Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f84768ef-bd7c-499a-b2b5-49bfe94e4d31.roa
File:                     f84768ef-bd7c-499a-b2b5-49bfe94e4d31.roa (raw, json)
Hash identifier:          3Z8dVAXF8/fPZ3dIdVtDj+akajVwlkSHT3LTRUpVdEY=
Subject key identifier:   1D:27:B0:BE:83:19:85:7A:6D:3A:FD:2C:A6:94:C0:C6:B0:6B:F9:22
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       27F005EFCD8EFE9A95E8A455B71741E19B980EB8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f84768ef-bd7c-499a-b2b5-49bfe94e4d31.roa
Signing time:             Thu 12 Feb 2026 00:40:12 +0000
ROA not before:           Thu 12 Feb 2026 00:40:12 +0000
ROA not after:            Wed 13 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2e4c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f0:05:ef:cd:8e:fe:9a:95:e8:a4:55:b7:17:41:e1:9b:98:0e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 12 00:40:12 2026 GMT
            Not After : May 13 23:59:59 2026 GMT
        Subject: serialNumber=a83fe041971cd2f6933d3932f9e1e677774c2f08965970691c5432e8cff39d23, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:72:47:81:22:c5:ac:f3:72:6d:6e:bf:9f:
                    b2:f8:cf:86:6f:f2:5a:ba:4a:0e:c2:64:9a:86:55:
                    a9:2b:7b:1a:16:0f:63:41:a5:99:3d:a3:89:b0:18:
                    28:7d:b5:03:9e:e5:bf:5a:0d:57:96:24:0d:2c:c0:
                    23:5e:3c:5c:35:fd:cc:8a:58:09:9b:27:c6:78:d2:
                    0e:96:37:ec:df:03:ea:48:ec:89:fc:28:1b:bb:b5:
                    57:46:28:da:40:1e:20:6c:fa:1c:f9:eb:9c:0d:44:
                    99:b7:25:10:42:f6:ff:6b:d0:7c:46:2e:a2:6f:cd:
                    58:4c:5a:37:f9:d0:4e:91:e4:29:93:2c:89:c8:bc:
                    1c:f0:8c:75:d1:a8:fe:44:57:dc:86:2e:73:7d:2a:
                    52:66:87:c4:4e:04:56:1d:f9:d1:c5:ca:da:a5:62:
                    c3:77:38:90:75:0d:54:78:7a:43:aa:65:8b:49:6b:
                    f1:e3:f3:f7:be:72:4f:df:33:3e:d4:ad:0c:4e:5a:
                    c0:d9:58:b0:ff:73:ba:26:de:ab:56:51:49:06:7a:
                    ab:6f:f5:42:14:7b:ea:30:1e:e9:93:40:43:73:61:
                    b8:c8:f8:66:33:c4:f0:d4:e4:d5:e7:d9:7f:60:36:
                    cc:88:07:10:a2:10:e2:e9:f2:79:6c:68:20:e4:9c:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:27:B0:BE:83:19:85:7A:6D:3A:FD:2C:A6:94:C0:C6:B0:6B:F9:22
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/f84768ef-bd7c-499a-b2b5-49bfe94e4d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2e4c::/47

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:1e:94:2f:9f:2d:c1:fd:cf:d7:0a:1d:6f:b6:71:4b:47:
         20:e1:2f:8f:cd:db:d7:c3:48:ab:22:26:91:81:2f:69:8c:8c:
         e5:80:f5:1f:c0:aa:da:8c:bc:0a:56:6f:9b:75:56:94:5e:02:
         ab:87:7e:35:a0:c1:5c:bd:ec:f7:de:fc:bf:68:6d:9a:c9:95:
         33:eb:d4:d7:a4:61:b5:5c:aa:95:0d:53:65:92:a9:cb:c7:d0:
         8b:94:f4:bb:ca:ac:17:f5:03:50:86:de:da:25:a6:55:90:a9:
         4e:b5:6f:47:df:f3:fa:c5:d5:eb:98:b1:10:5f:4b:d4:f3:52:
         81:07:10:3a:c6:74:36:49:a4:9c:c9:97:e5:6d:63:3a:a9:c2:
         a1:0d:2c:f3:fd:3d:bb:12:9f:2a:c6:70:21:fc:e7:50:f5:22:
         10:9a:18:cb:f1:9f:40:f0:98:ab:17:a8:e8:80:f3:1f:ea:6d:
         4e:57:eb:93:2d:9a:4c:a4:d7:f5:19:92:fd:a4:e6:42:86:7c:
         21:65:26:9e:37:2d:f2:a5:5c:82:04:a1:d7:f1:08:ae:55:1d:
         08:e7:51:25:aa:49:b5:75:01:9e:e0:29:d2:25:bf:01:cf:c8:
         0c:ab:df:2b:ef:03:77:34:dc:76:57:37:05:e0:ec:fa:f2:a9:
         00:29:96:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:51:00 2026 by rpki-client