Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28b3fcc0-e17e-43ca-b69f-332df4faa581.roa
File:                     28b3fcc0-e17e-43ca-b69f-332df4faa581.roa (raw, json)
Hash identifier:          X0xGyBZUn22vUZDlAKYEPM9iesYA0zpYk4ORDXiqiGc=
Subject key identifier:   A6:83:5A:74:54:49:38:89:E0:1B:DB:2D:08:73:3C:34:9A:09:FA:93
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2D6E6B949F3CADF144DF967CE067FF96FFA474EF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28b3fcc0-e17e-43ca-b69f-332df4faa581.roa
Signing time:             Fri 13 Feb 2026 11:51:18 +0000
ROA not before:           Fri 13 Feb 2026 11:51:18 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e90::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:6e:6b:94:9f:3c:ad:f1:44:df:96:7c:e0:67:ff:96:ff:a4:74:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 11:51:18 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=2f25fea7cdd74009dbf3402d34c1f3450c120c1f7e431756ae8925684c3b0be3, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6c:33:dc:c5:08:a7:3c:8f:b4:5f:75:12:35:
                    5b:41:f7:2c:bf:9f:a9:72:f6:b8:22:6a:d2:f2:dc:
                    32:0a:95:5c:46:5e:cd:23:08:fb:88:c9:47:3f:35:
                    f2:22:9a:ed:59:59:c4:c8:ae:44:ba:f6:a3:aa:7d:
                    b0:c3:81:6c:94:4e:0e:46:00:c4:c7:84:b1:d2:b0:
                    12:7a:37:07:07:4e:73:22:e6:e1:b8:5a:ee:49:c8:
                    d7:3a:05:ee:23:bb:6c:b6:f5:66:ec:72:8c:ec:34:
                    09:d5:e5:60:b7:29:63:f7:cf:99:f1:2c:7d:90:cb:
                    06:17:a3:6d:a4:9e:b2:ea:6e:93:1f:3a:19:bf:fd:
                    c9:fe:a2:e9:14:b4:3b:38:07:68:f0:c3:66:a4:41:
                    b6:10:3e:82:e2:50:80:36:68:4e:5b:40:2d:85:34:
                    f9:f3:36:f5:4a:32:7c:ab:d8:40:70:bd:f3:64:3c:
                    78:43:8e:f2:81:55:9c:54:02:b6:a8:24:4d:93:65:
                    fe:5c:43:0e:26:cc:34:e6:38:57:1f:7e:d7:f0:94:
                    1d:65:25:47:da:97:75:2c:d3:37:44:41:12:5d:eb:
                    d2:b8:23:3d:f3:af:6b:0c:c2:d8:5b:07:6e:0a:dd:
                    1f:1c:c3:d2:82:c5:ae:36:2b:37:59:bf:3c:25:20:
                    59:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:83:5A:74:54:49:38:89:E0:1B:DB:2D:08:73:3C:34:9A:09:FA:93
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28b3fcc0-e17e-43ca-b69f-332df4faa581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e90::/44

    Signature Algorithm: sha256WithRSAEncryption
         0d:f9:98:54:3e:0d:34:57:b9:25:b9:0b:f4:f2:62:6d:2b:57:
         1f:3b:75:cb:c9:5c:24:e1:af:e4:1b:cd:50:66:58:2e:3b:af:
         41:c8:28:9c:8a:c7:23:87:e5:4d:3c:ec:70:d6:18:8b:9e:45:
         66:cd:74:7b:c9:84:82:80:28:07:8a:28:8c:e3:6d:fd:36:38:
         8a:75:6b:4d:df:2e:30:e3:a3:5c:fc:5b:91:de:2a:2d:cf:a8:
         82:04:ca:a3:fd:4a:f9:26:31:54:df:07:d9:da:58:0d:48:2a:
         3c:89:ea:4e:84:32:8c:11:40:fb:2f:69:2c:7d:13:ee:c4:7d:
         3f:6a:a1:e3:8a:2d:b8:4c:04:39:4e:85:5e:a6:43:fe:80:56:
         68:9a:a9:e2:0b:62:03:4b:a9:ed:39:30:e2:8f:d6:20:57:1c:
         94:58:2a:f9:a1:b4:f1:13:35:72:26:86:45:d0:fe:28:f9:00:
         7d:77:cd:14:2d:55:da:62:da:4f:4b:41:40:cd:af:0b:d3:cb:
         21:0c:8a:21:a6:4d:5b:63:9e:56:38:4d:5f:ca:55:99:43:5e:
         47:39:ca:7f:1a:9e:f2:73:d5:06:38:88:cb:c2:16:30:a8:50:
         2c:91:38:64:6b:9d:1f:1a:4a:08:b8:2d:ab:4b:8a:5a:22:a1:
         89:57:56:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:00 2026 by rpki-client