Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6bbd67f3-f417-409f-819e-d758fd05da8a.roa
File:                     6bbd67f3-f417-409f-819e-d758fd05da8a.roa (raw, json)
Hash identifier:          c0cpaR5LzTfghlVv9QQbQlvg6oLdNgH3YMeW6247XGw=
Subject key identifier:   87:6D:AF:CD:4B:C8:29:CB:78:9E:26:35:EA:B6:BA:C2:AE:46:08:83
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       49CDBE44C8251955A346AE4F504D7EE90B72229D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6bbd67f3-f417-409f-819e-d758fd05da8a.roa
Signing time:             Fri 13 Feb 2026 06:21:57 +0000
ROA not before:           Fri 13 Feb 2026 06:21:57 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3fc6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cd:be:44:c8:25:19:55:a3:46:ae:4f:50:4d:7e:e9:0b:72:22:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 06:21:57 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=c28e23aaa1c34e070673886b7c60ce7156fb9852da9e07ef361ec7e325c99fb8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:97:26:d5:22:3c:2a:9a:9c:fb:ef:89:46:
                    24:60:d3:f4:26:e7:30:eb:da:98:7e:ea:1b:89:18:
                    49:fc:83:a1:6b:9d:63:ef:5d:34:67:94:51:7b:ee:
                    95:d4:06:7a:9c:32:19:49:ce:0f:2a:e5:cc:5e:64:
                    e4:6f:88:cf:43:ad:e8:27:4a:90:2a:7b:6f:0e:36:
                    7d:a5:eb:b3:59:eb:21:84:34:4e:01:95:46:10:03:
                    49:6a:e2:2a:66:7f:fa:44:04:ac:b2:b3:44:97:a9:
                    d6:67:ce:10:23:5d:4e:4f:5d:56:b7:d2:2f:ea:b6:
                    f2:7f:21:54:f3:4e:3b:fd:8b:ac:94:62:ef:14:8d:
                    1a:8d:d7:53:55:61:e6:87:11:a2:eb:7a:af:ae:de:
                    37:39:b2:c7:4c:fd:07:41:6c:cf:d4:3a:2c:31:74:
                    54:92:da:f1:ec:bf:b9:78:f4:90:13:a5:ff:2e:da:
                    c8:e6:3e:28:47:22:47:af:64:e3:a6:2f:17:45:46:
                    2f:8a:6d:cc:69:bd:6a:86:97:01:c8:02:d6:12:77:
                    1f:eb:41:bc:6f:63:0e:32:86:67:0e:c5:fa:e0:5d:
                    ef:eb:f6:ed:5f:bb:cc:5a:83:f4:35:34:1a:9c:44:
                    56:ea:26:ad:04:12:0d:04:05:10:0b:70:88:7e:7e:
                    98:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6D:AF:CD:4B:C8:29:CB:78:9E:26:35:EA:B6:BA:C2:AE:46:08:83
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6bbd67f3-f417-409f-819e-d758fd05da8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3fc6::/47

    Signature Algorithm: sha256WithRSAEncryption
         7e:ab:62:5b:f6:86:92:d5:cd:87:67:39:7d:01:63:94:98:38:
         87:e5:f3:4f:91:1f:ce:ee:b1:55:27:90:4d:60:ef:29:cf:89:
         84:e8:80:b4:1c:44:fc:39:df:d7:80:70:31:f7:f7:7e:5c:f2:
         33:e8:a7:fe:9d:8c:bf:a4:26:dd:30:39:4d:50:c0:36:89:a2:
         10:25:73:6a:fa:1f:4e:2d:e5:9f:17:52:f8:be:32:87:ce:1e:
         1a:5b:f5:d6:ed:c0:7e:17:66:e6:ab:cb:61:7b:bd:23:7d:64:
         0c:f6:51:12:0a:72:02:c4:ef:10:0b:ac:2a:3e:8c:14:1c:59:
         40:15:5e:c4:c0:73:b2:2d:8c:4f:f6:50:0e:0a:87:80:59:2a:
         ed:be:b6:91:ca:18:3b:53:92:a9:97:da:7f:90:cf:b9:76:e9:
         af:fb:7a:f1:98:37:b3:96:fc:3d:ea:20:a1:eb:2b:40:fb:ee:
         4a:f8:6a:51:6d:73:5e:a3:82:3a:c2:5e:ff:97:c1:c6:8c:2e:
         30:84:a4:73:09:67:61:bb:56:93:73:b6:3c:ae:ef:d9:4c:59:
         d9:c4:1c:14:d6:36:54:dc:2f:1b:b4:55:d8:35:d6:98:60:f5:
         a1:a5:4e:9d:5d:b8:61:e2:dd:5e:16:d9:cc:34:f3:df:65:72:
         75:3a:2f:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:02 2026 by rpki-client