Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d8ebfe4-c050-4c17-963d-78bedda5ac18.roa
File:                     4d8ebfe4-c050-4c17-963d-78bedda5ac18.roa (raw, json)
Hash identifier:          GMk55g+SptFGf4ZkX8XaHkbwa/22ddIYFRHqw8gjgaQ=
Subject key identifier:   9E:41:7A:AD:BA:30:AB:78:64:CA:73:2C:8A:F6:F8:59:05:43:BC:E8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7CC3421EB125725693ACD4B43450ED6524A1E680
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d8ebfe4-c050-4c17-963d-78bedda5ac18.roa
Signing time:             Fri 13 Feb 2026 13:51:36 +0000
ROA not before:           Fri 13 Feb 2026 13:51:36 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:350c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c3:42:1e:b1:25:72:56:93:ac:d4:b4:34:50:ed:65:24:a1:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:51:36 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=b725134c60c2182a92344b05db48258e46f87e4d605bbb34c8a0064d488cc574, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:cf:3a:bc:90:a8:23:8c:5d:8e:81:39:78:
                    63:88:ec:76:17:fe:0b:b7:68:0b:14:48:80:87:94:
                    00:07:96:56:de:5c:26:b3:a2:ed:49:04:82:96:b7:
                    1d:12:f0:5f:b3:5d:4f:f4:2d:39:6d:80:77:ac:0a:
                    32:9f:a8:8f:94:66:5a:ca:73:4a:f9:c3:f3:9b:fd:
                    e5:78:4a:d1:a0:88:4f:29:11:65:56:b1:ba:c8:4e:
                    bb:58:98:5d:00:52:9f:4a:b6:41:e4:e0:26:07:eb:
                    5b:fb:e5:ba:b2:73:21:30:56:02:2a:e9:ee:76:5e:
                    de:e1:ee:27:2e:2c:28:71:47:92:cf:ce:a2:d6:c2:
                    a2:46:ea:2c:f0:4a:8a:cf:a1:b9:c5:fd:53:41:f7:
                    84:5e:0a:34:77:11:2e:53:f9:97:92:20:81:1e:f7:
                    30:e9:97:70:8e:f4:20:fd:79:6e:b0:5c:d9:c0:46:
                    d3:73:2d:fa:21:c3:e8:e2:d8:16:08:8d:53:79:7a:
                    b9:c2:99:37:71:fb:84:33:b9:74:79:1d:4e:b6:a3:
                    01:88:61:65:d8:f6:bf:f2:f0:5c:dc:92:be:67:6f:
                    ae:4f:f0:ab:8a:41:a4:a3:20:44:ba:52:96:10:ef:
                    7d:ec:9d:ca:c3:72:ac:bc:21:fb:48:a4:31:a7:62:
                    f9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:41:7A:AD:BA:30:AB:78:64:CA:73:2C:8A:F6:F8:59:05:43:BC:E8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d8ebfe4-c050-4c17-963d-78bedda5ac18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:350c::/46

    Signature Algorithm: sha256WithRSAEncryption
         32:9c:6d:d3:17:9d:a9:a6:dd:8a:9d:fc:50:a8:eb:cb:57:dd:
         27:29:89:90:9c:b0:3c:44:d0:8b:27:34:49:65:de:46:54:ff:
         37:c6:57:25:58:69:10:93:d5:3d:09:33:96:fb:55:2a:e6:43:
         36:a3:0e:23:2c:9f:8c:d9:67:3c:bc:7e:bd:28:c4:14:d8:f0:
         e6:9f:b9:41:c8:4f:11:1d:c8:a4:2c:9f:96:b1:01:fe:b0:19:
         7f:7d:2a:b1:58:49:cd:d6:af:00:f5:e7:95:1a:ec:fd:43:7a:
         a3:0f:63:19:f2:85:b3:ba:de:91:fa:f0:60:de:de:26:7a:d2:
         24:a5:40:84:e6:8d:fc:3d:72:fd:c8:54:d1:1f:7d:c4:be:f9:
         4f:0c:d7:3d:e2:2e:4c:1f:a0:32:25:8b:fa:7a:8e:b4:32:20:
         7b:7d:89:70:3c:01:41:52:5c:07:d1:05:a9:b2:2b:5d:2e:3a:
         81:87:ea:a8:94:51:59:75:87:ba:90:73:af:f9:32:63:88:a5:
         0d:e5:df:5f:15:18:be:4a:21:4d:67:af:13:1f:c0:61:b3:30:
         0d:de:af:ae:71:b8:f8:b5:e7:4b:a1:5d:42:1f:72:7f:b0:9c:
         6f:88:4a:e2:53:51:83:4e:2b:e7:f8:90:3a:4b:97:57:3a:e8:
         b4:03:94:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:29 2026 by rpki-client