Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/716c22d1-5694-47ea-95bb-5432f48f87c4.roa
File:                     716c22d1-5694-47ea-95bb-5432f48f87c4.roa (raw, json)
Hash identifier:          7hvpwCUbsorB1jUXkgUwntvXFiWeyzJpw2t2WktKo1k=
Subject key identifier:   0B:1B:0C:EA:75:35:73:E1:8C:08:08:E4:84:54:C9:25:99:C9:32:70
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4AD9D2B692E8B817FD01BD5AA1C9951563C9FD45
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/716c22d1-5694-47ea-95bb-5432f48f87c4.roa
Signing time:             Fri 13 Feb 2026 01:30:51 +0000
ROA not before:           Fri 13 Feb 2026 01:30:51 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3568::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d9:d2:b6:92:e8:b8:17:fd:01:bd:5a:a1:c9:95:15:63:c9:fd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 01:30:51 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=f384ec910a2b76e867b71a4c8d1f9061530e85b4d2faeb4450c69090bf296f49, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:2f:50:a2:9e:f2:2c:ee:2a:b2:8a:08:6e:
                    cf:a4:1a:23:3d:7d:54:76:a5:be:ce:ca:95:16:6d:
                    e5:44:e2:7d:90:b0:ba:b7:a4:20:75:6f:2f:13:6b:
                    9b:b6:e6:fb:f8:1c:49:fb:34:03:94:3f:42:c0:aa:
                    ee:46:5d:1e:d1:e7:e3:01:56:b4:12:4b:83:4e:e5:
                    66:94:20:0b:11:77:d2:4e:dd:7a:0b:ef:1c:c9:8e:
                    c2:15:ee:c6:95:76:c0:9d:1d:ed:3a:51:2b:dc:92:
                    86:1e:6d:37:df:02:ab:0a:d7:bc:e1:b8:61:6f:33:
                    01:42:e5:1c:3b:d2:4f:ce:9f:6f:5a:15:53:cf:b4:
                    6b:cc:79:29:7c:f3:1a:0b:f8:85:45:c2:cf:e7:37:
                    b3:8a:7b:62:0d:cf:0c:8d:60:30:91:7e:7a:e8:40:
                    15:a5:9a:89:a4:f5:dc:28:35:99:bb:08:12:c8:5d:
                    ff:18:67:e5:67:3e:3e:4d:f3:b0:0e:ed:dd:b8:63:
                    d4:de:c0:4f:af:00:bf:73:eb:16:14:94:05:24:ab:
                    b2:0c:77:c5:59:6d:37:02:8a:9e:c9:36:27:0d:19:
                    71:33:7a:a2:4f:25:d8:48:53:ef:e0:0f:59:3a:16:
                    b4:96:1f:2d:68:2a:ee:6c:4e:7d:3b:0b:35:42:78:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1B:0C:EA:75:35:73:E1:8C:08:08:E4:84:54:C9:25:99:C9:32:70
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/716c22d1-5694-47ea-95bb-5432f48f87c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3568::/47

    Signature Algorithm: sha256WithRSAEncryption
         3e:06:2e:b7:35:9f:8e:93:50:41:9a:e9:d4:9c:e5:f9:f8:bb:
         70:8e:8a:39:81:da:95:fd:bd:67:9b:39:fb:c0:1e:77:8d:b6:
         b0:85:a6:fa:58:82:89:96:84:bf:0b:84:15:76:1f:84:42:72:
         af:4b:0d:e8:0c:33:d2:93:9a:f3:e3:6d:29:13:82:09:22:72:
         37:2c:18:87:24:5f:f0:4b:b2:59:39:ab:98:ae:4c:37:6b:1d:
         14:17:29:ec:76:16:f0:f8:04:56:e9:04:62:54:3a:d5:c9:dc:
         6f:a6:48:2f:3d:28:6f:e2:5a:3b:3e:66:de:2f:6a:2f:29:9b:
         c5:11:cc:63:95:db:dd:78:18:2a:08:fa:f7:dc:e4:00:93:e5:
         a6:d5:af:a0:04:63:fc:30:94:9a:d5:53:76:21:98:91:1c:ac:
         52:7e:e9:07:5b:82:dc:4f:83:c9:e1:e9:24:c7:5a:99:a8:17:
         13:27:e8:2b:b6:e4:0a:f2:d5:47:16:be:dc:7c:57:9a:43:4e:
         a1:3e:14:7e:72:b0:32:bf:21:51:4d:0d:68:f7:56:35:0c:a3:
         03:61:7c:e7:78:0d:cb:ef:17:89:56:d8:67:65:80:e1:49:5f:
         50:60:e8:11:36:41:7b:0f:9e:70:4f:12:40:19:af:93:10:da:
         ee:e8:a0:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:43 2026 by rpki-client