Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f7702f0a-fe84-471d-b01f-17abe62bb7a7.roa
File:                     f7702f0a-fe84-471d-b01f-17abe62bb7a7.roa (raw, json)
Hash identifier:          Wt4n+aAmgPA8Z2K8adRUn5Jyoq9wc1pyTKKUcfvpv8k=
Subject key identifier:   FC:6D:EA:11:8D:B3:60:5A:ED:0C:3E:CF:9A:D4:89:46:32:B0:90:9E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       469FEA22101F155472834080CA42813BE4500CC1
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f7702f0a-fe84-471d-b01f-17abe62bb7a7.roa
Signing time:             Fri 13 Feb 2026 10:01:46 +0000
ROA not before:           Fri 13 Feb 2026 10:01:46 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:38fa::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9f:ea:22:10:1f:15:54:72:83:40:80:ca:42:81:3b:e4:50:0c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 10:01:46 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=fd7e8d1be034947e3c0ff801ec569341da37fa3c2b4374fca451228aa33ac498, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ae:62:4a:f9:62:5d:b7:65:a1:e6:28:0e:aa:
                    db:0d:91:2b:96:53:da:63:14:14:50:50:ea:b6:e3:
                    5a:35:84:d9:db:fe:6c:9d:55:94:a7:cf:57:f4:fa:
                    83:ab:dc:31:fb:97:e7:75:f8:9c:a1:45:90:1d:cf:
                    d7:99:41:2f:b0:c7:1e:32:86:49:34:16:58:c3:5e:
                    2a:96:c0:a3:3f:50:38:a8:56:40:08:0a:88:5c:d5:
                    4e:c7:4e:2e:8f:59:9f:dc:4f:f9:d2:b8:d1:34:94:
                    4c:e6:0a:db:f4:b2:5b:96:8a:05:91:07:e4:05:31:
                    43:1d:96:89:29:03:51:bb:5d:f9:3b:cc:fd:17:f5:
                    f7:7b:9f:d1:7e:63:43:26:5a:17:f0:f6:70:21:fd:
                    bc:f5:37:69:e9:f8:8f:a5:0e:79:d2:20:34:f0:2d:
                    97:39:8f:3a:76:36:60:3c:1a:e5:88:a0:53:5b:8e:
                    bb:84:7c:ad:9f:7e:e3:80:75:90:43:91:94:a4:2d:
                    61:3d:84:32:0e:a7:d6:9b:76:a7:8f:82:2d:86:c0:
                    69:32:12:4d:01:fa:38:8c:a8:1d:22:30:75:3e:f4:
                    0f:ef:d6:0e:57:c6:af:67:03:b3:56:78:7f:53:81:
                    23:ea:9f:7b:92:5c:4a:e5:74:74:8c:1d:a6:4a:e0:
                    9f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6D:EA:11:8D:B3:60:5A:ED:0C:3E:CF:9A:D4:89:46:32:B0:90:9E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f7702f0a-fe84-471d-b01f-17abe62bb7a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:38fa::/47

    Signature Algorithm: sha256WithRSAEncryption
         80:0c:d1:16:05:a4:33:eb:81:b9:6b:47:e8:6e:af:00:14:e0:
         01:18:11:dc:0c:fc:38:5f:f6:0f:f1:e8:07:bb:8b:86:d9:26:
         4d:51:b0:1b:56:ba:f0:5f:d3:bc:8c:41:ee:48:95:88:88:d8:
         a6:47:f7:40:8a:34:7b:2b:e4:cb:13:2e:eb:b7:58:c2:75:07:
         d5:d6:ad:7c:62:84:ae:28:7c:f7:d5:a5:ca:a5:4e:07:41:ef:
         68:5c:9f:38:ca:76:86:30:eb:e7:eb:7c:67:f6:79:66:53:63:
         34:80:2a:dd:56:a0:57:1e:ee:69:3e:d2:26:0f:95:ee:b5:63:
         07:a1:7f:56:74:b9:d9:e2:36:6a:9b:01:5a:53:65:89:9b:5d:
         c7:47:2b:df:d9:37:43:fe:f0:a9:30:4d:4d:59:f6:a8:e6:df:
         57:fe:50:db:4c:a9:4a:53:78:bd:f3:6f:a6:12:35:0a:79:82:
         58:cc:cc:df:fb:3d:ac:5f:b1:21:9b:ae:14:b3:8a:3f:41:05:
         b4:91:39:6d:36:55:23:d9:28:80:61:90:f6:9b:4a:a2:e7:d5:
         52:e9:14:48:13:7d:62:fd:69:f9:2e:de:f1:32:35:f6:d4:7c:
         52:81:b9:9f:3e:92:0d:fe:d1:e2:12:f0:f2:1e:c9:a6:4b:78:
         b4:9d:ed:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:58 2026 by rpki-client