Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5348df7d-788f-4f4b-b35b-5749abf3e038.roa
File:                     5348df7d-788f-4f4b-b35b-5749abf3e038.roa (raw, json)
Hash identifier:          3UvHFHHU6ZtZh3bpdR/HIowv3WdGaxcX68i/pN4KJ4M=
Subject key identifier:   5C:21:13:BC:DA:A4:9D:58:AE:AA:13:D5:A9:3B:DF:87:FB:5C:D0:DA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       56EBF8BB7FB65493DD9A84AD84E127353F3760E4
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5348df7d-788f-4f4b-b35b-5749abf3e038.roa
Signing time:             Thu 12 Feb 2026 01:11:21 +0000
ROA not before:           Thu 12 Feb 2026 01:11:21 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c54::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:eb:f8:bb:7f:b6:54:93:dd:9a:84:ad:84:e1:27:35:3f:37:60:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 01:11:21 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=22de6ac0b03fffab4b69ef13765837c8b4c848075c55e6319dc50e7d5762ebfc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2a:3e:0e:04:a0:22:57:5b:82:4c:de:32:a4:
                    db:4e:85:b4:7f:db:82:61:7f:9d:3b:4b:23:fe:65:
                    ca:34:bf:94:6d:cb:c1:b2:84:56:2b:ac:7c:cf:ee:
                    4d:49:26:e6:9a:19:cb:46:d8:ab:4f:fd:1d:ad:95:
                    4b:e1:71:78:df:0c:bb:b4:90:2c:93:b1:cf:48:4e:
                    f3:f7:b0:56:45:f7:39:e1:93:40:12:2c:a5:98:0f:
                    b1:5f:a5:77:1b:5e:9a:48:18:17:b2:fd:c6:61:13:
                    c2:ef:be:f0:08:8a:9c:09:1a:0b:c6:84:40:51:0a:
                    e0:1c:2c:15:e4:e1:74:8e:01:0b:e7:ca:41:85:7a:
                    d7:e1:c8:9e:ce:70:b9:fb:5b:d6:f6:45:3c:18:38:
                    af:5b:63:f9:9c:d3:23:41:2c:2c:e5:d5:ad:bf:a7:
                    d4:23:50:ba:57:31:57:6f:7a:aa:61:d3:8a:0f:e0:
                    2f:d6:df:3f:72:91:9d:0d:aa:b4:96:fc:10:73:33:
                    6d:19:82:e1:e2:eb:de:22:e4:78:32:a2:52:72:7f:
                    67:87:f4:60:c1:cd:9f:a0:e9:a3:3c:e8:2b:d2:cb:
                    11:9f:cb:2a:05:c0:f2:78:b8:1c:46:58:c6:3b:3c:
                    f6:cb:9e:b1:a8:06:c1:38:35:92:1c:96:95:12:8f:
                    11:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:21:13:BC:DA:A4:9D:58:AE:AA:13:D5:A9:3B:DF:87:FB:5C:D0:DA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5348df7d-788f-4f4b-b35b-5749abf3e038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c54::/47

    Signature Algorithm: sha256WithRSAEncryption
         0e:b9:be:41:7e:c0:6e:ad:ac:3a:ba:cd:93:03:c3:f9:51:03:
         50:5d:e6:fc:d5:98:9d:bd:9c:50:c2:81:60:cf:fe:95:3b:9e:
         ef:05:fb:8d:b6:9a:a8:6c:de:1f:06:51:68:7b:6e:d6:59:20:
         0c:b7:db:63:aa:cf:20:15:28:20:60:a0:4f:00:b4:ea:67:34:
         b7:a9:78:38:6b:d3:5e:6c:ab:2f:7f:d0:7a:87:6d:4d:19:4e:
         1b:5e:26:10:57:22:fc:51:f3:3b:ac:aa:df:bb:4b:01:ea:13:
         98:d5:17:32:5e:a4:6e:56:2b:6a:09:6c:54:e4:69:79:15:a6:
         e8:c9:36:e1:29:3b:05:68:c3:c6:6c:40:a7:28:2b:20:23:e1:
         c0:29:a7:5a:71:97:68:29:79:6b:96:5c:13:63:df:a1:be:b0:
         8e:5c:c9:1b:d1:ba:94:0f:c7:ed:c9:f4:90:f3:1e:a7:e0:11:
         23:1b:44:23:8b:bc:7c:83:91:c1:43:25:c4:67:7f:ed:4d:fc:
         34:75:cd:34:72:88:f3:67:72:69:27:a6:15:09:f7:fe:e6:e5:
         b1:f1:80:cb:d9:2e:4f:99:76:3e:1c:aa:85:7f:c1:bb:af:0b:
         5f:b8:1a:48:6a:ea:ec:00:05:55:bf:76:df:b2:1d:fd:f8:08:
         01:a9:cd:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:51 2026 by rpki-client