Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4148d2ce-1b52-4b81-98e0-c8435f0c0b3e.roa
File:                     4148d2ce-1b52-4b81-98e0-c8435f0c0b3e.roa (raw, json)
Hash identifier:          L7wnOUiAAw/k2q2/PvdmfiwpBp6xhr91H/SgC0/lTaU=
Subject key identifier:   46:BE:00:4E:A9:7A:C6:C0:1F:A8:4E:32:C7:D2:FF:AC:18:26:DA:2F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4E7D46C15B2A4238D37D77074894217E30AF66FB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4148d2ce-1b52-4b81-98e0-c8435f0c0b3e.roa
Signing time:             Fri 13 Feb 2026 11:30:14 +0000
ROA not before:           Fri 13 Feb 2026 11:30:14 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38b2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7d:46:c1:5b:2a:42:38:d3:7d:77:07:48:94:21:7e:30:af:66:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 11:30:14 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=24fae707ed835fb66856a9c3b74126e757d859f0150339cbbeda4ab952784b05, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:ab:bb:1b:a4:3a:bf:61:d7:83:d9:ab:be:
                    55:90:17:61:0c:d6:f4:f9:28:63:f9:07:6c:76:6c:
                    fa:55:7a:6a:aa:7c:04:dc:a5:20:20:d3:18:eb:23:
                    c1:f9:3e:ef:91:7e:9b:20:a6:06:04:65:b1:97:a7:
                    42:91:cf:c6:bf:32:67:33:19:bb:a8:4b:b9:e3:0e:
                    1d:8f:39:98:28:6c:44:ba:d0:0f:f3:30:93:ff:80:
                    26:a5:60:d9:2e:33:c5:f0:47:41:4b:8a:c6:0a:18:
                    40:64:65:63:9f:41:4d:d9:39:0d:10:dd:30:5f:e7:
                    ff:f5:98:ce:1a:aa:94:6e:ba:cc:b6:df:38:51:04:
                    fe:00:1a:da:1a:cb:b2:c0:68:80:16:33:60:5c:e3:
                    7f:2d:6f:c3:bf:92:03:6d:d3:c2:ef:3b:b9:de:6d:
                    9c:0e:a7:aa:55:09:b2:f3:d8:23:34:87:22:fa:59:
                    b3:2c:a0:05:22:96:c0:14:e0:0a:45:9e:bc:af:4f:
                    2e:17:ff:3a:f2:bc:93:56:05:34:51:66:39:86:b1:
                    0d:5e:37:43:00:8c:b8:71:68:15:e8:9e:5d:e5:19:
                    76:a0:fd:df:de:a2:94:a1:2a:79:ad:74:a0:c1:01:
                    14:b4:d5:25:b0:1a:b4:24:82:2c:a6:31:35:b3:5f:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BE:00:4E:A9:7A:C6:C0:1F:A8:4E:32:C7:D2:FF:AC:18:26:DA:2F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4148d2ce-1b52-4b81-98e0-c8435f0c0b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38b2::/47

    Signature Algorithm: sha256WithRSAEncryption
         10:92:e9:04:b6:f8:ac:5f:8a:cc:90:21:29:22:a9:aa:8d:b2:
         40:0a:49:c8:e0:30:da:62:9a:5d:a9:e8:ac:0d:9d:2b:40:04:
         a9:aa:dd:85:d2:40:e6:f7:9a:76:d0:2f:29:1c:ef:c4:12:b9:
         1c:42:9c:96:06:9c:b3:6b:46:f3:26:9c:2f:ce:40:56:14:63:
         1a:bd:72:ad:f1:e5:58:58:12:98:31:ef:0f:b5:3b:6c:5a:a7:
         26:6b:4f:7f:c4:a6:b3:ee:15:8e:40:15:7e:f6:01:90:83:84:
         26:3e:72:34:09:98:f0:1d:cd:d0:69:27:96:17:ee:57:4a:aa:
         eb:a6:6d:c0:f7:70:a1:ce:f5:74:47:6e:a5:94:c7:3f:e0:83:
         d3:b3:9f:0a:35:ef:fa:35:b3:2f:64:a6:a1:da:4f:d6:c8:76:
         84:76:52:bd:1e:ca:df:82:6d:1a:95:01:e9:43:52:0a:25:bd:
         f0:b2:71:d5:88:2a:c0:09:5e:40:d6:7b:4b:f8:f5:d3:06:04:
         98:84:42:94:e1:9d:41:c4:f5:0f:b8:0f:5a:5a:6c:0b:e0:64:
         e4:1e:eb:cd:ef:9c:40:80:21:76:82:70:1b:0a:6b:da:77:05:
         1c:40:6c:10:15:04:ae:f3:14:e9:8a:fd:9e:61:67:63:5e:73:
         60:1f:23:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:13:01 2026 by rpki-client