Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b54f543c-3c1c-4179-a9a3-c1482194a387.roa
File:                     b54f543c-3c1c-4179-a9a3-c1482194a387.roa (raw, json)
Hash identifier:          Hh7c0zEsPtDR21/8NnrGwx36nukscY6rup1NpkXnxWk=
Subject key identifier:   F2:46:D0:9B:16:C4:7E:F0:28:39:91:18:B1:64:50:2C:2A:A0:84:2B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       69077F03B892467C1159A25E146D801571A806A3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b54f543c-3c1c-4179-a9a3-c1482194a387.roa
Signing time:             Fri 13 Feb 2026 13:11:42 +0000
ROA not before:           Fri 13 Feb 2026 13:11:42 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:27e8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:07:7f:03:b8:92:46:7c:11:59:a2:5e:14:6d:80:15:71:a8:06:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:11:42 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=3e0ffc7763449d35996165f687a712099ceb2e7363b782a4674041da18232552, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0a:bc:1e:ec:e4:2a:80:e7:41:d4:aa:e9:d0:
                    2c:a5:08:19:10:57:3f:7b:34:98:f4:51:4c:3f:53:
                    72:90:03:1d:89:97:d0:b2:3a:e2:4f:f0:02:1e:76:
                    5a:7e:68:16:0a:27:d2:e4:89:2c:16:ad:e7:6f:91:
                    a5:56:ac:10:a5:44:a4:b6:74:10:45:d4:29:20:fc:
                    f9:91:64:f8:09:4a:d4:3e:54:19:fe:0e:ad:3a:1c:
                    89:54:82:7a:b5:4d:7a:8b:34:e6:e2:05:29:67:20:
                    5e:d6:af:be:c7:f5:62:ac:5a:d8:62:17:ba:a0:24:
                    b6:24:18:bf:02:7a:c1:3f:26:9e:0d:8d:50:0b:c0:
                    90:4f:44:4c:ed:a6:2c:b6:ee:99:5b:cf:c2:30:a8:
                    f8:a4:00:3e:04:62:fc:2a:d8:3e:fc:71:53:89:bc:
                    d2:9f:6b:f7:ff:bf:ec:bc:31:1d:70:7b:a7:7b:3b:
                    03:a1:f6:94:79:8c:43:3e:8e:55:bb:2a:34:c0:7a:
                    8d:a2:09:81:fb:7d:fe:95:53:26:ca:1b:8b:32:2e:
                    da:44:7c:e8:af:20:77:99:8d:bf:3a:8b:06:b8:0c:
                    6b:af:db:65:0b:d4:23:bf:06:3e:73:39:f0:ef:ff:
                    1d:67:1d:2f:72:00:b6:6c:f5:8d:75:c2:99:3a:4c:
                    12:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:46:D0:9B:16:C4:7E:F0:28:39:91:18:B1:64:50:2C:2A:A0:84:2B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b54f543c-3c1c-4179-a9a3-c1482194a387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:27e8::/46

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:d4:f7:c7:17:b4:ce:37:84:e9:3d:fd:5b:0a:e1:62:09:
         9b:b5:96:d1:5f:d2:a9:04:8e:5f:15:a1:19:58:69:1b:4a:94:
         71:86:2c:a6:20:bf:3c:06:d9:ce:67:ae:33:d1:52:f8:50:df:
         ec:b6:83:fc:e4:7d:ef:45:b4:3f:6a:30:4f:ca:d2:4b:6d:b9:
         b8:2a:7f:40:bc:f3:34:f0:51:40:63:6e:14:b2:c7:4b:e6:69:
         0a:ef:a7:aa:b8:85:53:05:06:6b:bd:15:b1:a4:80:de:af:8d:
         f1:44:40:6e:da:c6:b6:75:10:e1:ba:85:65:a7:df:f6:77:ba:
         a2:f3:b3:9b:73:ec:2b:f6:d2:13:f2:5a:b7:54:43:a9:a6:c6:
         be:79:b6:aa:b9:40:04:83:cd:35:b9:4c:d1:34:0c:f3:48:b1:
         c5:46:d3:84:e0:53:06:5a:38:a8:b4:53:8b:33:0a:93:44:72:
         35:79:1b:64:f5:f2:b2:3d:68:b8:81:f5:df:c1:90:d7:7c:66:
         64:65:18:13:10:47:34:2f:fc:6e:30:e9:5c:db:bc:63:85:26:
         87:84:5c:03:67:03:a2:67:78:39:c6:5e:71:6c:f5:33:aa:08:
         99:2d:51:d9:83:aa:52:e4:ad:f4:28:87:97:3c:f8:0d:6f:71:
         83:f0:c4:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:28 2026 by rpki-client