Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/edf380c4-ba5f-40c0-a2fc-f243bcb5e154.roa
File:                     edf380c4-ba5f-40c0-a2fc-f243bcb5e154.roa (raw, json)
Hash identifier:          PXVF3s6yvY4EK7WggUTIXaPF+W8PTdpsUQdCnLXQTVM=
Subject key identifier:   33:34:FB:B7:5E:10:55:2F:9C:C2:F8:B2:D5:D3:35:00:70:6A:2D:25
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7778DB23FD8372AD20D6548E8561E53012BE5D05
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/edf380c4-ba5f-40c0-a2fc-f243bcb5e154.roa
Signing time:             Thu 12 Feb 2026 01:00:12 +0000
ROA not before:           Thu 12 Feb 2026 01:00:12 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2ea6::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:78:db:23:fd:83:72:ad:20:d6:54:8e:85:61:e5:30:12:be:5d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 01:00:12 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=146c4746d5abdebde6604fb64f4b51556e352a86c006d890128732104cd474b5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:7c:1a:3a:73:a2:7d:5c:1c:64:85:6d:57:
                    61:bc:32:1e:17:c7:6b:81:99:58:9c:a1:f1:8b:c0:
                    8a:11:60:b5:b6:f5:cf:f8:b6:8d:95:2b:46:d4:26:
                    48:5f:54:24:fd:a8:f2:62:8d:7b:82:34:03:7c:74:
                    4e:96:36:7a:97:38:78:85:38:89:1f:ae:56:41:5b:
                    b7:68:26:1b:18:1b:17:87:1f:20:b9:91:58:3a:d4:
                    7c:67:38:c0:db:32:8f:c6:86:73:b5:de:7b:92:f3:
                    b9:94:8b:bc:b5:e3:61:40:52:c6:32:93:37:71:b7:
                    97:87:ec:4e:14:a3:62:c2:cc:be:c4:e6:cf:9a:00:
                    97:e9:31:0d:c1:62:94:0e:f3:4f:a9:28:75:de:f2:
                    34:8d:58:1c:24:d0:82:0e:1c:66:95:5a:a9:e2:f0:
                    d9:3d:b8:52:ab:a7:4e:7e:98:61:ac:41:02:9e:46:
                    94:1c:3f:16:b9:9b:7c:8d:d2:30:74:9f:91:bd:38:
                    90:40:8e:41:18:87:9f:df:b0:57:8d:b5:89:1c:9d:
                    e9:28:2c:cf:b2:55:f0:5c:57:0d:78:c2:8c:28:89:
                    a0:f1:30:e4:60:82:56:d6:fc:db:1e:c3:f7:46:10:
                    53:89:7c:e0:17:a1:b7:b3:d5:96:8e:74:46:86:14:
                    c4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:34:FB:B7:5E:10:55:2F:9C:C2:F8:B2:D5:D3:35:00:70:6A:2D:25
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/edf380c4-ba5f-40c0-a2fc-f243bcb5e154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2ea6::/47

    Signature Algorithm: sha256WithRSAEncryption
         74:51:d6:19:79:c6:55:1c:b3:b0:a9:5f:d7:23:47:37:22:4a:
         b6:58:24:d7:a7:0a:4b:d0:39:b0:d3:e3:9f:df:1f:46:12:1d:
         91:c7:65:fc:d6:af:d9:6b:6d:3d:04:01:aa:5a:e3:97:3e:fd:
         27:87:76:2b:31:e0:2d:c8:b4:53:09:6b:88:48:a2:19:59:ff:
         19:97:db:41:64:66:0b:79:fc:b7:53:42:99:c0:df:98:75:a4:
         49:f3:cd:38:f8:06:71:d8:76:89:da:b0:3c:ac:fb:b2:a4:f0:
         b1:76:e8:98:bb:fb:14:58:70:64:9a:85:e2:1a:4c:93:be:68:
         66:4e:57:94:17:cc:88:09:1f:80:5a:b8:36:6d:91:27:da:32:
         ce:30:6a:f9:34:5c:4d:51:7c:5d:09:78:b0:c6:5e:57:df:81:
         8c:d2:eb:ce:43:7a:4f:ab:b5:ce:19:79:b4:e6:56:32:55:2d:
         64:84:37:71:99:74:06:59:3a:19:ce:1f:d9:df:16:db:f9:db:
         11:c6:04:d8:d7:1a:fa:67:6b:d2:fb:1f:04:18:4a:d7:05:4f:
         12:ae:dd:07:17:62:84:72:d0:3e:dd:15:e5:69:ba:45:f4:9f:
         35:cb:a6:b7:19:0f:aa:56:67:54:67:b6:9d:54:44:dd:db:d6:
         e3:06:d1:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:52 2026 by rpki-client