Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23112429-56e9-4bce-92b8-44814d289ff4.roa
File:                     23112429-56e9-4bce-92b8-44814d289ff4.roa (raw, json)
Hash identifier:          vNRZh8Qaiz34ItM6CO4dVvRsAAiHl43h4lWegXhy0P0=
Subject key identifier:   B5:F4:89:73:14:5F:5E:6D:7B:93:7E:03:9C:82:29:30:76:D5:32:E3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3177432AE0D188F1351DCC148AF62C9B63B3A3B7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23112429-56e9-4bce-92b8-44814d289ff4.roa
Signing time:             Fri 13 Feb 2026 09:50:09 +0000
ROA not before:           Fri 13 Feb 2026 09:50:09 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37a0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:77:43:2a:e0:d1:88:f1:35:1d:cc:14:8a:f6:2c:9b:63:b3:a3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 09:50:09 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=cfcf1c2708ac140abb407dfe08e8741e0a081cf0adca7a5d94f0c6fcfe87539c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f2:fd:f6:d3:32:c4:6f:a5:e3:14:12:0a:24:
                    6d:6b:1a:8b:1b:15:96:d1:89:75:8a:a3:78:d3:ab:
                    f9:98:4f:13:c6:9e:a4:6c:62:b3:a4:2a:75:4a:d8:
                    50:82:46:10:d0:48:3b:99:3c:60:c6:42:21:f0:07:
                    25:a8:05:cc:28:19:6e:e2:3f:e8:73:4e:cb:31:51:
                    62:d7:91:a6:fd:6f:08:40:b4:d2:89:c1:42:07:00:
                    b7:e6:27:29:8d:27:92:03:de:fc:30:11:87:30:7a:
                    02:dd:1a:67:f2:57:c2:d0:c4:12:b7:e5:e8:d6:2f:
                    24:a7:d9:a0:bd:f4:5c:52:4a:6f:6a:68:58:82:29:
                    be:37:28:38:af:50:28:3b:ca:1d:24:39:30:c4:68:
                    03:1f:20:a2:b8:d1:f7:7d:7f:a0:33:30:83:11:94:
                    6f:49:d5:ba:ef:0c:1d:96:0b:6f:f3:2a:6b:55:e2:
                    b6:25:14:ae:21:f8:7a:49:fd:44:36:a1:3a:a6:4a:
                    9a:42:7d:f7:9f:91:3a:14:b6:73:42:f8:4c:e8:7f:
                    5e:c6:0d:d8:9b:34:9d:e8:da:48:1f:fa:9d:0b:50:
                    22:5b:9b:39:45:fe:99:5c:ff:f5:bf:e3:45:39:b0:
                    97:c6:3c:e8:e5:b4:43:a0:60:d6:c7:ed:92:bd:54:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F4:89:73:14:5F:5E:6D:7B:93:7E:03:9C:82:29:30:76:D5:32:E3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/23112429-56e9-4bce-92b8-44814d289ff4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37a0::/45

    Signature Algorithm: sha256WithRSAEncryption
         96:b2:10:55:b5:dc:fe:a6:47:ad:bf:94:90:60:f9:6f:9b:d5:
         c5:b9:45:34:ca:22:40:a8:cd:7f:22:ee:7f:21:8d:09:61:df:
         a6:d8:fd:81:26:9a:71:a9:1b:00:43:a6:6d:2c:1d:fb:20:7c:
         5e:dd:4f:1b:7b:cd:fc:84:db:67:e8:3b:b8:cf:4e:a0:f4:ee:
         b6:de:87:c2:50:96:ac:c3:f6:9e:41:fd:a2:d2:de:d8:9b:e2:
         9b:3f:68:88:2b:fe:3a:c0:be:bc:57:19:1a:90:37:2d:6b:91:
         ad:b4:51:87:98:ab:39:ba:17:63:7b:46:60:93:91:80:88:42:
         5f:7a:31:4b:19:47:15:98:f9:bb:b4:55:f1:7f:26:66:9b:29:
         3c:f9:04:ce:c0:7e:67:a2:e5:e2:6c:9c:01:1a:a4:1e:1b:d8:
         01:7e:7a:bc:fe:32:ca:f6:2b:4b:92:79:6b:f7:67:4d:4f:d0:
         24:97:ca:66:2f:a1:6f:02:65:56:03:07:91:39:57:a1:c4:4a:
         2c:59:ac:9f:4c:dd:ae:17:5b:51:e0:f6:20:0a:1a:9c:41:c2:
         11:00:d8:f9:56:f9:b3:29:4e:30:64:6b:3b:e8:f9:b3:89:77:
         e7:97:53:77:95:23:15:03:dd:4f:aa:33:f1:5f:8c:0f:62:2f:
         3b:3d:76:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:04 2026 by rpki-client