Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d8a8ef24-9c27-47af-9967-e80446a68602.roa
File:                     d8a8ef24-9c27-47af-9967-e80446a68602.roa (raw, json)
Hash identifier:          /NyZbfUlboEu4QvEB7LEJIikQ4EmMv6txAtAILwj/5U=
Subject key identifier:   D2:78:03:25:07:2D:11:EA:2B:42:0C:1A:5B:48:EB:EF:2A:28:76:3E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3723E28CD7D02CA7964B242BF13A5AE88D1309BD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d8a8ef24-9c27-47af-9967-e80446a68602.roa
Signing time:             Fri 13 Feb 2026 07:32:12 +0000
ROA not before:           Fri 13 Feb 2026 07:32:12 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3bfe::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:23:e2:8c:d7:d0:2c:a7:96:4b:24:2b:f1:3a:5a:e8:8d:13:09:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 07:32:12 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=2fa2896756aae41279b1a65445953a1aa4728191b4bebfe643e2d7fa24a29271, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:02:a3:ed:9e:7b:f5:c2:78:dd:fa:21:b6:
                    e0:6c:a5:1e:47:51:47:45:d2:cd:d6:93:74:ea:70:
                    1b:11:ef:9f:2b:6b:0b:b7:d9:3c:ec:e5:30:e3:8c:
                    60:3e:2b:62:66:70:33:58:c2:81:17:c8:9d:31:46:
                    b0:a5:a2:ec:47:4a:c4:bc:9b:c2:49:59:71:fc:f4:
                    0f:f8:75:00:9c:86:62:09:9f:e5:f4:e7:96:c1:4c:
                    79:ac:d8:3a:d7:3f:f7:43:0d:12:3c:62:fa:6d:a5:
                    27:67:ae:59:66:48:bf:28:7c:11:86:4d:ca:d3:59:
                    51:85:9d:84:a3:7b:63:63:e5:dd:a4:6a:57:03:8c:
                    3d:87:fd:bf:b3:1a:10:51:e5:03:f0:2e:96:73:2f:
                    16:89:97:bd:b9:73:e4:3b:a1:53:93:6d:6f:89:e7:
                    7f:04:b3:8e:33:c0:92:12:68:ed:b6:c9:95:ff:d5:
                    c4:ef:8e:f4:3a:7b:b8:18:23:b3:0a:c1:27:04:ae:
                    c3:88:77:4d:e2:59:ef:bd:a0:b7:23:3c:eb:e2:47:
                    b1:a1:0d:4c:ec:0e:11:30:ba:1d:6a:5f:97:7f:2b:
                    02:89:56:02:01:48:b7:28:9d:b7:47:0c:d0:dd:f9:
                    26:96:29:07:c6:1c:13:0e:ab:06:3d:75:40:bb:1a:
                    00:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:78:03:25:07:2D:11:EA:2B:42:0C:1A:5B:48:EB:EF:2A:28:76:3E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d8a8ef24-9c27-47af-9967-e80446a68602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3bfe::/47

    Signature Algorithm: sha256WithRSAEncryption
         9d:ff:1b:21:a3:83:14:15:ba:98:dc:2d:8a:2f:69:43:1e:1f:
         0e:6d:8d:ff:0c:77:56:4d:7c:fc:ad:a2:eb:97:6c:57:4d:c4:
         dd:ea:98:fa:27:1d:71:78:f1:72:2e:1f:ad:01:7e:60:63:c8:
         5e:24:ca:2c:8a:b8:43:ae:53:48:87:58:9c:8f:5c:a3:b4:7d:
         af:ee:3e:fd:f7:66:3c:c2:63:b2:d6:11:56:b9:1e:55:0d:f7:
         04:ea:40:31:7e:cf:af:a4:3f:ec:b1:c4:13:7e:af:84:cc:4a:
         db:4e:08:aa:20:f1:36:91:2e:df:32:29:52:a2:3a:6f:ed:33:
         65:76:17:8c:a1:2e:3c:75:dd:40:85:23:60:7a:f0:97:1f:23:
         90:6f:2b:c6:88:f7:82:df:58:84:53:d4:51:b0:c7:69:c0:bb:
         86:04:ad:5f:44:df:92:8e:ee:13:b1:af:35:79:c6:98:c6:c0:
         41:f4:73:45:37:20:a3:5b:a4:35:99:e6:b7:aa:20:1c:ce:03:
         d9:14:5e:8c:da:43:74:16:95:2b:3d:2e:5b:ce:41:64:b8:ad:
         a4:6c:e4:b5:2e:80:2f:3b:fc:b2:13:c0:28:e0:e0:a9:47:04:
         d2:7a:59:01:c1:c9:ef:45:e4:ed:8c:56:03:fa:e7:4c:0b:da:
         63:b5:5e:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:25:57 2026 by rpki-client