Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fb2ee3aa-e11c-4fe9-b5a8-bea87c242696.roa
File:                     fb2ee3aa-e11c-4fe9-b5a8-bea87c242696.roa (raw, json)
Hash identifier:          rcEtOk/UPSh8Fz/oTLCcPlI636nDY8jvM/DH3AnFb/o=
Subject key identifier:   54:07:29:1D:C4:8A:21:D9:38:2E:CD:A9:0F:6E:1A:13:6C:80:5E:E4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5F2C771D1D793FAF530CADD87B4190FA9C048F8A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fb2ee3aa-e11c-4fe9-b5a8-bea87c242696.roa
Signing time:             Fri 13 Feb 2026 08:32:01 +0000
ROA not before:           Fri 13 Feb 2026 08:32:01 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:28d4::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2c:77:1d:1d:79:3f:af:53:0c:ad:d8:7b:41:90:fa:9c:04:8f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 08:32:01 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=41a3bec57627f344525016f98621ef368eccfa0f65ec42c3a6c49fd228a75741, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:fb:0f:22:af:c2:6f:7d:76:3a:fd:ea:ae:
                    2c:f3:49:ed:f3:42:e2:3d:e9:c1:d0:01:bf:d2:b7:
                    be:14:aa:09:7e:32:c8:4a:3f:1d:06:0a:a6:d8:de:
                    2d:bf:ab:10:03:34:3a:64:9a:c7:55:65:6d:40:bc:
                    b2:1f:26:65:8d:24:1c:73:78:34:53:27:97:0f:0c:
                    ff:1f:f7:76:e6:65:98:6d:97:18:b5:6d:d0:5f:2d:
                    ec:6f:4d:5a:bc:08:ff:44:81:1b:24:99:65:08:69:
                    c4:75:52:9b:fa:f2:7d:ba:f0:aa:94:fe:fe:e1:13:
                    e6:13:f7:32:80:d2:66:9e:b9:54:ae:94:8d:3f:dd:
                    59:b1:76:3a:1f:1d:30:20:43:9f:90:e4:1a:3b:9c:
                    80:16:8d:b9:b5:ac:df:f9:ba:2d:20:3f:2f:2c:d0:
                    1a:41:24:e5:f9:7f:f6:c2:90:9e:67:cf:83:35:35:
                    b2:ca:f4:53:7e:b4:84:bb:17:c8:f2:05:74:bb:7a:
                    37:f4:29:4e:00:5a:82:e0:48:f2:68:b7:37:e0:ee:
                    75:27:8e:59:a9:58:52:c0:44:a7:08:23:ab:fa:48:
                    dc:11:3f:10:7c:a9:6b:c9:a7:80:f7:32:fc:e7:ea:
                    6d:24:e5:09:8e:42:d6:fd:7e:62:d5:d9:ca:6a:61:
                    6a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:07:29:1D:C4:8A:21:D9:38:2E:CD:A9:0F:6E:1A:13:6C:80:5E:E4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fb2ee3aa-e11c-4fe9-b5a8-bea87c242696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:28d4::/46

    Signature Algorithm: sha256WithRSAEncryption
         ad:c2:90:21:51:2d:21:9a:ca:fe:dc:8d:09:f8:23:77:72:39:
         6d:5b:1b:8e:e6:05:d1:21:01:85:90:ca:af:a2:4a:3d:8c:2b:
         42:4f:b9:ea:b4:ec:78:8b:ee:01:f5:b2:7b:13:d0:9a:95:c7:
         0c:08:c5:0f:85:d1:2b:8f:99:d4:a8:c9:e9:2c:6d:75:79:a5:
         27:93:ee:ef:27:24:ee:9a:22:7e:9a:6c:ab:1f:0b:8a:4c:94:
         0d:f3:cf:50:55:42:c6:ca:6d:a5:20:c9:28:ac:0e:d9:cf:36:
         d4:e4:19:30:29:7d:6c:81:ec:08:10:26:fc:a6:d1:a7:74:f6:
         62:6a:f5:7f:88:30:f2:62:e3:f0:f0:21:97:bc:ed:fd:29:6e:
         d6:52:f3:e1:59:95:64:3f:ba:80:33:c9:f5:c5:a3:06:cd:ba:
         97:87:89:af:ad:42:86:07:73:d4:92:74:1a:49:2e:ea:4d:30:
         b9:62:0b:67:f9:6e:5e:21:7d:e1:fc:8c:62:42:a8:e5:c7:d3:
         3a:e0:29:e0:14:62:5e:9a:f4:73:40:22:df:12:03:2a:f7:95:
         05:4c:35:5a:48:1c:66:07:40:a6:bc:41:6e:1c:63:65:ea:21:
         60:d0:b4:80:38:a0:16:e1:10:79:21:c4:90:60:0a:85:08:5f:
         fb:8a:46:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:15:53 2026 by rpki-client