Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f60c0c60-6b6d-46a1-8053-1e03a42d02da.roa
File:                     f60c0c60-6b6d-46a1-8053-1e03a42d02da.roa (raw, json)
Hash identifier:          IM/Uf9RZR+Cy73jMlcUcBi3+u4OM+8jt/77KMvLHdFg=
Subject key identifier:   99:9B:64:55:26:D3:17:84:D2:98:EE:28:71:7B:39:37:58:2F:39:34
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       510B2B40BED628B71BE9039D7FA36B4892AC7C6B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f60c0c60-6b6d-46a1-8053-1e03a42d02da.roa
Signing time:             Fri 13 Feb 2026 07:21:58 +0000
ROA not before:           Fri 13 Feb 2026 07:21:58 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:a104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0b:2b:40:be:d6:28:b7:1b:e9:03:9d:7f:a3:6b:48:92:ac:7c:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 07:21:58 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=e2d1247593784fe7aa00285e58ed2e4b98a5ad4c56d0ed58dc5037e1e997574b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b3:bc:64:ae:1f:4f:a9:ec:3e:80:e7:fd:ec:
                    91:23:c0:64:40:f4:4e:fe:cf:eb:57:53:db:f0:3e:
                    54:20:1f:ff:c0:cd:59:d7:e7:fb:cd:30:4a:b7:f5:
                    c6:25:65:9c:e1:a9:e9:4f:d8:ee:90:35:76:00:c3:
                    e9:02:9c:3d:7a:04:73:69:78:1e:89:fb:a2:3a:ed:
                    9c:21:92:a6:ef:a1:da:cb:3d:c9:58:db:1f:55:cd:
                    e5:d2:fc:ad:30:7e:ce:f8:29:27:29:7e:e2:3e:d4:
                    e8:96:d9:a6:08:05:0e:e3:30:54:11:09:41:fa:59:
                    44:6f:b6:4a:3a:9b:a3:0d:7a:4f:c1:9a:b7:bd:fd:
                    5a:6b:40:db:9e:58:03:36:56:2d:f7:64:b0:ec:6f:
                    cd:ef:b1:92:3a:ea:ae:86:1d:00:be:c9:85:4b:29:
                    ba:a9:8e:b7:4d:97:53:55:af:15:57:62:8a:a8:f1:
                    c7:4c:2c:bd:f0:7d:4d:b9:b7:c0:79:f1:2e:17:c4:
                    94:1a:46:73:6a:08:c0:3f:d3:af:3e:4b:52:05:6c:
                    61:76:82:c2:e9:79:7e:06:8a:b1:6e:9a:b5:ab:f2:
                    32:cb:b2:ab:12:92:8b:b9:da:40:6b:4e:9a:55:15:
                    4a:9b:40:f4:a0:a0:d0:dc:d7:11:46:b6:d1:94:6c:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9B:64:55:26:D3:17:84:D2:98:EE:28:71:7B:39:37:58:2F:39:34
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f60c0c60-6b6d-46a1-8053-1e03a42d02da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:a104::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:2f:d6:15:fa:54:64:44:b0:21:96:95:90:c0:0f:1b:52:0d:
         b3:d7:1c:c7:96:a6:d5:88:3b:3a:16:39:70:7f:ec:4b:99:db:
         c8:18:5c:4a:96:61:eb:da:66:08:40:0b:a8:05:75:56:48:f4:
         60:ae:ed:95:78:b6:b4:d5:bc:0d:c2:86:74:7e:77:5c:25:93:
         a9:b7:a6:cb:a8:e1:70:4e:b8:f2:b2:f5:39:e4:fe:93:da:8b:
         d0:b6:70:b4:95:f0:87:a1:9d:8e:41:35:5b:68:b2:8d:c1:df:
         9c:a5:74:6f:60:90:33:30:f9:fe:22:fb:b7:46:90:c0:9d:b7:
         ec:00:e1:7d:6c:f1:5f:31:9b:a0:8c:db:a2:1e:78:a2:65:81:
         6e:40:ef:95:0a:e8:c3:15:2e:48:ae:48:7d:29:82:19:f2:cc:
         9a:4f:a2:18:b5:3d:dc:c8:fa:ea:14:fd:06:d6:35:73:81:c3:
         fe:2e:57:bb:9a:22:cf:d2:17:ca:98:f6:f4:17:1d:3e:fd:21:
         fb:09:5a:ae:9f:94:0f:43:5e:79:23:e6:4e:c3:7b:cd:63:92:
         09:1d:93:da:94:75:c4:23:1c:6f:6d:47:61:63:c3:f3:3f:b5:
         91:53:04:34:59:a0:47:6c:97:72:c1:55:df:f3:5f:f8:c0:bc:
         ce:64:28:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:31 2026 by rpki-client