Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/412b56fa-057a-4262-9ab0-4b8351b3876d.roa
File:                     412b56fa-057a-4262-9ab0-4b8351b3876d.roa (raw, json)
Hash identifier:          DtEjl7J61ijBohi7s3wDbp8ax5vZfYfBNUAq87tFWfQ=
Subject key identifier:   47:EF:BE:F6:1B:BD:D8:51:3B:DA:62:09:7B:08:5A:8F:92:20:FD:9E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6D3445B1FB53913F186B67398CA1CD24340EB671
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/412b56fa-057a-4262-9ab0-4b8351b3876d.roa
Signing time:             Fri 13 Feb 2026 07:51:51 +0000
ROA not before:           Fri 13 Feb 2026 07:51:51 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:331c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:34:45:b1:fb:53:91:3f:18:6b:67:39:8c:a1:cd:24:34:0e:b6:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 07:51:51 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=af29d52d1b6872e3e70cf9e2024c174e6c3c848f715d175a6eeeeda9deb50e47, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:99:cc:6f:c3:cb:d9:ab:04:8a:6d:84:5e:
                    51:11:0b:1a:e0:cc:43:3e:a0:d1:c0:c5:cb:6f:4c:
                    60:49:c0:e0:8a:22:15:d6:37:77:4a:35:22:0d:34:
                    40:72:00:e8:f6:99:d3:fc:9f:ef:66:12:9f:c2:f3:
                    cf:80:a7:ad:12:da:41:25:33:91:89:ea:0a:ac:95:
                    55:19:81:64:2a:bf:d8:a0:fd:9a:95:b2:5c:59:bd:
                    04:b5:cf:d3:0b:63:fa:1e:5f:f4:91:2c:b3:46:7c:
                    1b:39:e7:31:9e:45:19:55:a2:a1:b7:f3:d6:ae:a5:
                    32:77:c2:5f:8c:ef:f8:a9:9b:b0:a4:61:fb:ee:38:
                    4f:7a:70:8c:b5:30:48:65:8a:33:73:ba:00:fc:ae:
                    54:80:9d:16:8a:64:b6:38:30:85:0b:4e:fe:e0:c6:
                    2c:5e:89:2d:de:84:22:7d:ad:ea:e5:51:93:07:45:
                    14:49:fd:16:72:5d:c0:82:32:1e:41:41:ce:c3:17:
                    e0:24:fb:7a:30:a2:6e:57:9d:b3:83:e8:9d:9b:08:
                    3b:4d:e5:f4:bb:d7:23:33:c8:1a:56:3e:70:32:9f:
                    03:7e:09:ef:60:a8:a1:89:87:c5:2d:c2:36:84:ea:
                    4d:a9:eb:0d:10:77:b2:89:7d:6c:d8:ad:a5:d4:4f:
                    73:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EF:BE:F6:1B:BD:D8:51:3B:DA:62:09:7B:08:5A:8F:92:20:FD:9E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/412b56fa-057a-4262-9ab0-4b8351b3876d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:331c::/47

    Signature Algorithm: sha256WithRSAEncryption
         3c:56:ec:96:bf:7e:d5:e7:79:72:3e:35:6b:3c:48:d3:dd:51:
         0b:b7:19:b1:ce:e0:c9:65:06:b2:a5:26:4a:c4:50:fd:61:8a:
         02:c5:ae:84:3b:a9:f6:20:c1:86:89:3a:6a:f0:23:8a:e4:6b:
         7c:a1:65:75:ec:10:62:f9:07:c6:71:fd:f0:32:fb:f9:8c:a9:
         ed:93:2c:33:5a:17:e6:17:4c:d3:cf:85:69:15:60:b4:e2:f2:
         bb:4d:14:bf:63:89:23:21:31:a2:fe:2f:ea:2d:5c:54:f1:53:
         c7:75:00:6f:61:4b:8d:3c:5a:48:f4:b2:e3:80:11:2c:c5:24:
         ce:98:a4:8e:b3:e0:72:08:d6:8f:63:cd:ac:e0:5b:bf:e5:94:
         d7:19:90:17:c4:96:6d:66:4e:cd:d0:2d:e4:c6:d7:c9:6e:58:
         50:11:57:40:aa:66:95:53:89:6b:24:97:ad:dd:98:66:71:80:
         30:d7:51:59:3b:6a:71:ea:6e:ae:bf:f0:07:b9:65:42:10:92:
         69:08:da:39:6e:5e:85:f4:22:6f:f9:12:2c:c0:5b:cd:e5:7a:
         85:58:f7:f8:60:7f:f6:e7:bb:21:25:1a:57:a5:4f:9e:ac:92:
         60:4e:75:ce:23:cb:52:d7:dd:89:87:0b:29:0b:ce:f4:84:73:
         86:b8:7c:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:16:53 2026 by rpki-client