:88:03:1e:fc:e6:55:29:f1:28:3e:76:30:92:fb:16:
         58:07:49:74:06:21:27:1a:88:5b:30:40:d3:12:79:df:3a:58:
         1d:58:5f:df:52:14:ff:d4:91:5f:82:4b:d3:cc:32:1d:d3:d0:
         3a:0a:d2:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:11 2026 by rpki-client