Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6974dc72-3258-490b-9234-aafb8c41d35e.roa
File:                     6974dc72-3258-490b-9234-aafb8c41d35e.roa (raw, json)
Hash identifier:          ZxlFRbTixJdkDXNKC1AZ2cPYAUCyARO77DWBYIM6B0Y=
Subject key identifier:   C7:41:9C:45:B4:9B:71:68:CB:EA:20:00:D5:B8:66:41:87:90:6C:C1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       12E8455D1F8CE1C575D8B18FCB414751677DFD5A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6974dc72-3258-490b-9234-aafb8c41d35e.roa
Signing time:             Fri 13 Feb 2026 06:42:06 +0000
ROA not before:           Fri 13 Feb 2026 06:42:06 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ac0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e8:45:5d:1f:8c:e1:c5:75:d8:b1:8f:cb:41:47:51:67:7d:fd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 06:42:06 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=8f5760a61abe45e56a2a161d24a4e7c7b9d1dcfd5d3d46ad52725f8dfe566feb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:11:3a:1c:bf:54:e7:fe:d1:ec:f4:19:cf:
                    72:95:fb:28:3d:28:d6:db:71:3c:d7:f0:4f:87:59:
                    34:08:f8:a8:d9:36:1c:74:a2:5d:75:e4:d4:60:40:
                    22:26:85:aa:54:21:97:f8:fc:3d:44:04:5a:0d:f8:
                    5c:05:c1:14:bd:3d:02:6e:c5:ea:3c:73:e6:a3:75:
                    f8:b1:1b:39:c5:bb:40:0b:eb:19:1f:1f:25:f1:79:
                    d0:aa:6a:65:27:83:c8:a8:38:8c:ab:cf:4a:06:66:
                    6f:44:29:99:9a:4f:ef:c5:31:5a:f9:52:e3:fe:9a:
                    e2:09:e9:5e:8c:c2:6d:08:d3:ce:82:ba:28:6a:9b:
                    4a:f1:fd:8a:43:41:6c:ab:fe:7d:28:1f:26:18:0e:
                    37:05:20:f8:fe:28:30:df:6a:48:8e:a6:81:30:69:
                    c0:fc:09:76:38:36:05:14:ea:8e:5e:22:ce:51:0f:
                    35:93:7b:64:eb:c0:02:2a:2a:e6:55:7d:a9:81:b3:
                    9c:87:e1:bf:db:36:01:d4:df:e7:f2:74:a7:77:f5:
                    e1:4c:88:f4:0f:93:b9:70:6f:5c:75:b6:9b:c8:42:
                    63:a5:89:fc:a7:d0:bf:1f:04:d0:f7:a4:8d:e1:cb:
                    27:d8:6b:69:87:a3:d5:f2:e9:11:73:1d:72:7a:80:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:41:9C:45:B4:9B:71:68:CB:EA:20:00:D5:B8:66:41:87:90:6C:C1
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6974dc72-3258-490b-9234-aafb8c41d35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ac0::/47

    Signature Algorithm: sha256WithRSAEncryption
         ab:bf:d5:d7:07:04:31:4c:ae:12:f9:bb:dc:f6:48:06:24:86:
         ed:dd:6d:d0:e6:35:ea:0e:a3:43:2c:65:34:a9:a4:09:c4:ee:
         36:44:c2:82:02:b4:eb:a4:b4:5d:d0:f7:2d:62:b7:49:38:69:
         b1:8c:e3:9a:83:54:c3:4f:a0:58:04:63:66:09:35:15:9b:10:
         55:7d:43:b0:ec:76:28:00:8f:b0:d4:a3:77:d8:cb:34:18:0c:
         9c:90:fb:4e:95:b4:6f:40:ad:47:30:0d:f2:90:f3:1d:2e:d3:
         34:2b:d4:0c:f5:63:60:e1:17:60:52:43:52:ba:2c:51:e3:93:
         30:eb:cf:d6:8b:8f:7e:5a:0e:0f:d2:e9:e6:4f:ac:b3:79:d9:
         ab:59:f9:1b:0a:a9:49:2c:e8:28:1b:d4:40:a3:3a:57:1d:f2:
         20:3e:03:f5:8b:12:d2:7f:bd:79:91:ad:36:a0:48:ce:8d:65:
         16:a3:f9:ec:9d:dc:4a:b7:0c:b9:81:48:1d:b5:18:4b:f4:ff:
         f1:fb:1d:85:bb:c5:df:a4:91:b4:3a:10:29:46:33:be:9e:d2:
         d7:01:6a:d2:f7:35:c4:00:af:94:b6:0f:a5:43:5f:96:2a:fa:
         0a:30:9e:09:a5:99:cf:73:05:72:fe:99:28:89:67:28:c8:de:
         24:87:d9:c7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:47 2026 by rpki-client