Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/246d20fc-89eb-4e3b-95fd-ba9bbbca0e76.roa
File:                     246d20fc-89eb-4e3b-95fd-ba9bbbca0e76.roa (raw, json)
Hash identifier:          QVbLv3CiU+xDKd/tWBNsheSCrAO4gtLsVK1Md/ezZ4c=
Subject key identifier:   07:B5:04:48:B0:D0:26:30:96:2A:9B:40:F5:93:BE:2E:35:0D:EB:41
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       37FF0CD80D0C842D5DA3897055BB4445C30203BD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/246d20fc-89eb-4e3b-95fd-ba9bbbca0e76.roa
Signing time:             Thu 12 Feb 2026 02:10:05 +0000
ROA not before:           Thu 12 Feb 2026 02:10:05 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ce4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ff:0c:d8:0d:0c:84:2d:5d:a3:89:70:55:bb:44:45:c3:02:03:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 02:10:05 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=04f1d876ef6da9c190ba331962d566e9e328974acbdfda3093883ff6929c9b0c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:5e:52:8e:65:5c:34:16:eb:b0:5a:79:5b:
                    c0:80:53:52:0c:14:f6:4e:5e:c4:1b:2a:89:15:d0:
                    17:15:4a:63:9a:98:04:2c:36:fd:ff:a8:17:4f:10:
                    c7:f3:ed:ee:d5:66:d9:59:6d:95:dc:7b:bb:07:ab:
                    38:9d:4a:ae:bf:15:ea:19:f7:aa:e2:97:21:40:a7:
                    c5:13:cf:3d:23:0f:d2:b5:db:b9:03:40:c7:58:c9:
                    a3:33:1c:eb:4a:5a:10:8b:e6:78:62:f3:d4:1b:e1:
                    38:e2:6f:45:8e:24:e2:bb:25:90:db:2c:c6:5e:d3:
                    cf:23:cf:cf:75:f9:c4:f9:06:67:57:43:21:90:50:
                    d7:fb:d6:31:13:59:2e:7d:48:e0:b8:15:04:3f:80:
                    f7:15:32:15:66:96:82:ca:e0:8c:ef:54:4b:43:d4:
                    70:3a:95:2e:6c:5e:02:0e:76:dd:64:80:d0:74:93:
                    04:ea:43:44:1f:cc:69:78:12:b4:ea:b5:d2:7c:f6:
                    df:3d:0f:be:2f:b4:16:d4:4d:89:11:0d:cc:f7:1f:
                    ad:94:98:77:3d:1f:e4:10:b0:43:7c:de:43:67:3c:
                    17:a3:0b:69:e4:47:8c:c0:d5:c5:1b:18:aa:99:87:
                    f5:7c:db:21:33:57:07:d5:12:20:0b:b7:a7:4b:98:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B5:04:48:B0:D0:26:30:96:2A:9B:40:F5:93:BE:2E:35:0D:EB:41
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/246d20fc-89eb-4e3b-95fd-ba9bbbca0e76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ce4::/47

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:03:cd:d2:a0:a0:8b:d7:e6:a6:27:8e:a6:d8:6b:8c:55:
         a3:2f:1e:f4:ca:25:a6:2c:88:95:cd:b7:1b:08:13:8d:b3:ec:
         e9:27:e1:6d:41:b9:c0:e4:05:d8:aa:e3:2b:13:e3:0e:83:a9:
         7f:45:ce:0d:cf:c8:2c:fa:48:20:55:89:9d:cb:43:3c:73:9e:
         d3:fc:98:11:4a:c6:5a:9a:e7:ad:02:9c:d2:9f:52:c0:a6:0b:
         6f:1f:54:41:27:21:c4:c7:5d:b0:b1:5b:4d:c7:74:de:a8:fe:
         68:85:9c:11:de:4e:56:4d:29:ee:ee:ce:88:3d:8f:7b:bc:31:
         1f:ea:aa:39:08:c9:a9:de:d7:6f:ef:77:88:09:53:41:fd:ae:
         8f:b0:a0:b8:ad:5a:ec:91:fe:78:c9:d7:cc:f4:d6:20:e6:3d:
         49:d4:eb:88:89:e3:80:ee:c7:94:cd:8f:3a:fe:7e:cc:0b:84:
         d2:90:6b:ed:bf:0c:c7:eb:5b:c8:1d:75:d3:a2:8d:98:bb:41:
         a5:ce:03:7f:fd:9e:1f:85:ea:9f:60:09:3b:fd:49:30:d6:d5:
         c4:51:cf:61:b0:88:09:0f:68:2b:4c:80:5a:bd:3a:df:61:01:
         5c:15:62:22:e8:b8:c5:ea:18:14:36:ea:46:26:2f:09:d2:59:
         d3:a0:a2:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:02 2026 by rpki-client