Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff344c8a-ec73-4595-be4b-b5a25b7be82a.roa
File:                     ff344c8a-ec73-4595-be4b-b5a25b7be82a.roa (raw, json)
Hash identifier:          HY2xepAVQcjQx5jSuEvqADv70duyCCDD97hx/+w5epM=
Subject key identifier:   A4:0B:4C:60:2E:10:9F:2C:E2:EF:BC:15:93:5D:98:7B:B0:36:C8:E4
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6DFD503CF2E447DCD2FD6160A9B59B957AFC2A8F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff344c8a-ec73-4595-be4b-b5a25b7be82a.roa
Signing time:             Fri 13 Feb 2026 12:50:07 +0000
ROA not before:           Fri 13 Feb 2026 12:50:07 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:389e::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fd:50:3c:f2:e4:47:dc:d2:fd:61:60:a9:b5:9b:95:7a:fc:2a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 12:50:07 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=ab848fb1c5ab4659b64db7859343fcab386eff3ba2110e6e9abaad513ffcd98b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:5c:71:55:3e:be:a4:b7:b7:4e:4c:96:a6:
                    cb:74:7d:07:84:e2:f3:62:b3:82:0a:e5:46:a1:8c:
                    3b:af:f1:0a:e7:3d:1c:49:1c:af:55:ea:34:a0:30:
                    b4:80:1e:e0:e3:be:24:b9:88:d0:a7:10:e1:ee:b0:
                    d5:c3:2e:d9:22:05:2f:53:02:64:00:f2:a6:af:a5:
                    c3:a2:db:ad:81:80:c2:2c:84:64:4a:d6:22:6f:99:
                    96:f7:4d:22:c0:17:32:ae:43:83:6f:c6:93:60:f5:
                    72:76:ed:98:89:f9:18:b7:35:43:30:e0:7e:29:49:
                    70:7c:b0:9a:62:11:59:a3:5c:f5:71:71:e0:76:43:
                    a4:b9:31:dc:3f:bb:f7:94:ab:ad:06:49:c9:69:a4:
                    37:b6:3c:50:8b:7a:d1:85:5f:d8:8d:55:7d:99:92:
                    20:9b:ec:7c:08:b9:8e:a7:71:a7:9a:6e:f6:89:cb:
                    ae:60:a9:b3:36:1d:81:54:6d:78:85:fe:52:4a:4f:
                    0e:fb:ea:1a:51:35:76:dc:e5:8f:e2:7a:a5:d8:dd:
                    e2:8c:3d:34:5e:7e:7a:b5:5b:69:1d:d8:49:93:ba:
                    aa:b1:2b:97:f2:1b:c5:4a:97:4e:25:e0:cc:81:e8:
                    b0:8c:64:04:3b:13:24:56:bb:fe:6f:ed:06:e2:15:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0B:4C:60:2E:10:9F:2C:E2:EF:BC:15:93:5D:98:7B:B0:36:C8:E4
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ff344c8a-ec73-4595-be4b-b5a25b7be82a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:389e::/47

    Signature Algorithm: sha256WithRSAEncryption
         a2:47:6e:f6:e6:8b:b5:97:54:9c:e8:cb:56:d7:11:e9:6a:44:
         02:b8:05:04:aa:86:57:ea:86:95:ac:44:3b:45:53:a6:d8:71:
         58:22:fa:ef:2c:12:ac:62:83:2c:41:85:93:c1:2d:c0:07:12:
         e0:9a:b7:df:ec:05:45:cc:5b:d3:a0:2c:be:43:c1:db:20:42:
         e6:d1:0c:19:a9:27:96:f9:62:70:76:61:b5:6a:f4:98:05:09:
         37:38:e0:0d:41:07:f6:4d:91:3c:16:95:5c:5c:05:ed:e8:1d:
         cc:5b:e1:d9:56:8b:cb:8f:dc:f1:d1:ca:80:69:3e:fa:d1:b7:
         34:c1:a0:92:7e:6e:cc:1f:20:3c:50:90:aa:0d:0d:22:eb:bc:
         55:f0:d9:16:48:a0:69:22:28:72:33:f9:30:1d:7f:29:d9:38:
         53:c2:ae:bc:f3:c0:e7:8f:63:ff:89:f0:c8:69:dd:64:8e:67:
         a6:39:ee:6f:25:3d:a0:21:ef:96:4d:9c:d5:6d:89:e9:6f:f9:
         0c:e1:f0:5e:fb:df:71:93:20:86:14:bc:95:f2:72:70:b1:47:
         b4:27:62:d0:04:6c:0b:37:23:e6:38:c5:84:2c:99:8b:66:6f:
         99:fa:29:ba:27:78:5b:42:7b:0d:84:85:cc:31:e3:1e:27:30:
         87:50:ca:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:34 2026 by rpki-client