Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b8e2c71f-ab00-4d55-9c25-1bbda6e23a35.roa
File:                     b8e2c71f-ab00-4d55-9c25-1bbda6e23a35.roa (raw, json)
Hash identifier:          mhgqwGTXJ3XmCAHP1pZPDbeee0m+kJLwEqdOUv5hYRc=
Subject key identifier:   52:7B:2B:4C:E8:C3:DD:9A:22:14:CF:22:F9:3E:42:01:C9:4E:51:8F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5FBA8947C685330B2626C3054D3E6D39B50701AF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b8e2c71f-ab00-4d55-9c25-1bbda6e23a35.roa
Signing time:             Fri 13 Feb 2026 11:10:06 +0000
ROA not before:           Fri 13 Feb 2026 11:10:06 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3576::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ba:89:47:c6:85:33:0b:26:26:c3:05:4d:3e:6d:39:b5:07:01:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 11:10:06 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=95e215f6dd47d7642c5f404c40c21c9d965d57bb48496467a8878d15e0ae00c7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:63:d5:c1:93:67:e8:c4:de:31:a6:dc:3b:5a:
                    d9:e0:a8:fe:2d:c3:d1:63:4d:56:ee:ff:31:52:cc:
                    f7:38:59:77:05:51:47:09:80:57:1b:38:83:8b:f0:
                    f4:04:7f:67:b1:47:a9:da:2f:ef:ce:c6:b4:57:6a:
                    6e:e3:6c:dc:e0:b1:91:17:f9:47:c0:07:d4:ee:7f:
                    64:5c:f0:12:fb:59:74:02:2b:31:77:3a:0d:5c:00:
                    b3:d0:39:46:25:d2:c6:c5:47:25:9a:32:ca:cd:94:
                    7b:61:d0:1f:a1:84:2d:fa:29:b5:47:d5:e9:c3:e4:
                    8e:24:eb:8c:86:21:36:36:7c:e5:72:be:ec:54:ba:
                    a4:b5:d8:ff:d0:6b:0d:6e:5c:a7:07:c0:e4:08:83:
                    8d:87:41:2c:01:f5:41:19:e9:a5:e4:3a:94:73:72:
                    65:dc:7f:e3:b2:2f:17:41:63:b8:64:b0:93:05:fe:
                    e3:d9:18:69:be:ca:58:ca:23:95:c6:0d:c7:e6:12:
                    40:64:16:42:ad:1f:4a:d8:96:4b:95:fe:39:ad:2b:
                    bc:31:ee:6c:f5:68:49:3a:b3:c6:5f:c8:c9:5f:4a:
                    11:ca:9a:3e:53:3d:9f:21:8d:01:54:a2:4e:71:4e:
                    a0:ef:4c:6d:72:6c:a6:c5:2a:de:fb:d2:d0:db:ac:
                    b0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7B:2B:4C:E8:C3:DD:9A:22:14:CF:22:F9:3E:42:01:C9:4E:51:8F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b8e2c71f-ab00-4d55-9c25-1bbda6e23a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3576::/47

    Signature Algorithm: sha256WithRSAEncryption
         35:8d:a3:92:fe:12:c7:cb:22:dd:1d:98:36:d8:c1:9d:f2:ab:
         ab:ee:4f:a3:6c:7c:5b:bc:e4:65:c5:29:e6:2f:74:c5:93:d1:
         89:1a:2d:c0:1f:e6:81:ac:be:9c:5b:b3:e3:2a:85:69:b7:7c:
         03:2a:e5:ef:1d:f9:49:7e:97:89:8c:f2:9b:ca:8d:4b:69:5c:
         c3:c0:fe:a6:f0:2a:ad:2f:af:59:f5:4b:75:28:8d:29:af:47:
         df:d6:f4:77:aa:05:ee:af:c8:b0:c8:93:67:18:15:b0:60:dc:
         92:55:3c:f3:0d:12:4a:9e:b0:b6:4b:78:72:8c:61:80:a0:4f:
         94:f6:cf:39:6e:1f:ae:15:90:8b:89:d6:66:c9:f5:f0:2a:36:
         e8:d2:a3:9b:a7:d7:ce:3d:13:89:46:be:be:60:de:dd:80:24:
         f0:ad:51:35:7d:76:3c:ed:28:73:d9:46:b6:f8:44:e0:7d:b6:
         b3:24:33:30:49:f1:b7:b5:d0:bb:fe:94:b4:60:b1:7e:d6:71:
         6e:d1:07:16:56:99:7d:31:2a:7e:e0:ee:1e:9f:93:48:c2:c7:
         c4:eb:03:be:52:02:66:c8:9f:23:cc:3e:b0:02:e2:96:03:61:
         bb:54:33:69:fe:ce:79:40:d6:cc:fa:04:b1:37:b2:34:7d:fe:
         f0:6b:85:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:10:04 2026 by rpki-client