Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2795f51-4535-478e-a3e7-3c503554310d.roa
File:                     f2795f51-4535-478e-a3e7-3c503554310d.roa (raw, json)
Hash identifier:          G1aEEYhSErkxEo4m4QksiigPrfx/5O/OATvp6YUXjOA=
Subject key identifier:   45:CA:A4:C5:F5:67:1F:30:F2:0F:1C:F1:45:53:E5:1D:60:6C:67:37
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       441F22D54BDD29A1960C86C9B82482B42317077C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2795f51-4535-478e-a3e7-3c503554310d.roa
Signing time:             Thu 12 Feb 2026 02:40:13 +0000
ROA not before:           Thu 12 Feb 2026 02:40:13 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2f04::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1f:22:d5:4b:dd:29:a1:96:0c:86:c9:b8:24:82:b4:23:17:07:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 02:40:13 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=7017b1f8fc2118d280ba7fde79995469c51f5a3d7a3900258f1a716948e3442f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:37:19:23:1d:89:a8:14:62:4b:28:71:3a:20:
                    c2:eb:72:41:d2:43:58:60:cc:f6:64:cb:6f:3d:ef:
                    83:f1:f2:e8:c6:d7:a9:09:69:a1:c6:16:b3:38:dc:
                    19:d7:e7:6e:df:cb:4f:59:25:b5:02:7b:d2:e4:5c:
                    2e:86:20:26:e2:39:4a:aa:2a:99:e4:31:ae:d7:4c:
                    b9:67:73:90:45:5f:7e:3c:e6:ec:ad:f9:92:ba:8e:
                    2c:28:a6:d0:fb:04:00:03:7a:e6:64:7c:27:86:c6:
                    96:fd:2e:71:68:7d:d3:3d:54:dd:94:0b:9c:a9:e5:
                    e4:57:a9:a5:c7:7f:9e:df:da:9f:13:34:cc:85:de:
                    17:35:42:44:7e:b6:df:a2:8d:5c:72:e1:72:7d:49:
                    8a:c2:94:5d:0d:0c:c2:75:61:d8:86:fb:74:3b:fe:
                    8f:35:b8:60:e3:77:79:12:1b:4e:fc:29:97:fd:9b:
                    05:06:f0:19:50:f6:86:96:eb:71:33:ad:9a:ec:0c:
                    c7:f2:41:d9:ae:f2:80:a1:23:3b:77:74:12:af:eb:
                    14:3d:c7:b6:20:85:bd:c6:7f:73:34:f9:ab:11:74:
                    de:96:e3:77:36:0e:37:bb:eb:d8:d8:8a:68:c8:b9:
                    b9:70:ce:fb:41:d3:06:ac:14:89:58:b1:89:6d:6b:
                    96:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CA:A4:C5:F5:67:1F:30:F2:0F:1C:F1:45:53:E5:1D:60:6C:67:37
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2795f51-4535-478e-a3e7-3c503554310d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2f04::/47

    Signature Algorithm: sha256WithRSAEncryption
         32:78:de:8c:cd:24:44:81:ae:37:93:b4:05:e1:83:c5:82:e7:
         ef:69:6c:17:d7:14:2f:94:c2:89:e0:67:07:2d:ee:30:bb:05:
         04:d7:05:d9:45:8d:14:f8:1c:a6:fd:f5:74:0c:07:f9:ec:34:
         af:91:b8:aa:f6:a6:a2:1e:dd:03:cc:4e:19:14:d3:66:55:c7:
         4c:36:be:a1:63:e5:e4:8a:92:96:5a:43:ba:52:87:87:43:b0:
         02:0d:91:67:f8:25:92:a1:7c:06:64:3c:fd:58:ce:52:c7:a3:
         17:22:96:f7:6f:f4:ea:b0:ed:7f:db:b7:12:32:fe:83:28:c4:
         68:37:a4:87:8a:ea:10:cc:e4:12:c3:0a:43:ec:b5:97:af:d7:
         c5:2d:89:52:ee:a1:04:87:5c:91:01:26:c1:3d:20:35:e1:d6:
         f6:33:dc:e6:97:41:42:64:28:19:d1:8c:f9:5f:ad:46:73:50:
         9d:4b:32:de:3d:78:d6:d7:40:4f:12:58:a2:62:fc:50:c7:fd:
         79:35:80:94:80:ef:e4:7a:df:06:4c:05:60:4d:84:aa:10:3e:
         32:52:23:65:27:42:ea:97:07:09:f6:3f:fb:a6:90:14:cb:f3:
         f9:ff:a4:21:0c:e2:af:71:3b:ed:65:6b:8e:aa:85:e3:af:09:
         cc:f7:59:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:57 2026 by rpki-client