Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83b87d6f-7ec4-43b5-badf-0d24ec67bce5.roa
File:                     83b87d6f-7ec4-43b5-badf-0d24ec67bce5.roa (raw, json)
Hash identifier:          y2anTzvZg90x00FjwCy/MLEIenCd6NYMJYIzx+aEAmk=
Subject key identifier:   97:50:2E:7D:FB:F9:40:5E:52:9E:6D:BB:2F:05:B4:F7:97:00:49:AF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6571CCA750B59D5CDBAAE200050C8D9681252B5C
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83b87d6f-7ec4-43b5-badf-0d24ec67bce5.roa
Signing time:             Fri 13 Feb 2026 12:30:13 +0000
ROA not before:           Fri 13 Feb 2026 12:30:13 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:340c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:71:cc:a7:50:b5:9d:5c:db:aa:e2:00:05:0c:8d:96:81:25:2b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:30:13 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=20db9b9100e00b8320cbf62325beecb35114322833f2e36f3965668625811ebc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:a6:7d:c0:4e:22:c5:90:ed:36:c6:c0:28:
                    33:40:f4:8c:99:b8:d8:10:7c:08:41:4f:a3:40:5e:
                    bd:d2:ca:ba:b8:dd:85:40:3c:e6:18:eb:66:2a:d5:
                    d9:d7:09:04:dd:4b:bb:3a:85:f2:6b:77:47:ce:bf:
                    e0:d6:22:35:12:4d:44:43:87:9d:16:df:97:c5:b4:
                    8e:6f:6d:b3:73:55:8d:f8:15:86:f6:c0:ef:f2:3e:
                    d9:ef:9f:b1:08:63:b4:6f:2e:2b:28:1b:d5:3a:72:
                    a2:5d:e4:6c:c9:c3:aa:92:46:84:96:5c:6d:b9:43:
                    b0:f1:25:72:98:cb:82:cd:8c:9d:34:d3:4f:7f:88:
                    66:16:56:d5:22:0c:06:3c:9c:46:96:4a:a3:71:53:
                    0b:ef:6d:12:cc:f2:ed:02:49:85:dd:03:2f:3c:a7:
                    dd:ce:76:8f:19:88:6d:ae:d8:87:0d:a2:63:a1:b7:
                    67:f4:25:a5:32:d8:a7:c1:33:9e:8d:fe:fd:ff:e1:
                    05:4f:24:4f:ff:37:35:93:88:b3:d9:bc:c2:a4:32:
                    49:e5:c3:22:4b:c2:4b:39:d0:30:e9:47:8b:73:1f:
                    86:1f:53:98:22:a2:ce:9a:c9:2a:73:a0:ac:65:59:
                    f4:24:ee:e4:9d:24:23:09:fd:6d:68:99:ea:f8:f2:
                    85:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:50:2E:7D:FB:F9:40:5E:52:9E:6D:BB:2F:05:B4:F7:97:00:49:AF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/83b87d6f-7ec4-43b5-badf-0d24ec67bce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:340c::/46

    Signature Algorithm: sha256WithRSAEncryption
         29:2a:5d:08:af:0e:8e:d3:ea:28:c6:59:b3:e6:f7:c4:4d:60:
         47:bb:62:2a:d0:08:cc:29:2d:f5:71:0f:12:25:16:e9:e3:65:
         5c:29:9e:80:30:72:d1:9d:63:c2:8c:7f:fb:f9:a0:92:53:e6:
         73:5f:36:e9:9b:cb:32:9f:36:8f:b3:bc:e3:1a:fa:37:0f:76:
         8a:83:9d:2a:e7:5c:0a:66:db:05:8d:08:39:50:e6:23:69:d5:
         52:fb:bc:eb:2a:78:b0:77:3c:c2:c2:9c:54:15:81:ee:93:a0:
         c8:b0:10:7d:5e:c3:fe:07:25:1a:f6:0e:b3:2a:3d:44:72:e7:
         0e:e4:b6:e3:f8:4b:10:ce:59:07:11:3a:5b:ff:c3:54:ca:84:
         c0:f5:dc:7e:9d:f0:a4:54:49:d2:c8:ad:d3:2a:e0:90:8c:96:
         a4:32:3b:7f:69:a8:61:90:80:17:63:7c:04:38:25:ea:96:b2:
         36:7e:28:a3:59:88:64:92:97:30:6c:a2:45:17:54:60:4d:a2:
         ea:08:91:80:c8:cf:89:af:17:3f:0c:e0:89:59:b3:26:9c:a9:
         15:b9:80:23:31:58:2a:81:57:60:9f:c6:0f:18:19:eb:38:aa:
         38:2a:4c:ed:b0:44:a7:e7:2f:06:c5:3a:80:09:ef:86:93:78:
         d6:40:ea:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:33 2026 by rpki-client