Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56deb1cf-3f01-40d0-b781-4192b70c1357.roa
File:                     56deb1cf-3f01-40d0-b781-4192b70c1357.roa (raw, json)
Hash identifier:          TOrMpI2W9dTre/6xxWUhC4GPT3E7iOoiDCostEO7SmM=
Subject key identifier:   3B:20:D8:5F:F7:43:60:CB:D6:A5:21:B9:FD:8B:CE:21:7A:F7:F9:A8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       18FB85E6C90E6F95C87031837F7FFFD769E45618
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56deb1cf-3f01-40d0-b781-4192b70c1357.roa
Signing time:             Fri 13 Feb 2026 04:10:10 +0000
ROA not before:           Fri 13 Feb 2026 04:10:10 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:32cc::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fb:85:e6:c9:0e:6f:95:c8:70:31:83:7f:7f:ff:d7:69:e4:56:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 04:10:10 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=bed2f6216ad12548c62011dac3c94d98910ac2618eeac2a362ee652915383e65, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8f:e6:66:0d:60:c5:74:b9:4a:88:4e:64:59:
                    57:5e:c2:f1:39:15:55:ae:4e:52:9c:75:13:2b:c7:
                    c0:a9:a0:e9:d6:eb:b3:13:ec:36:14:c0:9a:89:82:
                    f0:65:10:89:1b:fa:79:92:1a:5c:a7:e6:53:5e:ae:
                    f7:e5:34:6c:19:a2:ba:29:9e:8d:db:2a:97:ff:c2:
                    70:34:cf:9d:62:10:03:e9:c2:e9:14:a7:a0:c0:81:
                    52:6e:b0:da:f4:b7:52:74:6b:17:ac:b5:59:fb:25:
                    d9:3f:c3:b7:f5:57:40:0c:92:d4:14:16:af:db:54:
                    47:34:3c:2f:70:02:25:69:68:14:7a:c8:f4:40:30:
                    ac:1d:84:75:a2:55:cb:a3:05:ec:4f:26:23:49:d9:
                    3c:62:77:f1:1d:fb:a0:32:2c:27:41:ad:c4:ed:9c:
                    a4:f6:f6:f9:67:a8:53:d2:52:03:e5:ae:71:21:f3:
                    43:a1:af:a8:72:5c:a7:cd:85:34:d3:75:23:38:b7:
                    ab:a9:bf:47:01:56:fd:39:57:46:f3:a5:16:0d:79:
                    95:f0:a2:0e:79:a7:c4:1c:a9:f8:1c:a3:3e:94:fe:
                    4d:75:c8:60:21:52:8f:80:53:ff:a3:00:a3:08:2e:
                    36:0e:a2:b6:34:47:66:30:c2:98:d2:b8:1b:d4:1e:
                    aa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:20:D8:5F:F7:43:60:CB:D6:A5:21:B9:FD:8B:CE:21:7A:F7:F9:A8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/56deb1cf-3f01-40d0-b781-4192b70c1357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:32cc::/46

    Signature Algorithm: sha256WithRSAEncryption
         05:d9:3d:a8:3e:fb:0a:15:15:2e:8b:00:a5:76:0c:63:5e:24:
         65:f3:39:a6:d7:4a:60:fc:13:38:37:9e:2e:60:c5:35:45:f1:
         be:af:04:6e:af:36:03:59:a8:37:9b:e1:ed:b2:a8:64:c6:b8:
         25:be:3b:aa:39:44:e8:3a:d6:1e:ee:aa:28:b5:7e:8e:56:36:
         73:5e:f3:9f:84:27:a2:48:5e:fb:5c:19:9d:f5:73:b9:89:42:
         f2:22:23:0e:e8:72:6f:39:ed:14:e4:c4:56:a4:4b:a1:62:b1:
         dd:45:b1:03:e7:68:60:cc:64:a5:16:70:e7:43:3f:e2:47:59:
         ba:20:8c:4d:66:b2:a0:97:db:e0:3c:27:35:e9:1c:5c:8f:e9:
         8e:ce:aa:6b:b3:f0:0b:4c:5e:e9:f4:b7:06:ee:fe:4c:ad:e1:
         d9:78:b4:98:44:4c:c4:d9:35:1d:c8:aa:76:da:c6:a0:35:fe:
         3c:4c:6e:06:d1:7c:5d:61:06:77:0b:3e:7d:b6:1d:bd:4d:51:
         54:70:b0:a1:9e:56:16:b9:29:2d:86:7a:0e:10:0a:21:03:51:
         3c:58:63:0b:c1:c7:3f:5a:ec:50:53:e8:42:f2:88:4d:6a:a3:
         ac:03:f3:1d:2a:9e:d2:31:f0:3d:bc:32:44:80:9a:0f:9e:5b:
         59:1c:fe:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:49 2026 by rpki-client