Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ea034213-ba0d-4697-9e5b-2b3b927a26c9.roa
File:                     ea034213-ba0d-4697-9e5b-2b3b927a26c9.roa (raw, json)
Hash identifier:          0CyD6fMUfEtSd3N5VcUQzInXeSkESlr61uPJs9CEA+o=
Subject key identifier:   00:38:CD:2B:35:C0:AF:0A:B9:B3:08:DD:A1:CA:10:AB:E9:CE:D9:4C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4D6D81E5DD47B02218C41D8EAC4AFACF17C3A6E2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ea034213-ba0d-4697-9e5b-2b3b927a26c9.roa
Signing time:             Fri 13 Feb 2026 01:21:03 +0000
ROA not before:           Fri 13 Feb 2026 01:21:03 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3be2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:6d:81:e5:dd:47:b0:22:18:c4:1d:8e:ac:4a:fa:cf:17:c3:a6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 01:21:03 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=f3fceaa4ec2bd3e5e6d417ec8d355fae358cd7a69aae0a9f230cb64dd9bae5bb, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1f:f9:30:9d:d3:b5:82:03:3e:02:3a:7c:92:
                    fe:af:99:4b:cb:8d:aa:a6:5d:95:8d:4d:97:41:41:
                    0e:9b:d8:bd:1f:b6:47:27:f7:c7:25:ee:eb:5d:21:
                    f0:82:82:fc:1d:eb:81:eb:e7:4b:5f:87:18:10:40:
                    7c:f9:62:ea:d5:24:2b:fa:da:a5:f0:65:06:8d:99:
                    f2:55:08:1b:17:ae:05:73:59:20:dd:14:b1:b9:9d:
                    75:d6:65:c9:57:5b:54:22:a7:44:a9:dc:68:7d:33:
                    36:b0:9c:cf:73:08:1c:c4:23:db:b2:85:87:38:de:
                    10:a4:11:57:3e:07:99:0e:c7:78:e4:82:19:7c:c2:
                    cc:ad:b1:c5:53:63:9d:f5:fd:d1:f5:7f:d3:6f:72:
                    a9:f8:34:bd:ae:15:8e:c3:99:90:7a:a7:86:02:29:
                    b3:63:e1:76:49:1c:b7:a2:96:b1:97:62:68:60:f5:
                    27:26:80:ee:a1:a8:f2:86:67:61:76:40:4a:1a:e1:
                    61:25:20:3b:64:8b:b0:5a:39:89:52:33:5d:f5:66:
                    17:7a:80:b1:01:74:b8:30:13:2f:f9:a5:a7:3b:ca:
                    a6:0c:81:21:01:37:ac:56:46:77:4f:31:c7:57:ca:
                    b5:cd:2a:a2:12:4d:f3:d0:a2:e8:93:d8:a7:16:bb:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:38:CD:2B:35:C0:AF:0A:B9:B3:08:DD:A1:CA:10:AB:E9:CE:D9:4C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ea034213-ba0d-4697-9e5b-2b3b927a26c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3be2::/47

    Signature Algorithm: sha256WithRSAEncryption
         05:5f:a7:66:ba:3d:5e:be:73:93:2b:28:4e:af:35:7f:cf:30:
         5f:51:d8:c4:a6:6b:d2:5f:e0:ce:e4:c6:5e:98:fe:ee:07:13:
         33:ff:8a:52:58:c1:8b:21:2a:90:ef:11:d2:81:7c:49:68:90:
         f8:02:20:be:47:e6:c5:99:13:af:b8:ca:b1:54:87:ef:ed:3a:
         7c:97:dd:ce:25:dd:fe:02:3a:af:9e:c5:90:3f:2f:3e:b6:1a:
         44:73:e8:73:cc:9a:e7:52:60:cd:18:7b:0c:f2:fd:2d:ed:2e:
         0a:25:ae:fa:8f:2f:ec:eb:1e:56:a7:60:b8:44:b2:2b:a2:6f:
         70:a5:c2:44:cb:20:bc:02:e7:88:f5:d9:c6:5a:0f:ea:b2:b8:
         11:c6:be:b6:ee:0a:65:84:a1:df:e5:9a:01:01:9d:fa:67:e2:
         96:60:28:49:d1:bf:5d:1f:c9:b1:a9:49:21:e7:a7:c0:a6:c9:
         99:fa:f2:3e:a8:86:71:53:95:ea:c1:da:04:82:71:f5:8c:9f:
         ab:c6:a4:b4:37:b9:90:15:48:55:58:78:de:a0:4d:68:62:23:
         b7:c6:47:6a:cd:fa:46:b2:91:4a:0e:d9:49:c9:a7:ec:8c:6f:
         5d:d9:d1:21:11:0f:e1:78:24:15:20:fe:63:8b:71:81:84:e6:
         d1:c4:cf:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:28 2026 by rpki-client