Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33570042-1c53-4d52-96cc-9eda450d6ca7.roa
File:                     33570042-1c53-4d52-96cc-9eda450d6ca7.roa (raw, json)
Hash identifier:          tITk2ZHOxlAhklGcw+aRLsPaIMvQDV4ylYlKFqTuDF0=
Subject key identifier:   CD:54:4D:83:17:56:20:00:10:B0:4A:C3:69:74:4B:9B:05:2D:2B:04
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3CA81454779427243B9A440F02385133E70064EF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33570042-1c53-4d52-96cc-9eda450d6ca7.roa
Signing time:             Fri 13 Feb 2026 03:31:05 +0000
ROA not before:           Fri 13 Feb 2026 03:31:05 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:24b8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a8:14:54:77:94:27:24:3b:9a:44:0f:02:38:51:33:e7:00:64:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:31:05 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=139d4339b2fb002eab6f709a16bc51122842e8486303a4f0279106c8734cdd00, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:04:15:15:5c:c2:fa:45:2a:e8:47:bb:87:
                    f9:c9:b0:e9:f0:31:be:ce:60:62:c7:09:cb:c5:24:
                    2e:bb:46:fe:3d:ff:5f:8a:a5:22:5b:b4:b5:f6:b1:
                    9f:d2:0b:4d:ac:fd:42:9d:72:39:b1:97:b4:c3:ca:
                    b6:12:46:1e:f4:fd:0e:d1:7a:be:19:17:a5:f1:7e:
                    26:51:46:b2:73:59:aa:f9:b3:bf:31:27:06:d1:b2:
                    0b:ab:fe:05:5a:0f:9f:ee:0e:7b:48:07:52:3f:33:
                    e3:af:68:50:3a:b3:03:3f:79:cc:d0:eb:42:b5:7c:
                    d4:3f:ed:02:23:e0:e7:42:5c:cf:c2:54:a6:f0:d7:
                    46:b0:b8:f2:7f:bf:c6:17:ea:2d:98:c9:20:f1:f5:
                    ce:b8:94:a8:12:af:ca:17:5e:41:fd:2a:04:e6:69:
                    d6:92:15:5f:36:47:b4:46:53:14:7f:11:11:b1:0a:
                    d4:44:c7:69:4b:7b:97:7d:99:79:67:8d:87:73:aa:
                    47:e5:88:f3:4c:ad:0f:bc:a9:34:83:12:a8:be:ed:
                    e7:60:71:09:61:a4:7b:35:db:2d:c3:39:0a:62:ad:
                    ed:1f:5a:90:df:0d:e7:8f:7d:ed:1c:3a:51:1d:58:
                    84:ec:1b:1c:4a:ba:e7:18:24:26:00:5d:a4:ee:e0:
                    44:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:54:4D:83:17:56:20:00:10:B0:4A:C3:69:74:4B:9B:05:2D:2B:04
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/33570042-1c53-4d52-96cc-9eda450d6ca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:24b8::/45

    Signature Algorithm: sha256WithRSAEncryption
         4a:ac:61:26:3f:c4:fe:a0:af:31:4f:e2:95:d8:1e:82:df:88:
         60:45:49:14:42:2c:df:39:fd:2b:d0:1f:7b:e2:a2:72:9d:b8:
         b3:d6:64:ea:75:32:b1:3a:4d:51:ce:dd:2b:15:d7:b7:cc:d2:
         5d:48:c8:a8:c4:fc:a1:2e:ca:aa:18:3c:51:46:b3:e6:33:b8:
         3e:a4:f1:1b:27:16:e0:ca:5c:9c:b3:11:92:a2:a6:67:2a:28:
         dd:00:74:19:f8:cc:ae:6e:60:7d:57:e7:61:8f:04:9e:7c:05:
         5d:42:54:b6:a5:73:20:5b:6e:8a:2a:6d:f4:3c:8e:9a:c1:15:
         d3:32:f3:4e:46:3e:d4:f5:b7:39:92:2c:a4:43:df:70:8e:c8:
         34:dd:12:9f:88:55:05:8b:c5:d1:75:a3:8e:69:63:df:73:36:
         37:1f:7b:5c:87:85:46:84:dd:75:51:23:41:6c:da:13:0d:8e:
         b8:6f:09:39:83:96:e3:f1:ba:e2:36:56:b9:fc:d0:76:cf:9e:
         27:01:08:36:58:19:2d:ce:9a:c5:7d:4c:9e:23:0e:f0:6d:a9:
         51:43:24:e0:9f:6e:f7:7c:62:83:63:51:40:c0:38:ee:9f:7f:
         85:49:f0:9b:78:29:0b:1d:4b:72:86:cf:50:b7:37:93:91:74:
         e8:f4:15:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:40 2026 by rpki-client