Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48c9ecd9-a795-479a-aaf8-e7c8dcce6766.roa
File:                     48c9ecd9-a795-479a-aaf8-e7c8dcce6766.roa (raw, json)
Hash identifier:          XaLv6RuK1q1dQXw9egzb/XiE9/9bMtUFPDkR73XOnjw=
Subject key identifier:   9C:4E:5E:2D:4E:8D:4E:4A:3D:67:F2:BB:9E:3C:ED:22:7A:E9:89:2C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2355FB439FD065C1A6BA937CEEE4BEA4CE5228C5
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48c9ecd9-a795-479a-aaf8-e7c8dcce6766.roa
Signing time:             Thu 12 Feb 2026 00:30:18 +0000
ROA not before:           Thu 12 Feb 2026 00:30:18 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ed2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:55:fb:43:9f:d0:65:c1:a6:ba:93:7c:ee:e4:be:a4:ce:52:28:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:30:18 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=1db9ef5bfe996d89e30795af8b2f7da9855dff69bc916ba9f848488621f8d3bf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9c:92:fc:17:4d:9d:0b:82:03:aa:1e:dd:82:
                    a5:9b:05:09:bc:19:f7:19:6d:e7:a5:2e:41:35:8c:
                    35:07:a5:3f:03:f4:de:66:eb:b6:e8:32:de:bf:9e:
                    ee:1b:10:98:a1:22:f6:2f:b9:4a:e3:ef:44:41:a2:
                    44:0a:7d:68:f3:3c:e9:75:7b:17:80:e5:a8:82:aa:
                    93:ee:04:08:17:5e:dd:30:37:c0:70:c1:8a:f7:30:
                    6d:4b:c3:d8:3d:92:2d:68:98:02:14:c4:1c:8c:fb:
                    07:59:39:e2:60:4e:dd:a4:0e:e5:03:0c:cb:79:19:
                    7c:06:06:d5:ec:5b:1a:5f:22:94:01:06:93:3d:e1:
                    2f:45:b3:7c:9f:7d:23:21:42:2b:04:fa:31:58:a3:
                    f3:96:8f:4f:5f:22:d5:fc:8b:f4:11:2b:bf:0e:bb:
                    f6:ad:ef:e0:f1:3c:6f:d7:55:db:f0:71:54:49:10:
                    2d:65:47:98:41:be:73:42:9f:bf:ef:3e:c3:d4:c6:
                    57:65:ea:2b:3c:1d:44:d3:ca:f3:05:6e:52:38:ca:
                    11:d4:c4:53:86:ba:eb:29:d3:1f:45:8e:b8:46:13:
                    5e:42:17:d5:f3:2d:38:04:4b:10:e6:cf:9b:90:96:
                    02:54:70:a1:f6:ea:66:53:e5:1e:15:67:67:c8:b5:
                    53:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4E:5E:2D:4E:8D:4E:4A:3D:67:F2:BB:9E:3C:ED:22:7A:E9:89:2C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48c9ecd9-a795-479a-aaf8-e7c8dcce6766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ed2::/47

    Signature Algorithm: sha256WithRSAEncryption
         80:2b:d7:62:71:87:20:76:43:b9:c0:40:a7:74:20:6e:4c:9e:
         42:57:04:1b:b2:c3:b2:ce:26:eb:e5:57:0a:27:bf:51:c9:c5:
         e6:75:f9:5b:ea:74:51:69:75:cc:06:0d:7f:3d:e6:3f:fd:ff:
         f5:63:ba:0e:d7:97:67:da:dd:b7:a3:08:4b:9c:7a:bc:c7:3f:
         23:d6:0a:81:c2:2e:c6:c6:85:23:74:97:b3:1b:e3:f4:2b:06:
         3f:5c:e2:94:b5:b2:5b:1f:4a:a1:fa:9d:6e:e3:bd:0c:9a:23:
         59:18:3b:b3:9a:f5:75:15:de:87:f5:d6:8e:42:70:29:9c:c8:
         04:28:d8:ab:62:a6:f0:81:3e:6d:0a:d1:70:23:c0:d8:80:71:
         c1:f3:60:f6:7f:4c:24:18:a9:e8:3f:d4:d3:66:8c:42:c6:18:
         6b:f7:0c:13:4e:a1:00:2b:ba:89:b3:6a:a8:56:95:7c:c5:32:
         37:43:d7:a8:9d:9f:41:60:c6:a4:41:b2:2c:62:33:26:15:77:
         59:0c:73:6d:ac:30:89:73:c2:d6:1e:0c:da:50:c8:14:f0:39:
         17:cb:f2:21:58:74:c2:b5:82:20:77:7a:42:c0:cc:e3:60:25:
         56:c5:3d:1e:82:cd:8e:50:c8:8e:a0:a0:e6:d6:c0:fe:3a:32:
         cf:b9:ff:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:47:38 2026 by rpki-client