Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bf74ec6-c3ea-4423-8003-8537bab6d3f4.roa
File:                     7bf74ec6-c3ea-4423-8003-8537bab6d3f4.roa (raw, json)
Hash identifier:          O3PqVBdWztHjQ/8OzBBcbNh/xwS5DCixdzOldIaR0O0=
Subject key identifier:   7E:A3:D0:25:B7:62:C6:98:E9:25:48:A6:FD:8C:72:1B:72:0D:07:9A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0FA9D4DE79B719137EB20150E305F7759B66497C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bf74ec6-c3ea-4423-8003-8537bab6d3f4.roa
Signing time:             Thu 12 Feb 2026 00:30:17 +0000
ROA not before:           Thu 12 Feb 2026 00:30:17 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:28e6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a9:d4:de:79:b7:19:13:7e:b2:01:50:e3:05:f7:75:9b:66:49:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:30:17 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=a997ae32abbdfc96725882f020806448ae6e313e24bec010f8115cecdb8ce062, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:17:a8:77:55:58:75:2b:c0:b0:8f:81:a2:
                    f3:60:6e:15:78:8e:9b:e8:21:68:ad:07:82:3f:7e:
                    81:21:b9:5e:ec:7e:a9:7a:08:cc:15:4e:73:34:37:
                    1c:a5:b0:a5:77:3e:62:d2:54:6b:e5:61:e3:66:75:
                    06:9b:04:8d:65:0e:9a:a0:7b:8d:80:e1:f2:44:eb:
                    a2:97:40:22:74:24:d5:53:77:64:ee:bc:e9:dc:90:
                    7e:ab:9e:61:6b:50:a3:b0:73:a1:c1:2f:02:00:30:
                    50:53:6c:5f:d7:95:fb:ab:74:b0:bc:78:14:0e:97:
                    76:79:9c:89:5f:71:45:e2:4d:73:62:72:15:cf:fb:
                    aa:99:b6:a0:7a:12:d9:de:33:1d:95:98:e5:67:31:
                    2f:44:c6:ea:28:53:dc:0b:18:6a:52:12:b4:1c:e3:
                    ac:cd:fa:df:bc:aa:b6:76:d1:6d:6f:9f:82:7b:81:
                    21:33:37:69:a3:2a:40:35:90:c0:9d:03:d4:dd:2e:
                    49:03:91:35:50:ea:75:62:63:30:10:5f:fd:a9:58:
                    58:63:80:6e:88:ef:0c:fd:96:17:c4:5e:5a:63:46:
                    30:8e:df:bf:82:46:fa:f6:a3:98:e9:48:91:fc:2a:
                    f2:b2:37:56:6b:8a:68:bf:8c:f4:83:7f:33:d6:7c:
                    e0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A3:D0:25:B7:62:C6:98:E9:25:48:A6:FD:8C:72:1B:72:0D:07:9A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/7bf74ec6-c3ea-4423-8003-8537bab6d3f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:28e6::/47

    Signature Algorithm: sha256WithRSAEncryption
         a8:8e:32:e4:8d:ab:3f:e0:a1:d0:b6:01:b0:22:86:fa:e6:43:
         08:31:fd:4c:31:98:d2:ea:07:72:92:c4:cc:87:60:0d:6d:f4:
         7c:d8:53:8a:b2:2e:ff:c0:2b:84:49:36:51:c3:cb:93:0b:21:
         9b:a9:6b:41:46:5c:d0:9a:1a:8b:20:47:42:ea:c9:c7:47:a3:
         89:12:31:1d:f3:b2:c5:0c:01:d0:bc:6f:1d:74:41:0e:d4:a7:
         ce:e7:07:bf:3f:a8:58:7f:f6:97:47:37:d9:9b:10:0c:ee:08:
         97:1e:d5:7f:d5:69:e1:fc:89:6d:4f:a1:66:51:7a:45:ff:ba:
         13:7e:a6:2a:2a:35:d0:22:66:82:f3:e9:35:ac:f9:9a:53:7b:
         8a:89:0f:75:fc:70:e5:f0:72:71:04:22:06:0f:d8:95:f8:1a:
         0f:e8:5d:52:dc:99:83:80:85:b1:c1:26:05:59:83:34:78:03:
         da:78:08:57:43:6a:38:d7:e1:b9:d5:81:6e:2c:a3:5d:cf:c9:
         7d:2a:f3:93:d9:6a:3a:43:b6:48:a1:88:e1:26:ca:37:eb:a0:
         aa:4f:0a:87:11:29:08:6b:6f:22:d2:f1:00:5c:6a:c9:ba:9d:
         41:b4:ca:db:45:05:d0:db:89:ea:19:3f:52:0e:2f:bb:87:eb:
         4c:24:36:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:13:20 2026 by rpki-client