Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ebf668e-b5ae-47ad-9396-f4fe27f88d01.roa
File:                     2ebf668e-b5ae-47ad-9396-f4fe27f88d01.roa (raw, json)
Hash identifier:          N5JmoQeAYH/ijGI7iBIakiDil2RM0Ru/ep2GmclGGjw=
Subject key identifier:   AE:7A:2F:87:62:77:C3:C1:62:93:CC:2B:B7:41:43:C7:4B:0E:46:BD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3472B0236D0F107FFDD0929A5E668BECBA6FEDB3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ebf668e-b5ae-47ad-9396-f4fe27f88d01.roa
Signing time:             Fri 13 Feb 2026 06:50:40 +0000
ROA not before:           Fri 13 Feb 2026 06:50:40 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:347c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:72:b0:23:6d:0f:10:7f:fd:d0:92:9a:5e:66:8b:ec:ba:6f:ed:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 06:50:40 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=1c7ee274336e41780454b64e38929878aaa109f92198d4b2f9cc9666317a3a9d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e5:cc:b9:38:67:5b:31:97:68:91:4c:f4:b3:
                    2f:0a:d4:5b:5c:a8:28:fa:c0:a5:24:66:f6:6f:34:
                    04:a7:7d:8b:28:e9:c7:04:0c:cc:e7:39:f2:11:30:
                    f1:9d:d2:91:a1:b7:ce:8c:36:9d:fd:ab:17:e8:6f:
                    f9:b7:0b:57:57:aa:5c:56:c6:1c:8c:a3:ce:06:76:
                    b4:9f:5c:b8:2b:77:8c:ed:1d:df:a6:43:9e:c3:30:
                    86:eb:45:f6:4d:3b:92:a9:bf:0c:26:fc:6b:6d:07:
                    bf:0d:29:db:ce:9f:68:c2:ab:ed:b6:f3:62:58:19:
                    45:07:82:88:62:db:bb:1f:ac:30:cd:f3:9a:9b:6b:
                    f0:80:db:bc:1a:2b:d1:f7:8e:7a:ff:28:bf:a0:90:
                    bc:db:20:cf:45:94:4b:8e:76:3c:c9:57:5e:b9:1f:
                    0b:af:9a:08:a1:12:ad:e9:04:a4:56:c0:de:58:40:
                    3d:b8:0a:49:4a:c9:ab:2c:4d:65:ac:ca:37:b5:19:
                    91:dd:35:8f:3f:e9:d3:a0:ef:53:2d:bc:d3:58:ec:
                    3e:83:fe:03:84:ed:7f:50:8d:26:10:9e:cb:b1:44:
                    b9:d8:35:e9:ca:8c:df:e3:fe:0e:55:7d:ea:08:9b:
                    ae:1a:2f:da:5c:5a:77:bf:23:7a:da:2e:5c:40:19:
                    7b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7A:2F:87:62:77:C3:C1:62:93:CC:2B:B7:41:43:C7:4B:0E:46:BD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2ebf668e-b5ae-47ad-9396-f4fe27f88d01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:347c::/47

    Signature Algorithm: sha256WithRSAEncryption
         1c:03:89:92:9d:18:79:17:e8:68:89:92:38:d3:56:3c:2e:0f:
         be:6e:30:88:c4:6a:f3:7c:ed:40:4d:f6:d3:ef:84:05:61:1e:
         55:73:f0:4d:9c:69:d0:ed:ea:1a:3e:74:81:e6:60:ca:39:53:
         e4:55:64:71:82:24:07:08:4e:b9:87:b4:d0:95:ce:50:e9:8b:
         33:a2:f0:56:41:32:a7:8a:35:59:96:ef:20:01:41:e5:36:30:
         90:8c:d0:ab:17:e1:6f:23:26:ef:0a:6c:c0:ae:61:b0:1b:39:
         de:ea:a5:7f:14:e6:ef:ec:8f:c6:a8:1d:9b:b9:8d:c5:13:e4:
         3d:66:03:a2:a4:d1:e2:d9:af:9f:5f:7e:3c:02:04:44:a9:c1:
         cb:41:2b:c1:3c:52:92:78:a0:db:8e:38:ae:4b:e8:3b:d1:18:
         38:f6:b9:4d:44:67:f3:6a:9f:c1:25:e3:ee:6c:05:a0:78:a1:
         9c:33:2d:52:b2:36:23:b6:6a:62:7b:ac:e2:f6:bb:ac:ce:c8:
         5a:41:08:43:8e:49:8a:3c:b1:f6:cd:f0:df:9a:67:c0:bc:66:
         76:eb:53:4b:f1:57:26:44:59:cd:f4:65:bf:7a:b5:52:c5:89:
         0a:22:e2:d4:3f:cf:e4:ab:0c:be:0f:39:93:f1:ac:60:e8:80:
         38:19:f3:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:59 2026 by rpki-client