Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc8cd6b8-3c99-4012-820e-e55b0a7ef364.roa
File:                     cc8cd6b8-3c99-4012-820e-e55b0a7ef364.roa (raw, json)
Hash identifier:          5RgaRQMDW4ONoHHxy0hrEAAjjr0UmJ4f4ngFhZjoEUE=
Subject key identifier:   06:96:DC:A6:C4:4F:CA:74:91:1E:52:EB:83:6E:F8:5D:C8:A1:5C:A5
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       773C43F9B61B055ED156F92F50A16CA6A548D116
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc8cd6b8-3c99-4012-820e-e55b0a7ef364.roa
Signing time:             Fri 13 Feb 2026 10:50:06 +0000
ROA not before:           Fri 13 Feb 2026 10:50:06 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3cd0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3c:43:f9:b6:1b:05:5e:d1:56:f9:2f:50:a1:6c:a6:a5:48:d1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 10:50:06 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=b77cb3e18d82dfb044d5006781f9ff58d32525a74107bbed448d7ff8a5622e9a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:95:91:7a:30:e6:c6:30:bb:7f:4c:f7:09:
                    9a:b9:79:17:38:46:06:ed:a8:99:e3:fb:b0:a4:5b:
                    3b:d5:2f:17:54:c9:84:08:7e:31:15:d0:9a:4e:45:
                    4c:94:23:13:79:3f:e7:e4:30:e4:79:c8:f5:9e:71:
                    4d:8e:bf:78:05:e4:72:ba:0e:a0:13:c5:23:1b:5b:
                    0a:09:a2:5d:94:f1:84:05:f4:51:65:fb:77:01:7b:
                    5c:d4:ec:48:9f:81:e3:3f:4b:92:55:66:c9:8e:0e:
                    8c:82:f3:7f:a2:30:bd:59:42:c1:2f:85:88:c8:df:
                    96:e3:21:32:59:31:8c:2e:d7:41:66:7a:c1:26:a0:
                    5d:f6:05:89:c3:18:24:c0:8d:aa:0d:ea:53:e4:13:
                    ec:82:bc:b2:69:e1:c2:b0:b8:96:9f:cd:31:9e:5e:
                    c8:37:60:4d:5c:8f:e7:e7:7d:f2:03:a2:7e:0f:ba:
                    b9:3b:fd:13:e3:df:54:c5:a0:59:ad:c8:7e:0e:eb:
                    f9:fb:8e:b9:8a:9a:ba:6e:a7:10:09:31:76:04:91:
                    f7:2e:cf:75:26:60:cf:88:b6:32:01:b2:32:1f:d0:
                    d5:76:a8:0f:3b:8b:9f:fd:7c:c0:39:47:81:37:06:
                    14:25:90:07:56:8b:32:cf:af:8d:81:81:34:ae:ba:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:96:DC:A6:C4:4F:CA:74:91:1E:52:EB:83:6E:F8:5D:C8:A1:5C:A5
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/cc8cd6b8-3c99-4012-820e-e55b0a7ef364.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3cd0::/47

    Signature Algorithm: sha256WithRSAEncryption
         23:77:e6:d2:9a:a0:1a:fc:a6:b2:c5:76:41:b6:4d:16:a0:27:
         83:96:d8:58:b7:7a:3d:9e:2d:91:2d:e9:00:e5:f3:3d:fe:c8:
         63:aa:5d:4f:c1:40:5e:d1:58:51:ab:fa:70:f6:6d:85:a1:bb:
         bf:e3:d9:cc:4d:35:c9:6d:39:5c:28:fd:b7:c5:f1:8b:48:7c:
         84:a5:65:7a:6a:77:2b:78:2b:0d:5c:f0:09:85:35:4b:4a:3c:
         36:19:91:73:9c:19:02:57:db:cb:09:69:99:97:d2:42:59:d6:
         3f:2d:b6:c6:48:a9:93:22:b9:2b:6c:25:2e:2e:b3:93:99:ca:
         a2:12:ea:e0:b5:41:e9:83:7f:d6:a2:a8:54:56:1f:fb:f9:58:
         82:09:9f:8c:4a:7b:65:d4:0c:94:47:24:71:f3:41:85:95:3c:
         0e:c9:9e:c2:63:9c:5d:cb:1f:a3:19:e1:b2:e1:0a:f4:2d:6d:
         70:09:ae:e2:cc:73:48:3a:ef:5d:68:3d:22:15:ad:47:85:03:
         85:f1:54:9f:62:c7:5d:38:a3:81:0e:77:84:09:b6:06:81:86:
         bb:90:7a:31:72:4b:bb:78:69:0f:56:d3:89:fd:86:75:2d:1d:
         0c:d0:10:9e:34:00:88:5f:02:04:a2:05:73:52:82:a5:a8:52:
         39:ae:be:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:46:56 2026 by rpki-client