Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3ee05ad-7889-4ba2-9649-0feb5ee64343.roa
File:                     f3ee05ad-7889-4ba2-9649-0feb5ee64343.roa (raw, json)
Hash identifier:          rnWYvN87KijNWDv0s8mAhXrmEHmHITFZP422+5S29tM=
Subject key identifier:   06:7D:E5:63:A9:C1:32:FE:6D:FD:10:4C:18:BA:62:0C:3A:B1:26:6F
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       568917C98D0D80371774F58B897AFAD97131BF27
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3ee05ad-7889-4ba2-9649-0feb5ee64343.roa
Signing time:             Fri 13 Feb 2026 08:50:57 +0000
ROA not before:           Fri 13 Feb 2026 08:50:57 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:376c::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:89:17:c9:8d:0d:80:37:17:74:f5:8b:89:7a:fa:d9:71:31:bf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 08:50:57 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=caffe83243922c541c519a049d6a6d24f24b4f0e30a567d34b36da141ea0a9d1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:e8:30:96:c3:e0:3d:99:f3:31:95:a4:f4:
                    d7:bc:dc:81:26:69:33:c1:77:90:0e:42:b8:4d:58:
                    7e:bf:e4:2e:64:36:c8:34:ae:3c:37:77:d7:1b:a8:
                    c2:15:77:42:3d:13:7e:50:ed:48:bb:3c:46:cc:db:
                    6f:28:cd:10:27:9f:36:2d:33:f4:76:a9:83:dd:ce:
                    43:fa:49:cf:0f:32:bc:9e:82:fa:e7:64:af:5a:85:
                    dd:29:34:82:75:04:ee:d7:ae:19:04:87:f1:2d:a7:
                    3d:fc:34:53:d1:b8:54:cd:8b:b6:0b:06:ca:25:4d:
                    52:08:d3:a1:19:10:4a:8e:4e:7c:5d:5a:cd:27:0d:
                    40:b1:ca:42:7c:e4:c8:78:7c:fb:02:dc:03:f1:8e:
                    af:c2:52:74:06:12:6d:96:78:05:8e:9b:2c:80:36:
                    b9:b9:92:f7:b3:78:44:79:13:27:07:cd:5e:e8:54:
                    88:8c:7d:82:be:98:e6:e5:d2:4c:e2:43:38:15:79:
                    b0:12:f9:fa:58:ab:cc:f1:81:63:63:22:d8:fa:fb:
                    b0:22:33:09:a8:6c:f3:2b:50:f8:ee:8f:fe:54:a6:
                    c4:43:f7:a0:fc:bd:19:7d:44:22:20:f4:ea:33:cc:
                    f1:67:21:8d:b4:92:3f:94:d3:de:6c:10:e2:db:fc:
                    e8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7D:E5:63:A9:C1:32:FE:6D:FD:10:4C:18:BA:62:0C:3A:B1:26:6F
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f3ee05ad-7889-4ba2-9649-0feb5ee64343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:376c::/46

    Signature Algorithm: sha256WithRSAEncryption
         39:aa:f2:3c:70:59:6d:3c:77:f5:0d:7d:2d:ca:53:1b:0d:26:
         b5:b0:60:31:6a:3d:09:25:23:96:a7:02:27:7a:2c:81:d4:e1:
         1d:5d:7a:a2:2f:84:46:dc:d2:49:aa:c4:00:59:53:1d:95:8b:
         1d:12:9d:02:12:0b:57:ed:47:42:06:c5:bb:d7:b7:9f:92:9b:
         07:dd:f0:c7:e0:fb:35:97:82:47:b9:77:9b:e5:39:61:85:89:
         b2:a6:ee:89:7e:00:8b:71:2a:c6:77:2c:de:3f:88:be:ee:1a:
         b6:9d:40:56:cc:52:ec:c6:20:1e:51:90:96:da:b0:2c:a4:63:
         27:ce:1d:5d:f0:51:31:49:10:09:81:b0:78:2c:cf:53:b9:e0:
         81:ce:b4:30:73:99:a7:6f:4c:07:d9:34:be:b7:33:53:54:2c:
         31:ec:8a:c4:9f:35:b1:f9:fc:4d:2a:af:b4:b0:6d:7a:d7:39:
         17:e8:02:eb:be:00:39:51:c5:fc:ca:14:ad:c3:68:d6:ef:b3:
         30:17:02:04:9f:9a:a1:5a:f2:39:59:71:f7:75:03:95:24:46:
         70:b8:30:ec:e2:ba:b2:91:33:75:88:61:9d:8a:71:d9:dc:bf:
         3f:88:be:06:42:37:f2:99:e2:d2:72:1d:14:a5:ec:d9:db:e7:
         9a:fc:7a:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:13:18 2026 by rpki-client