Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c3f5925-1769-4c8a-8e72-4ed2e4ffc97c.roa
File:                     1c3f5925-1769-4c8a-8e72-4ed2e4ffc97c.roa (raw, json)
Hash identifier:          5WXxSJGiIPgOwRefvtrBRRDf0FSBshLUNlEFod6i9qk=
Subject key identifier:   D9:EF:00:1C:15:08:6B:7B:2C:D2:B8:3F:B2:1B:AE:1E:B9:DD:C4:35
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       31F688A299726D3B9BFC30C0AD48F4BE51FE5909
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c3f5925-1769-4c8a-8e72-4ed2e4ffc97c.roa
Signing time:             Thu 12 Feb 2026 03:30:11 +0000
ROA not before:           Thu 12 Feb 2026 03:30:11 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fe0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f6:88:a2:99:72:6d:3b:9b:fc:30:c0:ad:48:f4:be:51:fe:59:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 03:30:11 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=764c3b1fda5f56af163dec85c36b38c5350747a8a1f83d115371644fbdf1df6f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:82:dd:1a:a8:cf:03:02:d8:3e:34:9c:11:54:
                    68:c5:61:8d:b7:78:0f:66:66:53:62:dc:9f:84:61:
                    59:09:f1:d5:f8:82:52:0b:a4:fe:43:13:5f:5e:4e:
                    ce:30:49:f2:61:f7:dd:84:4b:63:b3:39:e7:07:a6:
                    82:85:2e:26:b4:47:f1:b6:b2:26:18:4e:a8:27:0e:
                    dd:80:f4:6b:18:b0:68:49:05:1c:1c:b7:c8:a1:dd:
                    da:1c:fa:5d:40:96:64:13:49:01:aa:c0:b2:15:21:
                    34:63:75:b4:3c:93:3c:5d:39:e6:6d:1b:98:52:97:
                    74:5a:78:3b:18:cd:e1:c3:92:f4:75:08:e2:e6:08:
                    cd:c8:29:05:fb:cb:a0:78:0b:08:5d:70:22:92:17:
                    3e:1c:9c:df:c5:4d:b5:7c:4b:f4:2e:03:15:bf:63:
                    10:24:ed:cd:05:fb:6d:9e:92:f7:fe:d0:a6:f4:a3:
                    de:59:34:c9:d0:4b:2d:cf:ce:52:1b:b8:a0:4a:8c:
                    da:8b:1a:06:53:9b:df:11:b0:18:ca:ab:ab:e7:ba:
                    61:ff:61:f1:41:4e:bb:c3:72:32:1b:7b:3e:84:34:
                    b6:b1:e9:78:65:19:dc:e3:f9:ee:04:e9:2c:cc:a2:
                    ed:10:9f:02:29:3a:a1:f8:98:44:0e:a6:f7:72:6a:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EF:00:1C:15:08:6B:7B:2C:D2:B8:3F:B2:1B:AE:1E:B9:DD:C4:35
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1c3f5925-1769-4c8a-8e72-4ed2e4ffc97c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fe0::/47

    Signature Algorithm: sha256WithRSAEncryption
         1f:63:03:bd:27:47:0c:12:c9:19:e2:b2:b6:9f:bd:52:7b:fb:
         bb:ad:07:5c:b5:58:54:36:25:1b:9d:0d:1a:b5:8d:d3:25:fc:
         5e:8f:5f:1d:41:b8:2b:4f:f0:4f:6c:0c:81:59:c0:2d:91:81:
         27:de:64:e2:23:fa:e1:6b:ef:b5:5f:8b:88:26:ae:20:f4:a9:
         cf:79:ff:a9:02:1d:33:86:16:ed:ff:65:c5:85:a1:d1:02:98:
         3a:f5:b8:b9:58:03:e4:86:7e:9b:7b:6b:9c:db:00:41:4f:90:
         d9:f8:71:74:dd:7d:47:22:cc:19:68:3d:cf:eb:c7:6d:0d:82:
         56:ba:55:5f:7a:30:e1:c7:78:f6:d9:b7:be:fe:59:8b:c9:83:
         e6:b6:80:ff:bd:f1:bc:f6:ad:5d:1f:1b:c2:9e:dd:a5:6e:88:
         a4:78:b2:c8:d7:d3:cf:0c:7f:2d:9b:96:5b:31:fb:44:5b:79:
         6a:7a:8d:ee:0f:8c:4b:4f:a4:f4:f1:75:66:a5:8b:b9:09:79:
         80:bd:f2:17:dd:dc:1e:73:89:cf:2f:7d:7d:f7:eb:0b:87:a1:
         0a:93:c9:50:b4:00:65:6c:43:4f:ad:d0:18:88:f6:b6:d7:b8:
         d2:8a:97:90:b6:48:a8:12:02:f5:66:ea:e0:07:8a:7c:08:a6:
         4a:d1:d3:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:12 2026 by rpki-client