Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22a5ae26-12f2-4699-bd04-0153bd88a2d2.roa
File:                     22a5ae26-12f2-4699-bd04-0153bd88a2d2.roa (raw, json)
Hash identifier:          UR/w4LOHASCX6BzvyeyBkkQnSJz2//EeJgJbuXSKxJI=
Subject key identifier:   D5:B2:54:FD:AA:0D:A8:7B:7D:C6:3C:AB:CF:6A:89:91:3B:3A:35:0B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7C7D7980C0FB659546919240EA3881FED8BB0C6A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22a5ae26-12f2-4699-bd04-0153bd88a2d2.roa
Signing time:             Fri 13 Feb 2026 03:30:36 +0000
ROA not before:           Fri 13 Feb 2026 03:30:36 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:27a0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7d:79:80:c0:fb:65:95:46:91:92:40:ea:38:81:fe:d8:bb:0c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:30:36 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=0ea8eaecb0f881f8c0b0691754f1e14e19d54fdc1a049be4a872ac780a38c1f3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c1:b8:50:8a:91:b3:52:0f:c7:b1:00:75:81:
                    1f:2b:fe:ce:30:94:0f:47:23:af:dd:51:99:0c:e5:
                    89:d2:64:48:b5:37:f9:c0:31:ea:72:95:1f:94:5a:
                    64:f8:3a:53:40:65:0d:11:a2:8e:81:83:d2:a1:74:
                    3d:cc:85:69:03:c9:31:1f:e7:cf:25:6b:0f:a6:d7:
                    00:05:3a:35:5e:0b:49:92:8d:52:63:25:bc:e1:fd:
                    b0:92:ba:3d:76:1a:45:f7:4a:9b:2c:b0:46:77:c1:
                    a4:5e:4e:4c:6d:be:43:0a:7f:a9:28:51:33:24:03:
                    06:59:3a:93:36:96:76:82:5b:25:d6:42:fe:8b:10:
                    bb:de:48:7f:3f:04:fc:5c:21:6e:c9:7f:96:10:36:
                    34:69:03:7e:3d:22:f6:57:4c:c9:2f:50:4c:b6:29:
                    ac:ad:53:52:af:0a:f8:da:89:ba:6a:ea:98:3e:01:
                    12:21:dc:ce:c0:b1:20:7f:a9:a4:29:1f:99:ef:db:
                    5b:46:27:c8:1a:0f:05:d3:da:eb:d4:84:28:a8:55:
                    dc:82:77:ad:93:f1:f4:f0:da:c1:0b:1b:67:b7:1a:
                    9e:ee:7a:61:db:a8:b8:f5:0b:3d:3d:f5:a1:45:a8:
                    c2:ae:f5:4e:e9:9b:b7:f9:39:2e:bb:1e:a0:62:a3:
                    a7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B2:54:FD:AA:0D:A8:7B:7D:C6:3C:AB:CF:6A:89:91:3B:3A:35:0B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22a5ae26-12f2-4699-bd04-0153bd88a2d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:27a0::/43

    Signature Algorithm: sha256WithRSAEncryption
         b6:a4:4d:90:6d:3a:4c:2d:db:9d:08:54:46:bf:bc:90:6b:18:
         9f:df:43:14:c1:d1:ec:70:5a:e6:58:e1:e9:a9:f4:61:95:06:
         e0:0a:46:60:6b:20:17:1e:66:6f:28:3d:f3:51:dc:de:d8:fe:
         64:9f:35:f6:b5:4f:37:62:fe:06:78:f8:cf:e9:e0:7a:04:5b:
         79:38:18:a3:e3:16:a2:49:9b:5a:c5:9f:da:a8:fe:9e:fd:51:
         8d:5d:2c:4f:8e:83:e7:6f:bd:69:ec:19:f4:3b:9b:f8:94:70:
         8c:e4:ef:a0:66:98:da:56:10:b6:23:4a:04:27:d2:f6:a5:0e:
         46:a6:7d:fd:61:e8:88:fd:08:a4:f1:7e:30:78:34:b7:02:b9:
         31:58:10:8d:c0:5e:c2:ba:af:dc:ff:f2:30:67:1b:45:70:3c:
         5d:04:15:22:ed:f1:52:04:ad:1f:89:12:3f:c2:03:66:18:a4:
         71:d0:4e:f4:c4:a2:d9:d1:45:9a:0d:d1:1d:8e:f0:68:69:47:
         bd:73:93:34:de:3d:8c:32:0e:26:8c:d2:fa:43:07:0e:2c:90:
         5c:26:45:73:25:c7:48:56:d7:8b:2b:22:01:c2:07:81:96:1e:
         41:1e:3d:3c:23:87:78:0e:6e:c2:62:d9:11:60:0e:4a:ac:5b:
         36:8d:b7:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:46 2026 by rpki-client