Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4117a415-6dbf-4c46-ade0-2e6729d1f501.roa
File:                     4117a415-6dbf-4c46-ade0-2e6729d1f501.roa (raw, json)
Hash identifier:          JWkX+jBa/ZyihQiFfTiaFO46TzYHXEi5VM3kfuJI9Kc=
Subject key identifier:   D9:C2:4A:74:8B:7E:F5:BB:16:5E:D4:40:DD:20:D1:1A:BD:63:42:B6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4DCDD941FAD716208B173F1FD9DC4F7A46731AB9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4117a415-6dbf-4c46-ade0-2e6729d1f501.roa
Signing time:             Thu 12 Feb 2026 02:30:14 +0000
ROA not before:           Thu 12 Feb 2026 02:30:14 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:28fd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:cd:d9:41:fa:d7:16:20:8b:17:3f:1f:d9:dc:4f:7a:46:73:1a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 02:30:14 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=4c0e3588249e59cddd96c883c032ce3a6c22198d079ae7fd99f0dfc3df3ad058, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9e:73:51:09:7a:30:32:4b:ef:08:bc:3b:95:
                    48:7f:c3:ee:ef:6f:a7:3e:ef:c7:32:4e:3d:2c:b2:
                    f9:68:ae:08:e7:00:6b:9f:9c:b2:3f:6d:dc:be:bd:
                    0b:ca:aa:a7:a1:d4:b8:34:27:2d:89:29:99:76:2d:
                    a9:78:fe:b4:8b:8f:e3:d6:e7:56:08:8b:85:83:82:
                    dd:fb:dd:e0:f3:7d:bc:4c:99:49:10:50:27:92:3f:
                    3d:64:e6:06:40:10:32:b6:25:11:c2:45:e2:89:27:
                    92:29:d1:4d:6f:64:00:fc:c7:80:6d:da:27:2b:84:
                    f4:0e:a7:28:28:93:36:1d:85:f6:7f:0e:c3:cd:3a:
                    ec:cb:e9:ea:fc:43:c1:35:c4:78:27:e4:eb:3c:b6:
                    5c:48:1e:e2:8d:30:be:44:b6:a1:59:62:8c:70:18:
                    63:a9:a3:70:4a:09:f7:62:0b:5a:24:b1:b5:50:6e:
                    25:ed:05:9f:ab:ec:c2:b4:3e:db:87:47:22:c2:8e:
                    73:d9:6d:c8:d3:77:32:e6:cb:32:cb:9b:1e:5a:9e:
                    9a:81:95:7a:57:41:68:c2:f2:c2:f8:aa:8b:44:01:
                    6c:bd:70:2b:20:18:a6:51:e7:3c:a0:26:ce:ee:66:
                    0a:f1:38:d0:44:1c:01:c0:48:3a:4a:84:b9:83:c0:
                    08:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C2:4A:74:8B:7E:F5:BB:16:5E:D4:40:DD:20:D1:1A:BD:63:42:B6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4117a415-6dbf-4c46-ade0-2e6729d1f501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:28fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:20:da:e7:59:fe:d5:0a:7d:8c:6b:88:ed:73:b4:25:42:77:
         76:3a:c4:ee:ab:bb:d9:db:6d:38:e3:df:2f:c6:79:c8:4d:30:
         4b:12:58:09:29:6f:eb:44:44:fe:d7:ff:52:36:72:96:00:88:
         49:7f:3a:75:60:80:7b:44:91:d8:f0:a2:db:2a:18:e5:65:da:
         f7:9b:01:65:c8:61:83:dc:3b:60:69:0c:8c:71:91:12:29:73:
         69:75:fe:23:8c:ed:85:3d:b5:ed:89:87:db:47:d8:f9:ae:c4:
         ac:4b:e9:42:80:6e:88:16:99:c3:e8:8b:67:57:c0:aa:59:0d:
         45:4b:25:75:53:85:50:73:45:c9:d4:fc:9b:d1:09:48:eb:c5:
         5b:a4:fb:ee:ad:e8:3f:54:ea:33:41:9b:e6:c3:a4:cf:bf:78:
         a4:87:9c:25:0f:70:b5:35:4d:11:b2:f9:30:83:68:fe:70:71:
         d8:c1:8f:bb:13:76:a1:8a:b4:e3:63:04:09:5f:60:d5:db:ec:
         d9:13:5a:37:cf:fd:d9:74:8e:a6:41:fa:93:b1:68:bc:df:b9:
         73:b9:96:e6:b3:72:1c:68:ab:4d:ea:bc:96:ff:26:86:50:12:
         df:75:4b:d9:05:ed:ff:08:99:8c:23:06:83:39:53:51:27:fb:
         8a:ed:e9:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:45 2026 by rpki-client