Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66838067-e733-4209-b710-5c1af598c1f9.roa
File:                     66838067-e733-4209-b710-5c1af598c1f9.roa (raw, json)
Hash identifier:          e9jtqdVLExZPr2+hMcEnddEKgx+KpPG/ktMGbSnBRwY=
Subject key identifier:   44:89:F4:33:7A:1C:0F:5B:21:7D:4A:49:50:69:C0:E8:9D:07:EF:50
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6BE7A682F616343B5DEA0703FB506BA47E2F55ED
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66838067-e733-4209-b710-5c1af598c1f9.roa
Signing time:             Fri 13 Feb 2026 02:50:07 +0000
ROA not before:           Fri 13 Feb 2026 02:50:07 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:364e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e7:a6:82:f6:16:34:3b:5d:ea:07:03:fb:50:6b:a4:7e:2f:55:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 02:50:07 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=becce1b4f14f250adc739e34050806eefb2e00522cf77db0f7003da5dd1bbd40, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:b0:c1:32:81:32:a3:04:67:2c:18:19:0d:
                    3c:7d:3b:84:29:cf:22:69:10:29:a7:13:1c:08:73:
                    ac:f0:79:43:f9:00:5f:d3:82:d5:b8:7e:c7:40:87:
                    44:0d:9b:c3:65:0b:c4:06:f2:1d:de:6a:91:e8:26:
                    b6:58:ea:1b:3c:24:88:20:2c:b3:99:99:09:1c:5a:
                    a9:b7:12:0a:6e:90:4e:97:4b:a4:32:6f:39:cb:b8:
                    d3:4a:35:83:1b:63:27:a9:44:5b:c2:0e:99:cf:4b:
                    d5:12:50:0e:b1:44:3c:46:43:03:ad:2c:da:9f:a4:
                    11:16:f4:c4:e0:63:71:37:7e:bf:11:36:ed:94:ec:
                    76:37:1a:5c:39:19:ef:36:ec:24:8e:ab:4a:9e:53:
                    74:22:75:08:de:b5:93:99:15:a7:81:dc:c3:a4:70:
                    82:24:86:86:ee:26:2c:37:23:f4:b2:30:ed:d4:7b:
                    31:25:8d:a5:01:63:0e:73:e2:19:e0:ac:a8:27:af:
                    1a:7b:0a:05:01:91:91:4d:cf:78:a0:dc:7f:32:88:
                    0b:72:70:aa:d4:d8:c3:52:48:5e:12:e4:56:8a:39:
                    9d:d7:47:4c:d7:dc:ce:11:1c:23:9d:b4:bd:a3:c3:
                    29:09:99:6f:bc:4d:99:44:b0:31:f7:2c:53:53:25:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:89:F4:33:7A:1C:0F:5B:21:7D:4A:49:50:69:C0:E8:9D:07:EF:50
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/66838067-e733-4209-b710-5c1af598c1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:364e::/47

    Signature Algorithm: sha256WithRSAEncryption
         31:c0:14:22:5f:d5:ef:b0:1f:62:c0:2b:c3:61:95:b9:48:1a:
         12:2f:ee:90:93:eb:a6:27:5a:fb:36:fe:3a:e8:5e:d1:4f:be:
         73:80:68:40:2b:70:4c:6f:da:9f:2a:21:a5:cf:28:51:b6:1a:
         5b:de:03:dc:dd:ce:94:65:ad:9d:79:b9:df:62:e4:8f:97:c8:
         4f:72:e0:08:18:68:52:57:bb:dc:60:d7:6d:23:9b:7a:9d:f0:
         1e:e2:73:5b:79:c1:48:94:98:24:7b:c6:7e:af:e5:7c:60:6f:
         d0:c0:9d:1b:3b:20:75:4b:9f:21:b6:c6:36:35:57:f3:23:c8:
         7d:cd:dd:d9:3d:9a:32:72:de:10:80:1c:18:94:a0:e0:ff:37:
         45:4b:31:5b:de:3b:6e:2a:e6:91:e0:8b:f6:4b:71:13:77:d7:
         9e:56:2c:b3:2a:e6:d5:a4:17:0a:5f:2c:13:ea:27:89:a0:c9:
         3a:32:9d:33:70:b3:ed:e1:d5:49:ec:1d:c0:f4:7f:4f:e9:72:
         93:ff:da:26:17:94:14:00:2a:37:d8:7c:de:c2:34:cb:bf:00:
         34:be:a5:1a:d7:17:b3:e5:6f:21:f3:d9:5d:89:74:8f:74:34:
         a8:ce:e0:cc:2c:93:54:89:5a:22:00:d5:94:98:c7:10:8a:44:
         bb:a3:86:86
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:08 2026 by rpki-client