Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d0595734-b333-494a-8e9a-f599ed173f02.roa
File:                     d0595734-b333-494a-8e9a-f599ed173f02.roa (raw, json)
Hash identifier:          bCxYApdg/bUS3wVgZbh09w4Hi6BpXi0c4VjjMWpW2Qw=
Subject key identifier:   24:A9:5F:2A:3F:AB:E6:2A:4C:89:C8:FE:B8:4F:D7:47:3D:ED:BE:66
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2E0BDFDAB4AB71B3E2F186AC8D154699CC219B8A
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d0595734-b333-494a-8e9a-f599ed173f02.roa
Signing time:             Fri 13 Feb 2026 13:11:39 +0000
ROA not before:           Fri 13 Feb 2026 13:11:39 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:396c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:0b:df:da:b4:ab:71:b3:e2:f1:86:ac:8d:15:46:99:cc:21:9b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:11:39 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=05ac8a70cfdbd74e88fdead76cfc49c0bbb45d48a746254f875d42dc3075bb3a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:bf:fe:c9:f5:cb:24:b5:cc:75:ce:14:77:
                    aa:75:ad:71:0c:11:b5:da:ad:3b:0f:ae:f9:19:92:
                    d3:82:cb:a3:fa:51:da:a4:4c:06:c0:94:e8:20:e0:
                    73:1b:1c:63:5f:33:2c:d6:91:bd:d0:78:b4:04:f2:
                    2a:04:fa:5c:80:67:fd:25:1e:e6:40:b4:f8:67:48:
                    dd:2b:c9:ac:cc:34:7c:31:fe:47:a1:9c:f6:56:c7:
                    ff:42:04:1c:84:43:a6:58:fc:36:8b:1f:d4:a3:06:
                    e9:14:ed:33:ff:bd:04:f2:b8:6a:1a:7d:13:ac:3d:
                    84:3e:94:b2:fa:87:bd:9e:a5:76:c7:c4:b6:8f:af:
                    cc:03:70:b8:42:12:50:51:a8:6a:4d:96:0d:08:59:
                    35:cb:ad:0f:87:ac:02:ef:f9:b9:f8:f6:a8:7a:14:
                    bc:ef:74:d7:6b:ea:41:ab:f3:30:23:0c:f6:10:a5:
                    10:93:2b:87:8c:58:09:fa:ce:37:d7:a1:7f:77:e8:
                    ff:9e:ef:5c:f2:34:a8:db:40:aa:ec:a5:58:c2:a6:
                    ae:e5:9a:a1:b1:24:ba:5f:29:f3:84:80:10:59:8c:
                    7b:68:84:39:f8:8a:88:d0:61:1c:61:16:5a:c7:f7:
                    85:f6:9b:fa:8e:02:51:1d:49:b9:91:49:5a:d0:3d:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A9:5F:2A:3F:AB:E6:2A:4C:89:C8:FE:B8:4F:D7:47:3D:ED:BE:66
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d0595734-b333-494a-8e9a-f599ed173f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:396c::/47

    Signature Algorithm: sha256WithRSAEncryption
         51:b9:03:2f:ba:77:00:78:2a:bb:c1:e3:33:2b:d9:db:b7:ef:
         02:02:f7:fb:7b:fd:93:15:19:06:78:86:13:0f:74:66:39:db:
         fc:7a:25:20:0d:d5:ba:76:e3:86:7a:60:e4:e5:6e:b2:80:14:
         2d:7a:dc:2a:e8:af:9d:d6:36:4f:29:ad:b0:c4:c5:91:f9:de:
         d5:8e:ad:3a:8c:61:2d:02:f7:72:43:e4:46:19:e4:32:be:13:
         94:5b:d7:1e:67:8b:85:b0:9a:e3:83:be:c7:d8:72:95:a0:91:
         97:ed:06:d0:c2:23:12:c7:13:8f:ca:2a:f3:47:b0:cd:70:bf:
         d4:04:f8:62:a9:da:c5:3f:1e:a2:f2:4d:53:6d:88:9d:8f:76:
         87:ff:d6:66:9b:a2:a8:ba:54:d2:a6:7e:11:9f:dc:74:ee:e5:
         39:df:a6:d1:d3:d9:56:06:c7:67:79:8e:d2:c5:24:b6:d9:6e:
         bf:23:56:18:f7:fe:d3:20:fe:c8:94:34:4f:4f:5b:f1:b1:bc:
         a7:c3:b7:49:f5:d4:5b:c2:b5:61:1b:d6:4b:1d:82:9d:4b:5f:
         56:be:e5:80:25:33:45:86:4e:38:5e:35:7e:8c:f5:31:66:a5:
         71:6b:8d:30:56:ae:71:8c:13:77:10:da:a3:ef:6e:90:37:7f:
         4c:b6:71:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:34 2026 by rpki-client