Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ffec71a6-d53e-45c6-bfc4-602408504574.roa
File:                     ffec71a6-d53e-45c6-bfc4-602408504574.roa (raw, json)
Hash identifier:          CjW1nDQE7t5DP5B42S6pmOD6l3X/EG7laeQSk8wCliI=
Subject key identifier:   0B:79:B4:6F:A2:96:D5:10:25:02:13:B0:80:3B:12:FD:76:92:13:90
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       785D782BBD53634A94777767872AB8867D3E748F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ffec71a6-d53e-45c6-bfc4-602408504574.roa
Signing time:             Fri 13 Feb 2026 04:41:44 +0000
ROA not before:           Fri 13 Feb 2026 04:41:44 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3fa0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:5d:78:2b:bd:53:63:4a:94:77:77:67:87:2a:b8:86:7d:3e:74:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 04:41:44 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=af3f8483d50df1da3c8c8117fc8b22d9fa3eabd6c0e5af3d3de4da9aefd5f58f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:39:a7:0e:62:19:32:64:02:30:8f:69:d0:13:
                    9b:b6:ad:41:6f:81:da:f0:f0:0d:2e:8b:da:7a:d0:
                    2c:b3:e6:05:9e:ec:f8:c5:fa:9f:d9:30:99:61:25:
                    5d:f1:cf:29:c4:68:46:a5:9e:07:c2:b3:88:c5:94:
                    ef:44:78:a9:42:37:57:3b:35:21:20:c9:50:c9:8b:
                    71:42:0f:6f:b2:a7:ea:b4:d0:ef:02:02:5a:cd:97:
                    d7:ee:41:d5:68:9f:54:87:60:2b:03:04:bb:33:88:
                    61:33:87:02:d0:fa:ff:5f:64:8a:5f:63:86:99:31:
                    db:5b:e6:d4:7e:fe:e5:1f:aa:e1:99:9e:1e:3a:d3:
                    87:08:fd:ae:2f:09:ac:54:f7:31:e1:2b:0c:cc:02:
                    8d:97:64:72:b0:ab:fb:e3:3a:8e:d7:0b:8c:3a:bc:
                    84:fc:29:6d:e7:ff:a6:f4:df:4a:40:e8:ea:e2:59:
                    da:2e:e0:64:6f:12:00:c0:85:3f:15:59:ef:8a:2d:
                    44:75:13:19:f2:d1:f1:16:07:5e:93:59:5c:23:e3:
                    98:32:b2:be:be:97:67:48:b8:c2:1c:83:0b:99:aa:
                    1f:dc:d8:2f:cb:d9:ad:95:b6:01:13:12:ec:c4:49:
                    4a:01:24:b0:1e:f5:35:53:9b:5f:0f:58:75:34:70:
                    45:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:79:B4:6F:A2:96:D5:10:25:02:13:B0:80:3B:12:FD:76:92:13:90
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ffec71a6-d53e-45c6-bfc4-602408504574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3fa0::/43

    Signature Algorithm: sha256WithRSAEncryption
         01:b7:63:e9:bc:34:5c:02:c2:ad:d6:4b:cf:7f:98:5f:f9:b1:
         58:ec:b7:5a:22:80:40:1c:81:a4:8c:f4:7a:9b:64:ed:14:3d:
         7e:21:93:1f:d9:37:87:36:a0:fc:e0:73:a3:49:29:d6:1b:ba:
         df:e9:6a:54:92:bc:de:1d:8a:3d:c4:d4:84:49:ca:91:b9:b6:
         4a:26:e9:86:27:d3:70:57:d1:f1:d6:d9:d4:12:82:49:80:13:
         77:2f:47:36:9d:10:54:39:cd:b2:17:ab:93:e6:03:e7:40:13:
         be:68:d8:76:63:db:36:5b:49:3e:2a:f7:a0:c1:16:00:38:05:
         d4:62:45:aa:81:c9:ff:ef:7a:06:72:a2:b2:63:af:1c:86:1e:
         26:83:26:69:85:b1:39:00:20:6c:01:93:ef:b0:78:7c:53:a4:
         9c:aa:69:66:c5:a9:49:b8:15:d8:6f:c6:96:47:5b:da:59:63:
         81:e7:1e:ac:63:0b:de:94:d0:ca:2b:a8:a8:40:bb:bc:b8:9a:
         9e:9f:e9:7a:9e:d3:ec:59:af:da:f2:f8:2c:5c:82:01:e6:a4:
         e3:5f:fc:ea:04:06:23:ad:b8:6d:03:d9:33:e3:6f:9d:2e:71:
         df:9e:11:d4:02:be:e0:0d:8a:51:62:15:39:19:45:ae:d3:23:
         d4:99:35:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:56 2026 by rpki-client