Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/69d053b0-02ca-4c68-82e0-7360012b8815.roa
File:                     69d053b0-02ca-4c68-82e0-7360012b8815.roa (raw, json)
Hash identifier:          TJqf4U74rjHEEgoWR0IkOL0ceqVodEKtNJqoPOTvg1c=
Subject key identifier:   68:17:4A:F0:F7:D8:28:34:33:15:E1:CB:36:F5:7E:44:E2:91:65:6D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       475C096908B98E17BE2ECA9C39581806A1C3F6F2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/69d053b0-02ca-4c68-82e0-7360012b8815.roa
Signing time:             Fri 13 Feb 2026 03:01:23 +0000
ROA not before:           Fri 13 Feb 2026 03:01:23 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2c40::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5c:09:69:08:b9:8e:17:be:2e:ca:9c:39:58:18:06:a1:c3:f6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 03:01:23 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=fa76f99530fe3bd476b5d45665e09dd1a1fbcdee6d5f8b09b1ba8e09549870ad, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:eb:b7:46:6f:45:64:ae:06:c1:76:b6:06:2c:
                    67:5c:35:30:b9:16:2c:1f:4b:0c:ed:f3:d6:31:66:
                    d1:49:92:3c:df:53:e3:18:44:89:e1:9f:0d:c7:20:
                    2b:d6:d5:df:c0:88:c6:5c:fd:ad:d1:9e:4d:06:c1:
                    64:65:97:e8:f5:84:09:ae:24:ff:ab:96:f1:2f:73:
                    d3:12:76:a8:fa:bf:dc:f9:19:62:8e:33:13:93:13:
                    3e:1c:d7:ad:39:eb:12:8d:b5:2b:ce:ce:ae:a5:19:
                    51:89:9c:27:e6:e2:94:ed:5a:0d:e4:e1:18:e0:61:
                    20:70:92:c5:34:e1:53:30:55:b0:6a:b9:34:da:ab:
                    02:70:4b:41:ce:28:c6:04:b8:07:45:5f:3c:fd:1f:
                    e1:48:ea:ea:bc:c9:d8:ef:65:9a:ff:8b:b7:5b:9a:
                    2f:81:a2:52:5f:f4:98:48:ac:a5:68:bd:49:39:19:
                    75:d4:ea:40:56:23:57:75:b4:28:0f:70:9c:8d:84:
                    d1:6a:aa:21:42:1b:37:6a:2e:51:c7:cc:d5:0b:46:
                    7f:d3:a2:72:72:97:24:6a:73:8a:27:95:84:72:c1:
                    e1:0e:44:0c:59:33:e2:91:fb:1e:83:5c:6f:c7:77:
                    c3:c8:fb:e4:e4:1e:01:91:16:b9:32:4a:95:0b:96:
                    1a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:17:4A:F0:F7:D8:28:34:33:15:E1:CB:36:F5:7E:44:E2:91:65:6D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/69d053b0-02ca-4c68-82e0-7360012b8815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2c40::/46

    Signature Algorithm: sha256WithRSAEncryption
         1a:71:23:44:34:00:af:28:e1:91:84:61:c1:d1:e1:f8:1f:24:
         fd:af:ac:cc:87:db:c8:b2:d5:7c:f9:13:ab:ad:fa:1c:01:3f:
         2b:46:01:15:15:50:d5:fe:f1:bf:ac:d0:62:24:75:c7:41:f5:
         ca:51:3c:fe:22:a8:b1:95:d8:59:4f:16:62:54:a7:dc:ad:36:
         2d:06:90:0c:1a:bf:57:fd:b6:37:da:6c:6b:2f:b4:bf:98:ab:
         db:4b:ab:be:82:ce:aa:95:a5:83:48:26:a9:c9:f6:c0:de:c1:
         19:5e:1a:c1:e8:89:e6:0c:b0:d0:00:0f:11:e9:2b:52:4a:6f:
         53:10:42:8d:50:cf:dd:da:11:85:47:ec:4b:32:23:bf:63:a5:
         65:ac:e3:b7:43:99:e0:7a:53:7a:23:85:6d:30:01:9d:d0:bd:
         d4:14:14:d5:3e:a8:39:3b:f1:d7:a0:eb:ee:da:40:3d:8a:38:
         6b:cc:7e:1c:1b:df:d6:14:43:8f:47:0f:3f:9f:f3:37:39:f2:
         e0:d1:5f:ed:1c:51:85:85:45:60:4a:96:59:b0:0c:f7:fe:96:
         10:a6:eb:e4:7e:fd:aa:b8:d1:87:86:2a:55:95:18:45:66:4c:
         11:35:85:d9:08:ae:a9:44:f1:a6:40:37:27:c4:0f:06:97:ec:
         94:79:a2:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:36 2026 by rpki-client