Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9efaa64b-09ea-41aa-9b22-e30f66bc25c8.roa
File:                     9efaa64b-09ea-41aa-9b22-e30f66bc25c8.roa (raw, json)
Hash identifier:          IZz7IEj+CcQOUN9M/BVnIekHLkCjDr2UPtnppJ1qVuc=
Subject key identifier:   28:F3:51:E5:01:67:69:C2:4B:51:0D:C8:63:92:1D:7A:BE:F5:4D:07
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       49605ECC29F17B91252A9357897CD445993A53ED
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9efaa64b-09ea-41aa-9b22-e30f66bc25c8.roa
Signing time:             Fri 13 Feb 2026 01:51:36 +0000
ROA not before:           Fri 13 Feb 2026 01:51:36 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3380::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:60:5e:cc:29:f1:7b:91:25:2a:93:57:89:7c:d4:45:99:3a:53:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 01:51:36 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=59d8c3f42d964c964ab2f25adf02619838ca07ecfa3ce928499d47bae593b59f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:62:1b:94:ea:13:0a:0e:85:1e:77:26:0a:
                    b1:ab:28:72:53:a3:ba:d9:4f:c5:d6:74:77:24:e5:
                    fc:52:24:69:88:d0:eb:02:a4:7c:0b:46:ff:1d:08:
                    ba:a3:a9:ef:40:38:ff:61:cc:d2:f9:0b:d5:aa:de:
                    a9:38:6a:23:67:20:63:f2:08:bd:fe:8d:bf:25:13:
                    6a:49:2a:a9:15:d5:c4:16:6a:54:ee:c9:f2:8c:0c:
                    4d:09:d2:be:6e:5c:41:bb:11:c0:b9:33:4f:cf:64:
                    84:a3:6e:47:1a:e9:7d:2f:26:42:15:fd:01:43:17:
                    81:42:02:b4:4c:9e:1d:71:f4:81:25:95:88:83:90:
                    8b:69:e3:44:4e:e0:db:eb:5e:12:79:78:2f:69:b9:
                    b3:ce:41:69:68:24:b8:a3:ea:2c:f1:4b:83:f1:37:
                    bf:14:2c:3e:ef:91:30:e2:10:da:aa:ae:9a:e6:c8:
                    ee:70:8c:f2:65:22:a1:ab:c3:07:65:ac:1d:5a:9f:
                    88:e2:8b:00:85:a9:fc:9e:65:4c:e8:84:12:13:db:
                    68:90:e0:25:1c:b6:15:e6:0d:c8:ba:d3:1a:6d:42:
                    47:6e:89:ff:8f:da:e7:1b:c4:f3:ae:e8:0a:49:da:
                    05:7a:38:bb:bb:bf:43:87:4c:dc:cc:0f:d6:3f:6e:
                    34:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F3:51:E5:01:67:69:C2:4B:51:0D:C8:63:92:1D:7A:BE:F5:4D:07
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9efaa64b-09ea-41aa-9b22-e30f66bc25c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3380::/41

    Signature Algorithm: sha256WithRSAEncryption
         a7:cb:40:56:73:78:43:dd:0a:60:45:e6:42:da:88:ca:74:f4:
         21:86:ec:47:fd:ed:bb:2c:50:c7:42:a8:bb:70:d4:fc:a2:f8:
         14:72:fa:40:db:d5:93:b7:de:6b:ea:ce:8c:9f:8b:56:7f:44:
         99:e0:ce:1e:ac:fd:bc:eb:9f:29:6e:85:79:bc:a3:98:f3:b6:
         63:f7:1b:cd:e0:98:76:17:c3:94:64:56:dd:dc:5b:61:d4:6c:
         9a:a8:10:12:df:f2:17:94:34:54:75:1d:b7:a5:9c:43:2c:58:
         9a:37:27:86:5b:ca:70:97:8c:67:dc:69:04:a6:b7:d5:35:ff:
         e5:8a:68:6c:a0:57:f3:ff:a7:68:ca:29:70:2c:59:4a:55:9c:
         03:b8:3c:55:3a:dc:1c:18:63:fe:2d:9a:10:ea:06:93:54:0d:
         67:10:86:88:c8:2a:c0:d0:d3:66:69:62:23:35:20:77:66:af:
         44:f3:5e:40:7b:19:70:2b:13:e6:c1:0d:49:7a:3e:0e:de:da:
         7c:8f:93:17:cc:34:8a:b5:f5:b6:20:bb:d6:2f:89:c4:5d:db:
         18:38:07:4e:1d:23:85:bd:33:b3:94:e1:e6:c6:bf:87:23:d5:
         5e:90:8f:3f:a0:cd:61:9c:e2:3b:6e:09:a4:ef:96:a9:f9:b6:
         f6:9e:11:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:52:38 2026 by rpki-client