Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55911d01-5135-4f84-bba6-d2e37260a53a.roa
File:                     55911d01-5135-4f84-bba6-d2e37260a53a.roa (raw, json)
Hash identifier:          b0yIXyHi44eQPzw/oah+oO9rAWc6HvloKAOW4FDOgH4=
Subject key identifier:   D7:59:14:BA:40:EA:C2:6D:35:7B:13:2F:9E:13:59:76:CF:3D:C0:2A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       71882305670277D74CC0496B9C62C309E5F33BA1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55911d01-5135-4f84-bba6-d2e37260a53a.roa
Signing time:             Fri 13 Feb 2026 10:21:58 +0000
ROA not before:           Fri 13 Feb 2026 10:21:58 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2af8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:88:23:05:67:02:77:d7:4c:c0:49:6b:9c:62:c3:09:e5:f3:3b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 10:21:58 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=4483d383bc93729c2d49b14fe3f4076ed1b15d74660e3ddfb1c86c0806db674b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:c5:97:7e:c0:0c:49:31:4b:a8:7d:aa:bb:
                    fd:71:b8:fc:e6:0b:09:e1:79:db:f2:83:c8:9b:f2:
                    4e:8a:b1:47:24:88:50:03:50:bf:85:a7:9c:a1:83:
                    fb:8c:bc:ad:36:ba:89:85:fc:70:c0:cc:64:2e:8a:
                    03:9b:86:b9:97:17:cf:05:1b:92:ed:ba:50:f8:be:
                    63:44:01:5a:27:3e:1b:c9:70:6d:77:01:33:bb:3a:
                    4a:e1:6f:18:ba:5b:ae:d6:f7:d5:35:01:6a:fa:45:
                    81:31:70:dd:6a:ea:2a:23:18:38:3a:d4:7a:2e:c0:
                    f5:fa:79:f0:6c:83:4f:47:a3:2a:ac:48:07:3d:32:
                    f3:b6:86:59:b7:99:26:41:83:19:96:92:e4:35:d8:
                    97:2e:e7:57:64:f6:56:d1:65:c8:61:4a:13:f3:b8:
                    ed:a9:a6:2f:79:ad:c3:a0:b4:e5:01:0a:e0:fa:05:
                    f6:39:76:83:26:fe:ac:27:86:d8:f1:56:32:01:3e:
                    e9:1e:d1:f4:38:c9:02:4e:9f:c1:f9:67:19:df:20:
                    5d:e5:4f:31:02:d5:c9:c0:b8:17:9a:98:2e:2b:0f:
                    3d:7e:3a:46:3e:6a:5b:e0:8a:20:bf:d6:c0:ec:b4:
                    72:e3:fd:32:1a:08:12:d0:cf:8a:b0:14:b9:83:b9:
                    59:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:59:14:BA:40:EA:C2:6D:35:7B:13:2F:9E:13:59:76:CF:3D:C0:2A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/55911d01-5135-4f84-bba6-d2e37260a53a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2af8::/46

    Signature Algorithm: sha256WithRSAEncryption
         9b:37:c2:41:f1:d2:c7:03:c2:01:59:8a:2b:97:8e:1e:4f:3f:
         76:e5:a1:a2:c1:50:3d:6f:48:cd:8a:32:d2:25:69:de:53:99:
         77:89:8d:b8:9c:e2:b8:4f:4a:45:0e:ab:c2:06:51:42:7a:c9:
         ef:45:bd:ad:71:cf:2f:73:c9:37:e3:a0:69:dd:c5:ec:e9:7f:
         02:2b:70:11:a2:64:12:41:2a:d3:49:9d:f4:c6:d4:3f:3b:1e:
         52:50:20:f4:12:e7:be:63:e5:58:47:e5:7b:f5:ad:6d:8d:66:
         5f:18:9e:98:06:2c:67:63:d4:8a:8d:c6:91:46:b1:93:ef:e7:
         ca:6a:d4:e3:3d:1d:9e:01:b2:88:ed:d8:06:ca:c9:fe:2d:ba:
         00:93:a1:4f:e6:f1:81:19:3f:a2:eb:26:c3:63:6d:df:1f:ef:
         f4:62:c2:2d:bb:66:dd:86:2a:ef:86:32:be:8b:80:45:4a:5c:
         ec:a3:0b:11:3a:02:5b:5c:28:22:f8:09:3c:c7:aa:c5:f9:bb:
         e0:24:5e:c7:21:55:9e:89:80:5b:c0:b6:65:b0:aa:3e:7a:e4:
         67:58:2f:ac:78:e6:ba:e0:b6:ed:f9:5e:0f:1f:fe:f4:78:6f:
         89:fd:8a:1e:ea:8b:08:1c:1d:ac:fd:b6:e4:77:10:69:b0:f9:
         a4:5b:3e:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:23 2026 by rpki-client