Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/219d2e3a-f721-4ee9-82dc-3f8f4f29c65a.roa
File:                     219d2e3a-f721-4ee9-82dc-3f8f4f29c65a.roa (raw, json)
Hash identifier:          FVtZN/FtcIvG0avUovvsGttpVApB+CeD03pcUaw0+X4=
Subject key identifier:   D7:69:3F:FC:F7:9F:CA:28:5C:1A:5D:C9:6B:DF:D6:31:41:A6:3F:86
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4052524AFCFC2A3204B0C9237FB27A90D4A17F32
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/219d2e3a-f721-4ee9-82dc-3f8f4f29c65a.roa
Signing time:             Fri 13 Feb 2026 03:40:50 +0000
ROA not before:           Fri 13 Feb 2026 03:40:50 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f84::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:52:52:4a:fc:fc:2a:32:04:b0:c9:23:7f:b2:7a:90:d4:a1:7f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:40:50 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=5a634c5e9eb1f83c0d2f7e078174de317f4cee4d146eecd8caa276c9847066d6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d8:93:24:be:0a:60:eb:1f:04:52:c7:5a:c1:
                    3b:17:d6:96:bd:e5:0d:5b:5c:d2:be:12:4a:1a:6e:
                    44:bf:3f:c4:42:b2:3d:e1:42:78:5a:93:fe:80:15:
                    14:b9:f8:75:b7:cf:5b:39:07:1c:b7:80:da:44:65:
                    79:90:dc:81:99:69:20:dc:0c:4b:85:a4:29:79:9c:
                    a9:f1:aa:46:a9:bf:fa:e2:0d:04:82:ff:75:9f:a8:
                    f3:70:09:3f:c4:f7:e8:ad:ba:05:16:35:33:af:d5:
                    45:4d:c4:94:1d:0c:8e:5c:5c:7a:16:dc:06:35:1f:
                    2b:78:79:8d:7c:bd:f5:84:d1:57:43:a5:df:99:09:
                    f7:65:69:a6:d4:8e:03:c2:82:04:83:fb:ff:35:b0:
                    73:64:2a:db:bf:6b:94:b7:72:1d:a7:76:c1:4a:1e:
                    7f:ab:85:f4:bd:8e:18:10:5b:a4:f0:9e:51:35:d7:
                    d6:59:1a:ba:bd:cf:25:44:0b:e7:59:77:91:1f:a7:
                    2f:5b:4e:ee:c0:86:56:c9:0a:b5:c3:e5:1b:46:3f:
                    cb:8e:c9:89:2d:fc:70:95:73:a0:b9:b1:66:35:15:
                    80:1d:00:cb:48:3c:02:6a:71:19:45:0e:22:81:b5:
                    c3:ac:51:6e:1d:69:61:79:e0:07:d8:f4:eb:5d:e2:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:69:3F:FC:F7:9F:CA:28:5C:1A:5D:C9:6B:DF:D6:31:41:A6:3F:86
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/219d2e3a-f721-4ee9-82dc-3f8f4f29c65a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f84::/46

    Signature Algorithm: sha256WithRSAEncryption
         47:63:05:72:ac:e0:8f:27:cd:1b:4b:74:0d:74:f5:7e:99:8b:
         f4:57:86:2d:43:51:4a:75:7c:76:84:c8:6d:6f:55:fe:1b:fc:
         7b:93:d2:8f:49:b0:29:09:42:b0:84:5a:dd:fc:f0:14:c5:2c:
         fd:f5:16:9e:55:ca:47:dd:2b:49:f7:6a:75:ef:b3:3e:b6:57:
         d4:6e:4e:ba:53:0e:50:90:9a:44:71:25:3b:99:39:14:13:a6:
         7e:6c:03:5a:bf:aa:93:31:fc:94:c4:ae:64:26:8c:cb:28:70:
         a3:37:c5:7e:db:63:05:e7:0e:02:25:53:63:67:04:f9:1f:49:
         ef:a8:55:9a:b2:08:bf:60:28:8c:e6:be:9b:ec:ee:a9:4e:21:
         d1:0b:5a:bf:c6:97:5c:24:c8:e7:db:2b:a2:86:56:3e:99:08:
         8a:ff:db:b0:64:56:82:10:a7:44:8c:98:22:47:9e:1f:d5:86:
         5c:5f:9f:fc:c7:13:d4:d4:a5:bc:2a:61:56:23:3d:85:42:f1:
         a7:22:30:39:bb:de:66:88:b8:c1:5e:09:00:52:4f:70:fc:36:
         94:e2:30:45:20:44:7a:70:1b:36:d9:85:8c:57:ea:a5:e7:05:
         e0:90:3f:b4:09:a5:08:16:39:8e:33:b3:48:c9:b8:93:d3:93:
         a3:b7:62:50
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:19 2026 by rpki-client