Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c3ac0aa-c400-4272-9681-f871671181df.roa
File:                     3c3ac0aa-c400-4272-9681-f871671181df.roa (raw, json)
Hash identifier:          m9pTaT45r/w5m5XchseKrmJpDdwfaUMG/t0TS/DHUzg=
Subject key identifier:   02:E4:BB:75:E3:EE:E3:7C:27:00:B6:0D:7B:73:7B:F0:93:2A:7D:90
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0C129930E7A543638B17734E3910E10BEDB2B20B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c3ac0aa-c400-4272-9681-f871671181df.roa
Signing time:             Fri 13 Feb 2026 04:30:16 +0000
ROA not before:           Fri 13 Feb 2026 04:30:16 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3290::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:12:99:30:e7:a5:43:63:8b:17:73:4e:39:10:e1:0b:ed:b2:b2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 04:30:16 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=14543d83f620c045e7dda4e03a740b5425eb0b969404409663b8a8c124a0c605, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:20:8a:09:98:88:64:b9:0c:dd:a8:e6:e1:
                    71:82:48:8b:0f:51:3a:4d:be:1f:de:a3:c0:d1:a0:
                    96:9b:92:12:0d:8a:19:bb:b4:ad:bf:fb:6a:48:ce:
                    91:a6:38:76:6c:f5:a5:8c:72:29:97:00:be:fc:97:
                    20:83:84:77:3f:e1:92:98:bd:56:a6:71:c5:8e:c8:
                    00:cc:5b:f8:43:13:bd:4d:7b:2d:e9:82:fa:28:df:
                    76:fb:7d:95:aa:73:1b:81:b6:61:e2:75:96:17:9c:
                    ac:f5:91:39:db:30:4c:25:5d:b9:f6:19:12:87:85:
                    7d:8a:f9:02:92:7a:ef:4c:7a:b2:d1:76:83:d9:2c:
                    d3:e7:05:5c:3f:29:d8:88:31:b0:a2:21:33:fa:bf:
                    45:48:47:6e:21:1f:f9:d3:0c:95:92:c0:db:70:03:
                    4d:db:f4:5f:18:a8:01:76:66:02:a1:fb:2f:12:28:
                    bd:d7:e5:5b:cd:fd:31:c2:e4:8f:98:e0:28:05:cc:
                    7f:77:79:8a:7d:ea:d2:03:62:e4:f3:31:95:ac:47:
                    c6:b2:68:01:6b:d2:95:3d:a1:eb:e9:9e:0f:fb:f8:
                    1c:2d:2f:13:42:6b:17:ae:4f:da:d9:01:51:88:09:
                    68:d9:09:66:1b:c2:fb:6f:b0:72:26:03:73:7f:36:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E4:BB:75:E3:EE:E3:7C:27:00:B6:0D:7B:73:7B:F0:93:2A:7D:90
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/3c3ac0aa-c400-4272-9681-f871671181df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3290::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:7e:0a:0e:78:07:0f:86:87:6d:01:d8:64:9f:37:ab:ae:5f:
         7d:ab:72:36:b5:5c:45:15:88:5a:ac:40:00:04:8d:27:a6:61:
         29:7b:bb:87:82:7b:55:a0:86:1f:2e:47:44:9a:d6:51:61:cd:
         1b:e1:4e:8f:23:d1:3f:8c:15:d5:a7:9c:89:0c:37:cf:d1:04:
         1e:17:c8:75:bc:a8:c4:f3:ba:ff:a8:6e:aa:dc:78:fb:c7:97:
         0f:f5:39:4d:e5:1f:5d:34:6b:86:b7:04:60:c1:53:87:29:78:
         84:c0:f7:b9:8a:10:f6:89:a2:91:18:0b:ce:a4:f2:34:a6:fa:
         4d:36:6c:4b:b3:65:7d:f6:17:31:b6:f5:4d:a7:f3:84:81:18:
         91:a9:82:ce:fa:3f:10:4d:32:1d:ca:5f:c3:39:ad:19:de:35:
         e7:65:47:f8:b5:41:10:81:5c:c2:3c:f1:57:cb:49:23:df:14:
         88:40:a7:e7:3a:a4:99:03:7c:64:56:b6:2e:63:b4:a7:da:a5:
         d1:15:59:a1:6b:5f:bc:39:4d:ef:fe:99:8c:82:ab:13:65:d5:
         e6:65:85:65:4a:84:94:c2:b6:20:3d:e7:73:d4:e5:c2:9d:47:
         28:d2:e7:6a:00:c2:5e:06:8d:f8:33:91:07:9d:10:c9:ad:47:
         2d:6a:20:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:02 2026 by rpki-client