Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c263704-eea7-4bfc-88ea-54aa3459d445.roa
File:                     4c263704-eea7-4bfc-88ea-54aa3459d445.roa (raw, json)
Hash identifier:          j/45lxI0yKdH9C/DyMIMpB8YbT899jHqypQeSm2VyC8=
Subject key identifier:   16:DE:07:9C:C2:9B:1A:4D:28:DF:9C:1E:DC:A4:6C:16:6F:8E:6D:92
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2F0223B4CE4F58E359AD497F195E9D0717137732
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c263704-eea7-4bfc-88ea-54aa3459d445.roa
Signing time:             Thu 12 Feb 2026 01:20:48 +0000
ROA not before:           Thu 12 Feb 2026 01:20:48 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ed4::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:02:23:b4:ce:4f:58:e3:59:ad:49:7f:19:5e:9d:07:17:13:77:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 01:20:48 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=36b7b495956f8e11f2523bf03e16618047be1caa660a8a77ff1ecd9e7907c22f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:34:ec:f3:97:4e:4a:20:f9:e1:72:fe:11:42:
                    b6:f8:ff:09:43:e3:0f:85:dd:bb:48:04:30:1b:3a:
                    6f:7c:40:1f:f6:69:bc:f4:0d:ab:46:05:93:04:2a:
                    eb:eb:8c:aa:b0:7a:0a:a0:23:2f:3e:99:c9:08:02:
                    43:fb:e7:da:32:21:0e:32:4f:46:16:9d:c9:5e:13:
                    89:76:b0:53:b8:68:ae:4d:f9:7d:d4:37:cc:3e:1e:
                    ac:ce:47:a3:ad:d5:bf:86:46:09:bd:a0:2f:65:eb:
                    c3:f6:ae:8e:2e:e1:9d:7e:63:4f:57:66:f8:9a:32:
                    50:a3:b8:f7:64:6e:7b:90:7a:63:19:c6:4c:02:7a:
                    94:84:62:84:ee:eb:5f:d3:22:00:8c:d6:31:7c:96:
                    ca:01:1e:75:88:26:5d:ad:5a:7e:a9:0a:d0:05:9b:
                    bb:0b:11:a5:12:02:07:1f:76:7c:0d:c7:f0:31:8a:
                    bf:53:9a:f6:bc:2b:3c:ff:3e:9b:fb:38:8a:12:4a:
                    ea:61:42:0e:3f:ed:32:41:fa:11:94:46:64:71:ca:
                    0c:71:32:65:7e:6d:e5:51:06:e4:db:02:78:13:c2:
                    58:b3:0a:f6:28:ca:d3:dd:81:9b:b8:49:58:db:e8:
                    0e:54:93:68:b1:dd:84:ca:b4:3d:c9:c8:20:74:c3:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DE:07:9C:C2:9B:1A:4D:28:DF:9C:1E:DC:A4:6C:16:6F:8E:6D:92
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4c263704-eea7-4bfc-88ea-54aa3459d445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ed4::/47

    Signature Algorithm: sha256WithRSAEncryption
         7e:ab:8b:65:63:dd:a4:05:28:06:2b:4b:55:a0:a6:13:c3:10:
         ee:96:25:95:34:6b:ca:3b:e3:dc:b9:7d:04:16:0a:d8:7f:32:
         17:1e:59:5c:58:bb:02:bf:4f:5a:6b:3e:81:0d:b6:5f:16:d0:
         63:a4:16:29:b7:73:d5:d1:b7:b0:a3:fa:6a:df:1c:68:ec:4c:
         05:d9:06:ce:0a:d4:3a:07:7c:64:44:14:01:e7:0f:5d:79:c4:
         5a:3e:5a:8c:d6:96:40:50:34:9e:fe:ab:60:e4:30:6c:a2:bf:
         3f:24:87:c4:39:73:3f:16:bf:d7:d1:a9:f8:eb:24:40:c2:fd:
         a9:58:86:04:60:56:83:11:94:65:9f:62:09:ab:dc:b5:e1:4d:
         67:2c:5f:47:75:c9:2d:ba:0a:0a:32:33:5a:8d:f2:3d:23:a4:
         50:f3:a5:22:75:83:ae:45:cc:88:09:86:32:a7:c5:7e:57:d4:
         40:2b:fd:4a:23:96:33:41:d9:9d:69:40:60:77:93:40:4b:32:
         4e:ed:30:df:dc:88:a7:89:fe:3e:bc:17:e4:6a:36:ed:5b:3d:
         9b:62:8e:47:03:d6:b6:63:74:22:68:d6:ea:c2:01:87:af:4a:
         a1:3d:71:a4:60:f6:02:80:2d:57:e6:83:3e:59:12:19:b0:2e:
         ae:88:d3:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:22 2026 by rpki-client