Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/12659afd-9793-45cb-add9-17c3ac16226c.roa
File:                     12659afd-9793-45cb-add9-17c3ac16226c.roa (raw, json)
Hash identifier:          ZozbiGNHc4w0KdiYAU0ASnogjhw9vVzgLzed1UKazoQ=
Subject key identifier:   B5:E0:0E:A7:F5:90:68:D0:ED:D4:1F:7F:0D:FB:3B:E8:7C:20:6E:7D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3571289DE933A625559F5CABB73813491971EDE2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/12659afd-9793-45cb-add9-17c3ac16226c.roa
Signing time:             Fri 13 Feb 2026 01:31:59 +0000
ROA not before:           Fri 13 Feb 2026 01:31:59 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2cf0::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:71:28:9d:e9:33:a6:25:55:9f:5c:ab:b7:38:13:49:19:71:ed:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 01:31:59 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=8d95e09c2f26677dd065a972a18767d20248b73acf186eef3885c6b274a8f733, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d7:a6:1e:da:61:6b:4a:4d:52:16:cb:f3:26:
                    06:18:88:66:75:bb:08:91:5c:c2:e4:e9:b4:ae:6f:
                    65:2f:08:93:c0:71:18:83:9d:c1:63:66:24:c1:5b:
                    f3:5a:15:df:34:1d:1e:19:59:57:a2:fb:49:cd:d0:
                    1b:0c:8f:b2:71:b9:8b:71:1f:f1:d6:f4:8a:bf:30:
                    84:37:7a:79:9b:34:04:7d:5b:0b:a1:87:89:e0:8c:
                    d3:1c:e8:9e:d0:29:9d:5d:cf:be:3c:68:fd:be:b7:
                    00:b1:34:72:73:03:01:03:a9:17:c4:7c:09:5f:7d:
                    c8:74:1c:10:83:c5:40:d8:d0:71:7b:2c:24:09:29:
                    6d:70:af:b6:08:39:90:09:e6:8f:83:cf:4a:5f:54:
                    8e:89:22:ce:bb:cd:57:94:0c:5e:4e:a8:67:82:61:
                    d0:6e:6d:64:b1:5e:d3:05:2c:ce:a9:05:cf:6a:ae:
                    3c:bb:31:07:34:f7:d1:ad:1f:da:3e:99:ec:1b:01:
                    51:21:02:24:a6:8c:d7:ae:d4:cb:04:16:e0:00:d0:
                    25:3e:24:51:16:e5:df:58:44:6d:3c:74:12:c8:98:
                    43:84:e8:91:c0:51:61:42:77:0f:c6:99:b3:ca:cf:
                    17:bb:7e:84:7e:4f:f3:9a:8b:77:df:ab:e5:d1:e2:
                    00:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E0:0E:A7:F5:90:68:D0:ED:D4:1F:7F:0D:FB:3B:E8:7C:20:6E:7D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/12659afd-9793-45cb-add9-17c3ac16226c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2cf0::/46

    Signature Algorithm: sha256WithRSAEncryption
         75:35:35:cf:65:76:00:9d:69:bd:36:19:ba:7f:0f:1c:40:c0:
         2a:e2:96:ce:54:58:46:02:d9:97:cb:6d:a1:77:f9:52:6f:cf:
         f2:af:24:a8:0b:d7:bb:69:d8:9f:e6:92:5e:f7:8e:d3:07:39:
         92:37:e5:64:f1:67:2b:30:fc:60:50:36:43:ca:76:e3:63:86:
         b2:41:38:8b:33:7c:7a:66:ba:98:4c:08:92:81:45:2d:cb:0d:
         30:15:65:24:b0:62:91:a6:1f:6f:dd:84:3a:7f:52:bb:54:88:
         ae:90:fb:d7:d1:20:69:2f:b2:ea:d4:ff:8e:60:cd:80:07:34:
         fd:54:5b:ca:92:d2:d8:e3:9b:56:0c:3e:2e:c6:dd:28:cd:30:
         32:f6:fb:11:79:6e:8d:bf:b8:78:9b:e8:99:b8:8c:fb:ef:09:
         f5:83:e2:d3:d7:6a:b8:b6:a1:6c:57:96:2b:32:33:36:db:e3:
         ae:be:4b:9c:1a:17:63:5d:f9:b6:c9:92:74:7d:5c:ec:78:2b:
         90:7d:63:24:ee:bf:f8:45:c0:2c:35:4e:5c:f7:a1:8b:4c:fb:
         83:4a:22:12:29:3c:db:b0:59:29:cf:79:8a:91:2e:64:70:60:
         5c:99:30:0b:77:46:9f:40:90:f9:74:63:26:58:e3:dc:86:f6:
         e4:ad:61:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:55 2026 by rpki-client