Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ccbd082-0ef8-4c68-8182-4153fc5e2276.roa
File:                     8ccbd082-0ef8-4c68-8182-4153fc5e2276.roa (raw, json)
Hash identifier:          hH5eSY6aAHWHecpBM3nofbf5w1LBLzxgp9n6BJVQ8Yg=
Subject key identifier:   26:61:B0:FA:93:9F:EA:5D:33:C2:80:AE:A3:E1:19:84:68:BE:32:DB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       392385BC78712115750ADD65644A4155A2BE7565
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ccbd082-0ef8-4c68-8182-4153fc5e2276.roa
Signing time:             Fri 13 Feb 2026 06:42:13 +0000
ROA not before:           Fri 13 Feb 2026 06:42:13 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:24a0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:23:85:bc:78:71:21:15:75:0a:dd:65:64:4a:41:55:a2:be:75:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 06:42:13 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=4ddd7efab4d1330ba7f30507ac48018d13ae85b6ab8f798bb897e2db6c2073c7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:e9:a5:19:8a:e0:3d:71:75:f2:c3:86:a3:
                    6c:c2:00:2b:73:e8:ba:74:b1:4f:c5:0e:be:5f:09:
                    29:54:b9:5d:36:23:87:41:19:cc:68:3d:d0:d1:4b:
                    51:ea:1c:2d:3c:bf:03:71:3a:aa:fe:28:86:a5:74:
                    4f:e2:78:e8:6e:0a:83:1f:4b:28:43:02:e2:d8:c3:
                    11:e5:f7:27:d6:99:90:4c:93:00:5c:a9:0f:9b:50:
                    85:11:46:57:96:fd:c1:8c:7a:32:a5:ad:e2:72:6d:
                    13:99:9c:3d:45:a1:17:a7:5b:de:b9:ab:ce:9c:72:
                    89:35:b5:85:f2:7f:eb:f5:86:f4:a6:39:06:4b:44:
                    b0:aa:0e:e9:ee:ab:46:7b:7e:c0:18:df:c7:f4:ab:
                    1f:ca:6b:7b:09:92:f7:c6:ce:69:6c:ac:74:d6:6b:
                    7b:4a:ec:81:86:70:99:46:72:f9:8b:52:19:5e:87:
                    05:5f:ec:39:1f:40:27:16:5f:4e:ad:72:b7:a0:51:
                    cc:16:9b:ba:30:ef:ad:26:4b:72:0c:6d:d6:54:d3:
                    98:3e:de:ca:ac:8f:26:cf:21:99:f1:65:7f:4a:e2:
                    a1:f7:72:2e:14:bb:cf:28:7e:0e:b7:12:20:6f:b3:
                    d2:5d:10:a2:2b:04:f1:a7:4f:32:8c:b2:01:bc:c4:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:61:B0:FA:93:9F:EA:5D:33:C2:80:AE:A3:E1:19:84:68:BE:32:DB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8ccbd082-0ef8-4c68-8182-4153fc5e2276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:24a0::/43

    Signature Algorithm: sha256WithRSAEncryption
         40:d0:ff:aa:b7:7e:de:65:f6:d4:83:26:0f:c7:f2:9c:d3:33:
         3c:ad:d2:96:87:d3:8f:72:8f:4b:5f:6f:00:fc:47:f6:09:a2:
         ed:79:21:5a:01:53:4b:47:42:eb:08:d8:e7:3d:d3:b4:f0:ab:
         cf:cb:12:f6:7e:14:49:62:3e:01:5f:04:1c:f3:73:60:3b:df:
         fa:b1:86:a4:4b:42:5c:ce:d1:6f:74:a9:8c:8a:de:12:61:cb:
         b7:91:3a:4c:4d:85:fa:1e:15:76:bd:9b:33:10:7d:19:97:d9:
         63:70:a6:a7:a2:cd:2c:c0:76:9e:37:70:47:e3:ea:36:a2:5c:
         f4:04:59:4e:3f:2d:55:42:74:4b:64:98:c5:fb:f6:1c:79:49:
         50:71:84:c8:75:56:80:4f:59:67:c9:3e:bb:45:0a:06:f3:bd:
         1f:01:32:0c:f0:6b:c9:b0:48:27:3f:13:7c:6f:6d:16:a8:9c:
         7b:8f:67:40:0e:69:fb:b0:ff:83:ac:79:cd:88:01:5c:68:17:
         df:d4:ee:8b:ea:30:a0:27:52:2c:6f:ca:37:13:7d:fb:92:9b:
         54:a1:48:72:c2:4c:3e:fd:9a:2f:e4:a3:8a:5a:36:90:32:27:
         43:09:a8:15:28:45:ce:61:75:23:ab:d5:e3:1d:a9:77:0b:5e:
         fa:75:59:66
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUOSOFvHhxIRV1Ct1lZEpBVaK+dWUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjYwMjEzMDY0MjEzWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZGRkN2VmYWI0ZDEzMzBiYTdmMzA1MDdhYzQ4MDE4ZDEz
YWU4NWI2YWI4Zjc5OGJiODk3ZTJkYjZjMjA3M2M3MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjaumlGYrgPXF18sOGo2zCACtz6Lp0sU/FDr5fCSlUuV02
I4dBGcxoPdDRS1HqHC08vwNxOqr+KIaldE/ieOhuCoMfSyhDAuLYwxHl9yfWmZBM
kwBcqQ+bUIURRleW/cGMejKlreJybROZnD1FoRenW965q86ccok1tYXyf+v1hvSm
OQZLRLCqDunuq0Z7fsAY38f0qx/Ka3sJkvfGzmlsrHTWa3tK7IGGcJlGcvmLUhle
hwVf7DkfQCcWX06tcregUcwWm7ow760mS3IMbdZU05g+3sqsjybPIZnxZX9K4qH3
ci4Uu88ofg63EiBvs9JdEKIrBPGnTzKMsgG8xER5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJmGw+pOf6l0zwoCuo+EZhGi+MtswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzhjY2JkMDgyLTBlZjgtNGM2OC04MTgyLTQxNTNmYzVlMjI3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwUmAJAAJKAwDQYJKoZIhvcNAQELBQADggEBAEDQ/6q3ft5l9tSDJg/H8pzT
Mzyt0paH049yj0tfbwD8R/YJou15IVoBU0tHQusI2Oc907Twq8/LEvZ+FEliPgFf
BBzzc2A73/qxhqRLQlzO0W90qYyK3hJhy7eROkxNhfoeFXa9mzMQfRmX2WNwpqei
zSzAdp43cEfj6jaiXPQEWU4/LVVCdEtkmMX79hx5SVBxhMh1VoBPWWfJPrtFCgbz
vR8BMgzwa8mwSCc/E3xvbRaonHuPZ0AOafuw/4Osec2IAVxoF9/U7ovqMKAnUixv
yjcTffuSm1ShSHLCTD79mi/ko4paNpAyJ0MJqBUoRc5hdSOr1eMdqXcLXvp1WWY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:00 2026 by rpki-client