Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/14aacdc2-9df1-4231-8ca1-87f1ac9d8457.roa
File:                     14aacdc2-9df1-4231-8ca1-87f1ac9d8457.roa (raw, json)
Hash identifier:          SC/KFZYk4jT8y6at2YhSfGGFFTN1ymj7HgoAuWAvPyk=
Subject key identifier:   0C:BE:15:FE:B5:BE:CD:5B:BB:DD:EC:47:83:E0:AB:C6:BC:13:58:29
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0D427A4191F72A19437887F1E836FF6B7BBCB1DB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/14aacdc2-9df1-4231-8ca1-87f1ac9d8457.roa
Signing time:             Fri 13 Feb 2026 11:00:59 +0000
ROA not before:           Fri 13 Feb 2026 11:00:59 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:af00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:42:7a:41:91:f7:2a:19:43:78:87:f1:e8:36:ff:6b:7b:bc:b1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 11:00:59 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=24c95bec58438c55828134359404b83e48ac2fbfcefa06883f7af7d3be299d8e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:93:4c:ac:0c:64:a4:9c:d8:b9:70:db:75:
                    03:a7:00:5a:fa:8a:b8:ca:75:5f:a3:13:95:02:ca:
                    56:78:29:5b:5e:eb:65:03:7e:91:6c:b6:40:12:01:
                    49:39:84:16:04:0f:bf:88:46:04:5b:e4:cc:44:04:
                    32:77:1b:81:76:1c:ad:3b:33:08:c2:21:a1:73:a8:
                    5c:f2:bc:f9:d0:da:00:7f:8d:7e:89:d0:85:9b:85:
                    6e:38:71:36:4b:e8:f3:16:4b:53:82:15:d2:34:92:
                    47:18:8e:d3:64:c9:3d:a2:6d:33:68:da:1f:2a:3c:
                    10:a3:9c:d0:a4:76:8d:af:a6:1a:c4:64:3b:d5:fb:
                    30:5f:f5:37:31:ae:b3:d4:14:25:c6:44:ce:a0:51:
                    e6:9a:3b:2b:e4:b0:96:a4:ed:f0:8a:9c:89:c7:e4:
                    da:48:f9:ab:da:d8:25:da:5b:1b:1f:b6:a3:22:de:
                    48:91:da:52:04:f3:73:9e:ac:16:c3:4a:92:1d:ca:
                    a9:70:2f:b0:4d:a3:a6:0a:ed:00:3e:ee:53:0a:e7:
                    b1:22:2d:bc:05:c3:cd:d7:4e:f7:2c:95:8c:16:63:
                    58:64:00:38:b0:d2:10:03:6c:e9:e9:f8:34:df:db:
                    88:aa:b4:d5:ae:36:7c:7d:7a:50:d7:fb:92:8c:fc:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BE:15:FE:B5:BE:CD:5B:BB:DD:EC:47:83:E0:AB:C6:BC:13:58:29
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/14aacdc2-9df1-4231-8ca1-87f1ac9d8457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:af00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:d1:ef:bf:17:37:ff:80:93:d5:16:7d:13:3d:82:25:aa:54:
         fc:04:b8:84:97:05:8d:28:7e:ab:17:13:dc:aa:21:ec:d4:c0:
         ee:67:ce:d1:af:c3:c6:f1:12:7c:c7:a1:b2:73:92:ec:46:d0:
         3a:34:ee:d8:cb:03:92:d4:8d:ea:91:61:e8:84:15:3b:79:2b:
         03:a2:09:6f:50:0b:fb:84:9d:4e:05:42:b3:ee:c0:b7:07:61:
         7c:b5:ba:91:be:6b:5d:05:89:64:e6:6b:6b:d1:ae:1a:68:18:
         d5:ff:ae:a6:40:7a:cf:e3:56:f4:ba:de:2b:41:a7:5f:28:a1:
         d1:2a:e3:d5:e6:61:90:ed:6f:a5:b3:bd:37:6d:24:3a:5d:61:
         ca:ad:cd:49:bf:cb:c3:63:7e:45:7d:d3:f0:45:f6:58:40:be:
         48:ae:e0:6a:ac:36:27:7d:55:20:9a:8d:3d:41:c2:e8:11:ef:
         7f:d9:69:f3:4b:38:50:76:2a:46:c3:8f:28:98:c3:d5:bf:90:
         40:83:2f:a0:62:9c:2f:c8:45:5b:a9:bf:da:a5:36:77:91:8f:
         61:2a:64:8f:b1:5b:f6:68:7a:4b:7a:fa:1f:68:2e:da:a6:12:
         ac:65:db:d0:57:a6:79:0a:d2:c7:a7:f3:db:c4:fe:ca:f5:68:
         c7:dd:3b:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:10:20 2026 by rpki-client