Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f74edc0d-479c-4706-a43b-d111f402496d.roa
File:                     f74edc0d-479c-4706-a43b-d111f402496d.roa (raw, json)
Hash identifier:          i/ApHv5FfiIFCSNOGcbUXfXUTmtzlFNr/T+kO1BSWcU=
Subject key identifier:   00:22:90:F6:3E:0A:FA:C3:2B:58:79:FE:FF:5A:4F:22:E6:DB:F3:D0
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5C9CDE1A4B27027A8FD50BE4634B0E9818B53519
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f74edc0d-479c-4706-a43b-d111f402496d.roa
Signing time:             Thu 12 Feb 2026 00:41:19 +0000
ROA not before:           Thu 12 Feb 2026 00:41:19 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2fb0::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:9c:de:1a:4b:27:02:7a:8f:d5:0b:e4:63:4b:0e:98:18:b5:35:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:41:19 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=d3d0c91e32b5353e307714956ded5043f4d7042e250efb2b90c3fdffed34e61f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:d6:11:9c:c1:53:ad:16:f9:ed:8c:8b:35:
                    5e:1c:d9:08:76:4b:c7:b9:d7:34:3f:8c:44:4a:67:
                    5d:82:9d:58:63:d7:fc:ee:30:c0:50:b4:81:dc:d6:
                    c0:19:f8:57:cd:7b:cc:b0:7a:08:7e:4a:5f:79:93:
                    8d:d8:d6:70:f4:c7:4d:54:31:63:05:9f:ac:fb:bc:
                    00:84:b5:f7:9d:ef:f0:44:48:5c:14:c0:5f:01:e9:
                    c9:29:64:dd:3f:84:4e:21:1c:2e:00:79:ed:fe:93:
                    4e:7d:2c:bc:42:32:7f:32:84:e9:76:65:7b:b8:9f:
                    e8:36:91:d2:40:4a:50:8d:ba:46:20:6d:15:84:49:
                    2c:a3:ef:8a:92:ee:7e:c7:54:36:28:ed:c7:4b:aa:
                    f9:1d:44:7f:bf:cb:fa:c3:da:fe:e1:88:f3:46:06:
                    4d:f9:6d:23:7c:f7:0a:be:ee:aa:0e:38:86:fe:23:
                    88:45:c9:7f:cc:7f:4b:76:be:09:6b:74:66:cc:fa:
                    83:86:27:54:6a:9a:e0:77:73:66:c0:3e:18:41:12:
                    07:00:08:6c:43:a8:8c:2e:1e:41:9a:36:aa:cb:e9:
                    dc:ba:c1:9e:8a:c8:03:5e:9c:9e:77:da:e3:4d:0c:
                    14:b7:7f:0b:75:15:df:a4:82:2a:12:3a:4e:fa:19:
                    60:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:22:90:F6:3E:0A:FA:C3:2B:58:79:FE:FF:5A:4F:22:E6:DB:F3:D0
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f74edc0d-479c-4706-a43b-d111f402496d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2fb0::/47

    Signature Algorithm: sha256WithRSAEncryption
         23:3f:81:28:5b:40:69:a1:68:71:71:c2:e2:90:eb:56:05:12:
         bf:7e:bb:39:8e:54:d8:ba:86:ea:81:d2:97:f7:38:c4:a1:b6:
         1d:34:eb:5c:ea:26:69:de:f1:6b:cf:78:10:eb:2f:bf:14:b4:
         89:21:0f:d7:00:1f:f8:b2:de:ca:fb:7e:fb:b8:02:8a:a5:7e:
         e0:83:31:0a:26:bf:e0:64:bd:5d:22:e6:57:66:e4:21:2b:9f:
         34:81:9d:5d:d9:94:98:67:fc:04:1b:6b:05:69:3d:a5:9b:ae:
         02:85:b9:d9:6d:28:fe:bb:8d:7b:41:b8:4d:08:79:28:51:54:
         7d:78:b5:57:30:e1:3e:fa:37:5a:f9:f6:79:35:4f:c6:91:a0:
         df:d7:ab:44:1b:64:8f:c5:fd:1a:7a:15:01:c9:a7:3a:8f:ea:
         c8:4f:ec:18:25:d9:6b:dd:67:56:33:c4:30:b9:22:d5:98:a0:
         4c:80:14:f0:21:f6:02:bc:2c:8f:8b:2b:f5:cc:c2:09:91:74:
         87:42:4e:dd:ed:2f:c2:4d:c3:c8:f1:14:24:ea:6a:53:e2:e8:
         e8:57:cd:e3:fc:e6:35:de:eb:3b:c3:bc:7d:e1:61:d9:eb:c0:
         bc:3b:fc:4b:66:3d:12:46:39:e6:f4:29:34:a2:b8:80:e1:b8:
         31:4e:5b:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:13 2026 by rpki-client