Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17d1db05-3759-4159-949d-96ae4a0b7294.roa
File:                     17d1db05-3759-4159-949d-96ae4a0b7294.roa (raw, json)
Hash identifier:          ZJvzj+0FORuUI7s2YuyzvGLMTmgX5NCIsFkCzfK0FHo=
Subject key identifier:   2C:58:B3:1B:32:41:D1:33:F6:71:78:68:DC:54:54:91:78:D2:CB:DE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       69BB2A3AE1991FDB45EB5403520E0D73D148ABA3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17d1db05-3759-4159-949d-96ae4a0b7294.roa
Signing time:             Fri 13 Feb 2026 07:41:16 +0000
ROA not before:           Fri 13 Feb 2026 07:41:16 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38f0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:bb:2a:3a:e1:99:1f:db:45:eb:54:03:52:0e:0d:73:d1:48:ab:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 07:41:16 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=ff2d542f6d81b086b276383e52a16803c6acb9f2436a44e3eddc288cebb97381, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:65:ed:5f:9c:16:a6:0c:9e:5f:2c:46:ce:
                    92:74:7c:84:ba:0f:ea:1c:bf:50:ff:e0:3e:7b:e6:
                    32:28:cd:3e:83:db:1c:b2:65:20:12:21:9a:2e:56:
                    49:de:b9:40:e1:27:e7:bf:d2:f9:98:44:e3:5a:ea:
                    b9:bf:90:1f:6d:76:a5:77:dd:06:f0:43:e5:e0:4d:
                    51:a0:5e:9f:c3:f5:8e:7d:6a:1d:ca:3f:d0:96:a1:
                    2b:ba:ae:2c:53:38:e2:0a:d3:2c:71:f1:a0:a7:2f:
                    53:17:27:8c:90:d5:f0:19:ba:a4:c5:cc:8b:ff:da:
                    26:66:94:f4:13:cf:32:e9:88:d7:25:d7:bd:23:ae:
                    d5:41:d6:2f:22:d8:6a:87:bb:20:ff:19:b6:24:f5:
                    d5:bc:fd:6d:fe:d8:be:bd:0f:05:9a:b0:1f:9c:15:
                    fd:d4:c2:c2:92:2c:e9:f4:d9:31:4a:98:7a:e0:8e:
                    d6:af:d1:cc:2d:27:47:ca:df:b6:35:16:25:bc:0a:
                    4f:3c:35:9f:22:73:19:d5:97:a6:d6:2f:9b:f4:f4:
                    ac:2e:b1:d7:d6:20:cf:b2:a0:64:45:fe:91:06:96:
                    0a:aa:a6:47:8c:7b:29:f3:ef:6e:20:e3:f6:95:fc:
                    34:e7:7c:60:75:bb:86:37:3c:88:10:65:f9:eb:e6:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:58:B3:1B:32:41:D1:33:F6:71:78:68:DC:54:54:91:78:D2:CB:DE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/17d1db05-3759-4159-949d-96ae4a0b7294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38f0::/45

    Signature Algorithm: sha256WithRSAEncryption
         43:e9:1e:ba:ce:04:2a:18:e0:24:7a:f9:80:ad:18:0f:d3:d5:
         1d:ae:7a:c1:1f:ae:3d:f8:8a:64:a8:ad:bd:96:cc:cc:e8:02:
         ea:48:39:6b:00:15:3b:58:09:01:55:fe:0b:94:40:c2:fc:08:
         b6:71:6b:0e:2a:74:d0:b3:ea:15:08:f1:4e:84:b3:5f:26:74:
         21:bb:1f:f7:14:00:d8:e1:ac:4b:60:85:09:4f:87:32:e4:64:
         72:48:50:6e:00:cc:b1:d0:e4:fa:cd:fe:ae:06:c7:ec:94:fe:
         68:97:5c:3f:62:84:5c:f1:a9:98:9f:08:10:e4:ca:b9:25:43:
         ae:0b:8b:a2:af:82:79:12:af:c7:81:ff:b6:41:c9:36:d5:6e:
         ef:86:a2:1b:90:03:b6:ad:08:d8:91:dc:51:0d:33:ea:b0:e2:
         a2:a1:97:61:02:5e:a7:d7:2d:c3:df:22:ca:2e:17:f0:e0:4f:
         1e:2b:7b:b9:d0:87:23:e1:3b:cd:07:17:1d:36:dc:8f:74:d0:
         d1:22:bb:3f:a5:45:0d:1e:f1:cb:b1:9c:cb:30:75:49:ea:92:
         39:0c:08:38:47:56:a2:91:34:f9:c0:5e:53:30:40:d6:ff:68:
         8c:e6:f0:6c:18:9e:d5:70:ef:f1:71:30:ef:8e:73:c7:ad:c3:
         b6:64:73:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:37 2026 by rpki-client