Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9cc3373-4570-446f-a60a-c731cc1e9e29.roa
File:                     b9cc3373-4570-446f-a60a-c731cc1e9e29.roa (raw, json)
Hash identifier:          fL7IoTmhmO23+6ROAHrq0Bf1I8LgG+MKzHz2JRBw/3I=
Subject key identifier:   3F:4D:2B:F7:1A:CE:E8:5C:DA:F4:97:E3:1E:60:61:66:BA:33:DF:7E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6028CEB561A5CCBD3F298731AE67F1D0C6EF641E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9cc3373-4570-446f-a60a-c731cc1e9e29.roa
Signing time:             Fri 13 Feb 2026 13:50:12 +0000
ROA not before:           Fri 13 Feb 2026 13:50:12 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fb0::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:28:ce:b5:61:a5:cc:bd:3f:29:87:31:ae:67:f1:d0:c6:ef:64:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:50:12 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=002b121503fa6e7a6aa4d847e14b45e22c68b8cf75599871bb6390836a958bd9, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b3:31:5b:ba:61:d3:2b:89:ad:7a:ce:ae:25:
                    39:c5:b5:88:33:8d:86:9a:c2:bf:75:3f:30:45:f6:
                    13:7f:89:e4:39:ff:3e:43:f7:93:91:b3:4a:f2:d6:
                    af:6a:18:27:48:60:9a:fb:af:e0:ff:be:7e:10:8e:
                    7b:6c:65:01:ca:b0:bc:86:a0:22:61:31:2f:fc:be:
                    b0:2a:cd:cf:af:b9:e1:eb:ab:13:f0:39:15:ed:f7:
                    01:ec:8b:fa:f5:12:c9:a2:1d:fb:ca:01:b1:c8:c6:
                    79:32:67:1f:1e:8b:d2:02:6f:9d:0e:4b:b5:0b:93:
                    e9:17:42:f5:83:2e:43:27:e0:36:89:0e:74:86:52:
                    19:20:71:70:a5:bf:1d:4d:94:72:44:29:ad:99:8b:
                    c8:b9:33:c9:1c:c2:f8:98:10:a3:11:48:8d:f5:dd:
                    23:01:0f:16:13:cc:fe:60:b2:43:17:5f:c4:4e:ae:
                    ce:46:53:72:c7:ec:fb:59:69:af:0a:b4:ea:32:3f:
                    53:8e:d3:6f:a2:8e:b9:b1:74:9b:e4:1e:d7:00:77:
                    8c:03:5a:ee:9d:9c:d8:c0:7e:7b:5e:e6:43:ff:20:
                    01:d3:ca:e8:4e:fb:9a:a9:ef:e8:4d:72:3c:28:34:
                    cb:2d:fd:57:35:d6:45:77:c8:92:57:dd:34:1b:68:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4D:2B:F7:1A:CE:E8:5C:DA:F4:97:E3:1E:60:61:66:BA:33:DF:7E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9cc3373-4570-446f-a60a-c731cc1e9e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fb0::/45

    Signature Algorithm: sha256WithRSAEncryption
         35:18:55:66:71:e1:08:bb:25:01:96:2d:a0:b4:69:07:2c:b0:
         93:1f:c8:b1:d6:8f:97:d1:d2:fc:2d:71:7b:fe:53:ff:c6:29:
         21:52:84:da:a3:c6:c6:b4:b4:7f:db:8d:b4:e7:97:00:cd:5a:
         59:93:fd:e3:73:10:8c:a0:ae:a5:e2:d8:f5:7f:26:82:ab:60:
         88:a1:d8:a1:0f:9f:1f:da:7a:db:ae:38:6c:a4:99:90:76:8e:
         5c:65:d8:2d:fa:5e:18:90:99:fd:42:9d:ef:3f:38:ad:08:ad:
         54:cd:ad:6a:14:43:3a:df:06:34:68:06:33:a5:e2:c6:fe:61:
         47:fe:01:c5:23:56:01:66:3e:14:df:36:98:b2:16:19:3a:65:
         1f:91:90:05:57:f8:20:77:6c:dc:eb:fd:71:09:4f:75:b1:18:
         6d:2f:2f:66:01:22:8f:ee:66:e6:dd:12:26:1a:a0:e1:d5:da:
         6e:f3:74:73:22:9c:44:a6:d0:38:a1:db:0a:7a:79:12:41:bb:
         e0:b5:89:b3:6c:26:bb:92:59:af:5a:44:7e:40:a6:7d:f7:fc:
         90:a0:1e:5f:20:6e:a1:97:9e:f9:77:b1:f3:a0:08:db:aa:11:
         6b:c1:ad:47:d0:c6:5b:41:f2:da:68:e5:1b:5b:8b:c8:7b:c2:
         31:a3:88:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:13 2026 by rpki-client