Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2241d86-f686-4d2e-98b1-d96f0e252b51.roa
File:                     f2241d86-f686-4d2e-98b1-d96f0e252b51.roa (raw, json)
Hash identifier:          /MEL6y+gT2SkNBDLRjZMMTdGiRqvLNFdDY35vlLsPYg=
Subject key identifier:   17:E5:A1:F1:23:E2:EE:57:B8:53:C7:BD:17:0A:E4:D9:A4:97:A6:C3
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5075D0A65515790BF41D29855F9AA6AD4DD24E21
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2241d86-f686-4d2e-98b1-d96f0e252b51.roa
Signing time:             Fri 13 Feb 2026 04:50:11 +0000
ROA not before:           Fri 13 Feb 2026 04:50:11 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3768::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:75:d0:a6:55:15:79:0b:f4:1d:29:85:5f:9a:a6:ad:4d:d2:4e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 04:50:11 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=77b46a3fdbbaf798439e77b50fc2df4a8f127e6b75bd5f7de0a1cb27753b6b65, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:a9:3f:26:8b:d4:2a:ae:9f:8d:20:49:ff:
                    41:71:6c:64:b7:aa:94:86:d3:b4:73:a7:51:37:3b:
                    df:bc:df:11:12:da:cf:30:68:11:a5:86:d0:16:1c:
                    48:8e:a4:00:0b:8a:85:e7:c2:3e:2d:04:a5:41:ad:
                    0d:48:e0:2d:b6:03:43:e7:fa:c1:3a:8a:d4:c2:95:
                    52:25:98:1b:00:0a:3b:57:68:d0:7f:cf:cd:bf:72:
                    ff:10:da:36:47:9e:a5:d3:27:52:d1:b0:f7:b8:c7:
                    16:80:c2:ee:31:dc:e8:c3:d8:c7:7e:7e:c2:bd:3f:
                    16:27:32:a5:03:25:19:98:18:d5:fc:c9:0c:38:8e:
                    05:de:a3:bf:fa:09:85:42:81:f3:eb:e8:27:78:bd:
                    63:a8:2a:2a:39:f0:e1:47:d0:c3:43:b4:22:73:43:
                    ec:ed:5a:46:cd:d1:60:0e:1a:eb:c5:6c:e5:5a:fa:
                    a6:cd:d9:cc:8c:9b:0c:42:58:16:fb:d5:ef:0c:82:
                    e6:72:fa:eb:13:99:a2:8b:b0:42:1b:20:39:f9:90:
                    4e:93:5c:7f:ba:4c:69:34:b2:5d:34:6c:e1:38:89:
                    24:27:85:24:57:ca:78:4b:0b:18:3d:df:e1:9f:de:
                    e5:6e:05:14:26:d8:5f:7f:96:fd:5a:fb:33:1d:cd:
                    1a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E5:A1:F1:23:E2:EE:57:B8:53:C7:BD:17:0A:E4:D9:A4:97:A6:C3
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f2241d86-f686-4d2e-98b1-d96f0e252b51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3768::/47

    Signature Algorithm: sha256WithRSAEncryption
         8d:ef:03:41:10:64:b6:ca:7f:97:47:51:b4:2f:a2:96:86:6c:
         7e:54:ec:ae:c1:56:7c:c4:76:25:38:59:2f:66:88:ad:ac:63:
         e8:85:1d:29:2e:b0:aa:18:8a:fc:9e:ef:76:c4:8f:b7:b8:72:
         67:9f:8e:7a:32:5c:7f:80:02:1f:ab:70:c9:51:f8:45:60:37:
         f6:1d:0f:c6:f2:f4:d5:21:65:d9:d2:f9:a7:80:32:a5:12:63:
         7f:ab:ca:46:82:77:b8:b8:2e:21:3f:38:33:bf:9b:fe:3c:5a:
         6e:e9:2a:5e:71:7c:a6:ee:89:3f:04:85:22:12:44:00:72:20:
         77:db:3c:b6:f2:01:d1:d9:ef:bd:ae:07:b0:0c:6f:84:dd:9d:
         76:67:d3:63:33:1c:57:d0:e4:94:ea:5a:82:c6:00:a0:f1:67:
         f4:28:ad:96:fd:c2:6a:18:8e:d0:d1:63:d9:e3:6d:c5:04:ac:
         a5:2b:57:41:24:7a:18:8a:d2:29:94:92:1a:5e:e7:9b:f5:83:
         f5:8f:66:20:2a:99:98:65:dc:a7:7c:7b:78:fc:d8:60:5a:db:
         6e:8f:84:73:ec:a1:ac:e0:fc:be:c2:36:97:c4:50:6c:46:78:
         7c:04:65:6a:76:27:c3:71:d6:d6:13:5f:8d:73:32:b8:3a:eb:
         6f:8e:ce:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:57 2026 by rpki-client