Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/86729061-d7d6-4707-937f-9cfea6e6b62a.roa
File:                     86729061-d7d6-4707-937f-9cfea6e6b62a.roa (raw, json)
Hash identifier:          a1eyDHMJLmV+XLhHGtzlPb0T5eFj4ZoXZ6FHboNjfPc=
Subject key identifier:   E4:45:C2:F6:E5:34:59:86:67:3A:4F:B3:94:0C:54:D5:A9:CC:D4:68
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       73B82B30F42DD85BBDEEB2DECA11A6E5E957E3AC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/86729061-d7d6-4707-937f-9cfea6e6b62a.roa
Signing time:             Fri 13 Feb 2026 09:42:09 +0000
ROA not before:           Fri 13 Feb 2026 09:42:09 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3cc0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b8:2b:30:f4:2d:d8:5b:bd:ee:b2:de:ca:11:a6:e5:e9:57:e3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 09:42:09 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=f67c980bb02a4281cb79e8402e358577bb7ce215f7a663a2321eed934bb0efaf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:27:b6:8b:cc:6c:1d:4d:5f:ac:d3:67:88:9a:
                    0c:07:c2:7b:4e:8f:68:10:fd:d8:44:9e:77:1a:92:
                    9a:59:85:63:1b:3d:9b:a9:3c:7b:40:71:e4:28:2f:
                    3c:33:b1:c6:5d:b6:90:ca:5d:02:11:50:46:8d:59:
                    6a:75:82:0a:24:67:54:08:e7:6b:52:f2:f5:3f:ca:
                    76:06:84:3b:eb:9a:b4:c8:43:67:03:3a:f1:75:32:
                    07:72:db:35:10:dd:89:72:fe:9b:93:89:35:b0:ce:
                    17:9c:d7:91:7f:bd:aa:31:12:38:11:d4:ee:8b:4a:
                    bb:b5:42:9c:4e:e9:75:47:f9:98:b5:f6:6b:1f:bc:
                    b3:57:de:3a:de:10:d6:2a:ff:6f:df:f8:83:bd:5e:
                    96:60:93:4e:98:b6:bc:8e:40:91:c4:70:35:cc:61:
                    09:b4:1e:1b:a4:ef:4d:3e:0c:ff:58:f4:c6:f7:29:
                    eb:eb:5f:e1:0b:f9:4c:a8:05:86:98:3b:17:5c:13:
                    09:69:05:6f:5c:09:a9:3e:15:5f:04:8d:02:85:52:
                    b0:4c:16:20:c1:a2:36:af:57:6c:c4:6c:1c:27:b7:
                    49:37:6e:99:b2:b4:2d:ae:bc:9c:44:9e:f1:eb:6e:
                    38:4b:23:f8:ab:15:b4:87:c2:56:89:70:8f:55:ba:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:45:C2:F6:E5:34:59:86:67:3A:4F:B3:94:0C:54:D5:A9:CC:D4:68
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/86729061-d7d6-4707-937f-9cfea6e6b62a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3cc0::/42

    Signature Algorithm: sha256WithRSAEncryption
         24:96:6b:52:82:09:f1:ab:a0:f0:5a:3e:29:04:c3:90:1f:50:
         02:dc:4b:98:61:c6:a0:cb:7b:ab:35:26:d0:7c:06:6e:3e:8b:
         7c:0e:bc:81:a6:99:99:2b:dd:61:ef:66:07:56:04:8c:3f:f9:
         18:07:1a:61:2b:30:0c:cc:a6:35:72:8c:6e:ed:df:4a:24:37:
         49:b6:39:24:d7:99:8f:cc:ea:41:21:3f:73:26:59:27:ab:6a:
         18:47:68:68:2f:e3:51:c1:22:2b:59:5b:67:3c:c1:28:6c:b8:
         4f:1f:d0:35:46:bd:16:e9:d9:da:5f:08:c5:f6:55:ec:3a:2b:
         26:01:19:e8:4c:90:15:2f:64:98:9d:af:98:df:8b:d1:51:b4:
         b1:f9:a8:8f:73:dd:67:7a:3b:5d:c3:c4:b2:a2:7e:5e:0d:84:
         5f:1c:9d:9f:bb:d1:3a:3b:20:94:2b:65:9a:e3:c8:7f:79:3f:
         85:e2:a6:4c:74:dd:41:c1:58:21:82:49:ef:27:77:06:89:00:
         5d:e1:08:11:c9:03:7a:87:a1:01:83:6d:03:b8:92:93:2c:35:
         ec:fb:9a:1f:05:bc:95:98:82:cf:00:24:e0:8a:8e:13:ac:bf:
         a0:46:50:ce:7a:48:56:3f:5a:7b:72:55:65:fa:9b:32:bf:d8:
         27:56:78:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:54 2026 by rpki-client