Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b32a1e5c-eaf1-4fd8-8204-a3804134863a.roa
File:                     b32a1e5c-eaf1-4fd8-8204-a3804134863a.roa (raw, json)
Hash identifier:          fVNcKLQAKSsUg/SZO6M4UPlGq3sG/YOQYOsS64Apc44=
Subject key identifier:   42:FE:9B:08:5C:EF:1F:1E:B1:8B:4B:0A:A0:84:EE:B0:E4:DD:23:5F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1FB29A78B327CC49D98FE560395CA96B08B03166
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b32a1e5c-eaf1-4fd8-8204-a3804134863a.roa
Signing time:             Fri 13 Feb 2026 01:32:00 +0000
ROA not before:           Fri 13 Feb 2026 01:32:00 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:35a8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b2:9a:78:b3:27:cc:49:d9:8f:e5:60:39:5c:a9:6b:08:b0:31:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 01:32:00 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=29f41924f2dded98f88713bb548dc406ec221569ea533cd04a85e18e7c672adb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:61:59:77:f4:4e:98:32:69:fa:8d:09:59:ae:
                    f6:8a:61:c9:7e:d8:5b:e4:d2:a7:97:b9:a6:9e:b1:
                    06:e1:d0:62:5b:c1:fb:af:93:96:12:94:cf:68:f0:
                    6a:e5:56:a0:65:64:80:aa:6c:f9:11:b0:64:99:15:
                    6d:7b:ec:8b:28:17:98:3a:bd:b7:94:b7:cb:a5:ef:
                    0f:79:24:86:26:bd:a9:db:65:40:67:8d:c4:00:c1:
                    9a:4f:df:f7:e3:e9:91:3a:ba:bc:29:1a:ab:e9:3f:
                    7c:b1:5b:a0:ed:63:e8:7c:6f:b7:b2:12:3a:77:52:
                    49:d7:73:05:54:81:cc:36:ff:64:6e:16:3e:9e:4d:
                    1a:9a:38:7c:fa:f9:2a:82:3e:13:f9:65:e6:4e:83:
                    da:36:96:d0:29:27:a9:6a:37:9f:c9:b7:e1:1d:96:
                    84:20:10:fe:5e:d1:f7:f8:5c:07:6b:0f:50:4d:5b:
                    9c:d6:11:2a:5b:4b:30:0f:b2:9e:e3:75:42:77:6a:
                    da:2a:48:0c:a5:67:0a:78:65:35:ea:a6:a1:10:b4:
                    fd:25:43:97:30:8e:21:a4:69:33:95:21:14:ce:f7:
                    ab:34:ae:f8:ff:49:a8:97:7b:05:9d:ca:97:73:b1:
                    33:c4:ee:d5:07:39:67:1f:17:5f:ef:cc:7c:06:4b:
                    d7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FE:9B:08:5C:EF:1F:1E:B1:8B:4B:0A:A0:84:EE:B0:E4:DD:23:5F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b32a1e5c-eaf1-4fd8-8204-a3804134863a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:35a8::/46

    Signature Algorithm: sha256WithRSAEncryption
         93:95:fc:31:22:f8:af:f5:12:4a:df:47:b7:c2:c5:6c:28:d2:
         ed:e0:55:93:fd:a4:65:47:bf:a0:21:bc:02:9c:12:90:40:c7:
         77:71:23:4d:e8:df:f6:49:34:cd:77:52:6e:f0:dc:fc:3c:80:
         0e:74:3b:3f:af:47:d2:df:d6:84:ce:c9:03:68:b8:da:33:1a:
         ca:6b:ac:59:fe:48:d4:59:1c:19:ff:8d:7d:85:34:f3:d8:cd:
         e6:90:d7:e3:f4:29:57:a7:e0:55:31:1a:91:3a:d1:31:82:83:
         6a:b6:05:38:05:80:30:d0:7c:92:42:e9:7b:16:3f:d0:5f:bf:
         b0:87:25:ca:7e:3c:e5:aa:6f:07:cb:df:53:da:04:fd:2e:ee:
         46:e3:01:d8:2b:24:87:23:6e:1a:e9:06:1b:81:ed:b4:31:30:
         9e:ce:02:a2:5b:4f:ab:67:9e:8d:d2:c3:b2:0d:5e:dc:68:75:
         c2:92:4b:e5:a3:0e:d1:f0:0f:fc:a4:b9:ce:54:5f:24:56:e0:
         c8:41:85:cb:8f:1d:fb:3c:c4:b5:98:aa:d5:13:81:d1:d7:61:
         a1:48:fa:5d:7b:71:ce:ee:5c:68:d8:78:e1:c0:e8:f8:a0:d8:
         d5:b7:6d:ff:65:d4:bf:8f:eb:34:37:21:af:e4:0e:67:df:a6:
         83:12:7b:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:50:57 2026 by rpki-client