Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/974c641f-4a3f-4ba1-bf18-6a6c483ec39f.roa
File:                     974c641f-4a3f-4ba1-bf18-6a6c483ec39f.roa (raw, json)
Hash identifier:          NmOkSiX0G0xc/C/una+6tZK7PLmNWq/zgMx5Jpq7fBc=
Subject key identifier:   E4:D4:71:28:BC:A5:92:7A:CE:37:AC:3B:01:10:A3:58:10:E2:48:33
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       79E93D2111DB96C9EFCF0607A915F005102A4690
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/974c641f-4a3f-4ba1-bf18-6a6c483ec39f.roa
Signing time:             Fri 13 Feb 2026 07:31:36 +0000
ROA not before:           Fri 13 Feb 2026 07:31:36 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2bb0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e9:3d:21:11:db:96:c9:ef:cf:06:07:a9:15:f0:05:10:2a:46:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 07:31:36 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=0692419ca7b8cd8329eae5b09e7a7578b0122ca1eaf5d3292ccefc72d4e6aeac, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:61:1a:7d:63:9b:39:e4:34:96:ff:73:fc:
                    dc:13:e2:0d:c0:71:8c:91:4b:e0:1e:20:d3:97:30:
                    db:13:41:e9:43:60:0a:69:a4:2d:af:a1:b8:ab:c3:
                    2f:d0:1e:d9:dc:80:72:ff:11:26:12:fc:a4:8b:3c:
                    26:d6:29:7d:48:66:20:59:5d:d8:6c:8a:2b:74:c1:
                    67:8b:ca:58:4a:03:7a:3e:99:be:7b:dd:a1:22:42:
                    6f:54:2c:5e:bd:78:37:21:62:4f:32:de:63:4a:ab:
                    34:8f:e9:10:ca:5f:5e:e9:1b:e1:a6:7a:57:6d:89:
                    b8:0d:0d:c8:64:87:ad:e2:fa:19:70:36:68:19:d1:
                    38:f1:a3:f7:a0:0d:06:bf:4e:b5:e0:c7:26:6c:8c:
                    ce:f4:5e:8c:85:59:23:25:0d:5a:b6:bf:47:a5:a8:
                    91:2a:be:3f:e4:b3:f2:45:f1:b9:bf:0c:3a:f8:82:
                    4b:3d:aa:db:a0:a0:28:3c:04:85:e8:05:94:0c:91:
                    1b:37:1f:88:83:57:1a:3f:56:57:21:49:31:8c:81:
                    bd:06:8c:1a:c7:f0:75:ed:74:41:9a:7b:6e:db:42:
                    5b:2b:37:65:71:d0:dd:ab:9a:10:93:b3:74:3b:4a:
                    9a:2e:da:1c:df:6f:d1:2f:e0:6b:ed:2c:f5:f1:d0:
                    ca:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D4:71:28:BC:A5:92:7A:CE:37:AC:3B:01:10:A3:58:10:E2:48:33
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/974c641f-4a3f-4ba1-bf18-6a6c483ec39f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2bb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         bf:86:84:c5:73:0e:73:34:07:38:d5:65:69:9a:1e:cf:78:0f:
         21:cf:88:33:dd:2f:f6:ba:c4:d8:19:fd:2b:17:44:34:9d:15:
         56:3b:3d:82:8c:ba:d2:d1:c6:6f:26:57:dc:70:96:a7:a2:fc:
         da:a6:28:7a:5f:cf:4d:d3:49:2d:83:d4:10:20:59:1c:dc:50:
         c4:28:95:a8:dc:17:d1:a6:07:71:d8:5a:01:88:c4:e3:ac:1d:
         45:40:da:e5:e4:5e:a8:26:d4:4b:8f:88:1a:90:70:9d:ec:b7:
         7e:18:a6:02:f8:38:38:dd:e6:98:45:4e:d1:6a:a0:a6:c6:8d:
         5d:98:a3:9a:df:55:b9:87:67:1e:1c:73:59:8e:c7:79:1c:56:
         54:c3:fb:16:0c:b3:a3:f2:c9:40:a6:51:d7:38:5a:92:4e:07:
         13:cd:b6:db:ab:8c:47:5f:8d:ca:fe:41:03:07:79:4e:40:98:
         d6:84:37:5e:cd:a1:c6:ec:79:77:7c:69:04:96:f8:38:48:a2:
         98:08:33:37:39:d1:5e:6f:99:75:6e:53:79:aa:c3:9b:ba:0b:
         ec:df:64:61:13:8b:e6:ca:e1:73:a3:46:45:2f:fa:1b:62:80:
         6c:98:7a:89:b8:e5:fc:2f:09:2b:d9:8b:6a:b0:bc:90:1b:31:
         19:ef:bb:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:31 2026 by rpki-client