Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/efa8ef68-c3f6-4329-bde0-9cbd4d682969.roa
File:                     efa8ef68-c3f6-4329-bde0-9cbd4d682969.roa (raw, json)
Hash identifier:          OUiJqfag9rDK+ZiXByiZc4lG788Y+AgJIlVNP4OXmTE=
Subject key identifier:   91:09:CE:74:8B:CE:78:33:57:38:A8:EB:D1:1A:54:0B:94:A7:EF:B6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0415B78C45C97D70300023225A97A56A8B4FAABA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/efa8ef68-c3f6-4329-bde0-9cbd4d682969.roa
Signing time:             Fri 13 Feb 2026 13:40:03 +0000
ROA not before:           Fri 13 Feb 2026 13:40:03 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:37aa::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:15:b7:8c:45:c9:7d:70:30:00:23:22:5a:97:a5:6a:8b:4f:aa:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 13:40:03 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=b049ac2bdd50441b3aa2cf3535064fe0250f412fc52d26f2dbdf8aa5b57ddb4f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:4d:eb:90:18:64:db:a7:54:fc:09:a5:75:
                    96:5f:cd:28:61:ea:4b:61:6a:89:00:dc:15:54:70:
                    03:88:10:11:dc:9c:fc:0c:b8:e7:32:ec:10:37:cc:
                    f4:ba:97:c1:1e:2c:31:b3:36:87:74:94:f0:6f:ca:
                    21:c9:8b:88:f2:59:7e:9d:a7:56:74:c6:ac:bb:13:
                    dc:71:57:2f:19:85:ca:88:5f:14:c4:5a:0d:e8:25:
                    1f:aa:79:a2:0a:a5:6a:1e:9d:45:60:e0:31:1a:6c:
                    4f:fa:a0:00:85:1c:41:10:0a:d8:03:b9:97:5e:45:
                    38:3c:39:6c:24:65:cd:3c:91:40:fd:90:00:bb:1c:
                    49:f7:1f:11:88:03:70:aa:99:97:5c:c9:d3:fc:03:
                    eb:1d:d0:a4:47:e2:57:e9:be:7a:31:5e:32:ad:5f:
                    f9:40:ab:bf:e0:fd:7c:c1:3c:e9:a0:e5:ac:67:cb:
                    3a:15:24:ee:ac:56:26:db:f6:8c:66:9e:b6:7b:3d:
                    9b:8e:37:a1:8b:df:80:45:94:da:9c:69:05:3f:ec:
                    af:35:fd:c5:85:15:27:be:2a:b1:5a:62:96:c8:7d:
                    e0:88:f9:76:4f:ff:04:f2:d8:70:4d:98:b0:8c:3b:
                    ea:8b:42:75:21:75:a4:86:68:41:b9:4f:0b:8f:03:
                    29:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:09:CE:74:8B:CE:78:33:57:38:A8:EB:D1:1A:54:0B:94:A7:EF:B6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/efa8ef68-c3f6-4329-bde0-9cbd4d682969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:37aa::/47

    Signature Algorithm: sha256WithRSAEncryption
         b4:ba:da:47:05:c8:d2:13:13:b4:3b:26:36:db:a5:b8:95:a8:
         bc:38:66:a1:4e:1e:61:3a:5d:76:be:01:7c:73:33:4a:d0:25:
         99:b1:20:17:2d:4e:c9:7d:a2:79:00:ae:b6:c7:6a:5d:b3:54:
         55:b8:a7:e4:4c:9b:31:0e:f4:52:72:35:34:19:45:f4:ec:82:
         b5:6a:78:1e:a2:cb:ec:7f:14:e0:7d:18:9e:66:40:4f:d9:77:
         3b:da:13:19:9e:50:83:72:99:6d:6d:b3:ba:ad:76:7a:4e:1d:
         5c:d3:5a:79:48:92:90:7a:b4:f7:26:41:45:4e:07:30:b3:3d:
         55:f2:a7:e8:f4:d3:33:c8:cd:df:e3:79:0d:35:14:35:62:74:
         41:56:68:cf:77:21:a0:79:b7:cb:17:09:50:8b:ab:3d:07:73:
         67:09:79:c0:fe:2c:af:48:60:20:ba:e0:fc:01:5e:9c:65:84:
         53:2d:47:b3:ea:49:e6:d5:81:9b:fa:19:55:8c:d0:ee:cd:19:
         ff:5d:7f:c4:53:f8:9f:a8:dc:8f:74:4a:18:c1:be:ea:13:3c:
         6f:74:cd:94:9a:e0:18:df:a0:60:16:5a:99:24:33:05:29:7e:
         b8:71:e7:8d:f1:b1:ec:39:0a:a6:f2:a3:8c:6e:a5:fe:e6:91:
         a7:2f:1b:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:15 2026 by rpki-client