Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cb43c87-8840-4711-b54b-169e61239441.roa
File:                     2cb43c87-8840-4711-b54b-169e61239441.roa (raw, json)
Hash identifier:          HjlJD2Ue3SsbDYthpuhkuOrQei0wTmeqfkhm81gNAy4=
Subject key identifier:   28:DB:88:93:28:AE:AF:26:90:8E:32:84:FC:3A:B3:9D:8D:D1:F6:EC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       48B7A20105DA611D4DF0F3C2198861A910F5EC4C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cb43c87-8840-4711-b54b-169e61239441.roa
Signing time:             Fri 13 Feb 2026 05:41:35 +0000
ROA not before:           Fri 13 Feb 2026 05:41:35 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3f88::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b7:a2:01:05:da:61:1d:4d:f0:f3:c2:19:88:61:a9:10:f5:ec:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 05:41:35 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=73acd18727565cca22297ec388b0526dfc217c0dcecb6da530483a123b9fe259, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:7a:9d:1c:47:5d:4d:af:c2:57:9a:46:9f:
                    d4:5c:d2:1f:da:4f:65:ff:40:33:42:d9:04:34:b7:
                    7f:ae:43:25:7e:3b:aa:6c:52:f0:b9:12:dc:4f:da:
                    db:87:71:e6:28:13:a3:67:96:3a:dd:fa:ff:bf:c5:
                    10:8e:a7:10:92:36:46:5a:29:c7:75:6e:99:dc:cc:
                    ae:13:a3:71:4c:fe:50:1a:58:5d:64:db:3b:b8:0f:
                    22:9c:50:40:af:f0:39:dc:15:cb:44:ce:b8:a0:62:
                    d2:bd:d4:2a:a7:6e:69:97:7c:51:40:d3:36:c7:04:
                    3b:38:fd:e9:be:ed:2e:13:33:84:72:36:69:65:2f:
                    82:27:be:56:c7:04:5a:db:53:52:1d:ce:8a:24:29:
                    6a:a3:da:d4:11:1b:5e:ee:03:d7:4c:00:a6:75:0d:
                    e8:ad:7a:0a:e8:54:76:53:f1:98:57:ae:12:02:ca:
                    1f:b9:5d:cc:b2:d9:85:d3:6d:d5:b8:21:17:e9:62:
                    f1:d4:34:1a:52:95:72:ca:c9:e5:32:06:25:02:f6:
                    50:ed:f5:41:9f:51:8a:af:d8:5d:bb:71:0d:50:12:
                    b7:cf:59:e3:86:91:76:f4:2b:a8:ea:6e:88:c4:a0:
                    a4:f2:94:26:b6:c5:a4:35:e9:f8:b4:89:c4:ea:4e:
                    4e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DB:88:93:28:AE:AF:26:90:8E:32:84:FC:3A:B3:9D:8D:D1:F6:EC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2cb43c87-8840-4711-b54b-169e61239441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3f88::/46

    Signature Algorithm: sha256WithRSAEncryption
         c0:3f:51:94:b6:ee:20:96:c8:11:96:26:ee:a4:c5:0a:7a:fa:
         8f:da:8a:7b:77:19:de:f2:4e:78:5f:65:f6:eb:2d:2d:68:5c:
         e8:10:11:d3:38:f6:8e:d6:2f:e6:0e:fd:52:61:eb:b8:01:bc:
         4d:34:6b:a7:f8:d6:c0:ba:72:5c:53:b7:74:fa:11:95:6c:51:
         1b:03:3f:cf:f3:15:8a:bf:0d:48:d7:4c:22:8f:e5:80:3e:b0:
         fe:a4:61:04:57:4c:c3:3b:ed:28:4f:27:b6:b6:31:82:6c:e7:
         a7:83:b1:5d:bd:c2:1b:0a:4f:1f:9e:ff:32:61:56:e3:f5:54:
         57:29:ce:f8:e1:2a:73:79:f5:90:ea:31:ac:5c:55:a9:93:5b:
         d5:82:f7:14:22:ba:fb:2c:76:0b:ec:4c:86:93:82:84:18:90:
         05:49:53:3a:b6:4b:fa:82:90:9e:35:87:5d:41:03:af:f8:77:
         11:a3:37:24:44:6d:13:02:bd:e1:0a:08:8a:60:72:c7:86:5e:
         92:7a:1b:50:91:99:86:d9:bd:e7:94:99:c0:06:f5:38:71:80:
         ae:5b:ed:d3:17:11:8f:2e:74:08:2d:84:01:ac:8c:0b:00:6a:
         1c:c2:f1:4d:4d:f0:76:f5:9f:f4:ac:d9:ff:eb:f9:a6:e5:f0:
         45:0d:e8:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:32 2026 by rpki-client