Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04918044-bd6a-45d0-96d2-c749810d9dac.roa
File:                     04918044-bd6a-45d0-96d2-c749810d9dac.roa (raw, json)
Hash identifier:          7OrikUuVTHdAhd1J1T7zp30q7EgSjKN89ZpyXvrWocg=
Subject key identifier:   95:A1:0B:FA:46:17:EF:4E:93:DD:D1:34:3E:AD:7C:8D:B1:29:37:C0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       216D6D05B5671F001D8CF4A01FD12F17C23586BA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04918044-bd6a-45d0-96d2-c749810d9dac.roa
Signing time:             Fri 13 Feb 2026 13:51:14 +0000
ROA not before:           Fri 13 Feb 2026 13:51:14 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2674::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6d:6d:05:b5:67:1f:00:1d:8c:f4:a0:1f:d1:2f:17:c2:35:86:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:51:14 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=0f81a401f43dcc5d7c50598a69360927a5dd297e7bf83f913aa07ff0b9e11b4d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:3f:2c:57:df:8c:d0:f9:81:d0:16:2c:37:
                    e8:4c:0c:5c:ff:4e:f4:7b:2d:e8:6e:9a:dd:d1:b4:
                    71:3d:a4:cd:23:14:80:a5:5b:cc:f8:18:05:c2:ac:
                    31:9a:a9:1f:aa:c1:2d:aa:9e:e7:9d:17:ec:3f:2c:
                    b5:7e:cc:3c:39:3e:ed:1c:68:ee:0f:80:57:c0:a6:
                    7c:5f:f1:1a:78:63:ea:54:4e:16:43:73:73:36:95:
                    b8:c6:0f:a2:ba:a6:bc:01:46:f5:40:2b:99:e5:d5:
                    18:26:bf:70:8d:cd:ff:25:8c:18:59:88:51:89:bb:
                    88:1f:26:a9:47:07:90:f8:a2:b9:d9:2a:36:87:fa:
                    5d:63:e7:8c:93:85:76:15:49:af:eb:fd:6d:ca:a2:
                    fa:83:c8:78:48:39:34:ba:fb:0d:bb:fa:1f:ea:fb:
                    76:c6:f8:51:bc:bd:33:36:a1:43:00:3f:9a:cd:eb:
                    12:fa:32:74:24:23:35:63:4b:ca:93:d4:8f:87:53:
                    a7:23:e8:5c:06:63:01:a9:b5:c2:10:e5:fd:98:4f:
                    5e:0f:4e:fe:d5:6e:aa:28:eb:3a:38:12:59:6c:c0:
                    7e:7d:a5:d2:b0:bf:da:00:3e:33:1d:be:b6:2c:4d:
                    03:bb:db:a8:71:d1:13:ec:83:47:21:43:23:58:f4:
                    61:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A1:0B:FA:46:17:EF:4E:93:DD:D1:34:3E:AD:7C:8D:B1:29:37:C0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/04918044-bd6a-45d0-96d2-c749810d9dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2674::/46

    Signature Algorithm: sha256WithRSAEncryption
         7d:f4:a2:ff:41:f3:42:4d:5e:d5:97:bc:1a:b3:7a:77:ba:89:
         42:ce:c8:b5:ff:6f:6c:93:9d:4e:05:e7:84:a2:f9:63:1f:f9:
         48:18:57:7a:1f:ba:27:70:88:a2:c6:10:46:70:9a:b5:c2:61:
         41:58:6a:c3:cc:6f:6c:b6:80:df:15:c9:c9:41:32:21:e6:1e:
         44:47:e0:e7:9d:49:32:4c:43:d9:bd:9d:0c:aa:fc:ca:7d:d9:
         c4:bb:9f:73:2b:c1:8e:0b:17:7c:ea:4b:57:7f:c5:a2:dc:5b:
         68:c5:9a:76:c3:c0:94:35:a7:42:a6:7d:50:9d:99:a9:16:12:
         06:86:e3:9a:61:12:91:b0:b3:08:3c:f0:90:e4:d9:50:9b:bb:
         26:22:1a:6b:35:72:0e:e3:f6:d5:5f:81:33:b4:fb:9e:1a:5b:
         e1:24:31:78:0b:26:4f:aa:2b:f4:05:52:bc:a1:78:d8:25:c3:
         9e:21:3e:8f:47:c8:7d:8c:aa:5a:1a:f3:f3:23:50:f1:02:5f:
         95:af:94:bb:13:86:78:f9:2d:a7:29:37:85:01:1a:36:8b:c1:
         fd:87:4e:c6:b1:be:9f:2e:0a:66:e1:54:4c:bc:16:c9:0a:98:
         76:86:14:e7:14:f2:2c:00:9d:a6:71:0f:02:df:b6:e0:26:6a:
         06:cb:a4:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:29 2026 by rpki-client