Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fff03c25-a34c-44fe-bd99-e6c5e86fb5c8.roa
File:                     fff03c25-a34c-44fe-bd99-e6c5e86fb5c8.roa (raw, json)
Hash identifier:          85ggw3G2mEk1l/NoVc0hug2Eqi1GKqwHbJbzvlI85No=
Subject key identifier:   F1:9F:75:AE:B7:EB:BE:A1:38:FB:F4:1F:93:90:F8:C2:36:32:BC:BB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3AA22BE088FADA5D21F5BC588AE3A6BFB454D37B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fff03c25-a34c-44fe-bd99-e6c5e86fb5c8.roa
Signing time:             Fri 13 Feb 2026 05:41:34 +0000
ROA not before:           Fri 13 Feb 2026 05:41:34 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3dc0::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a2:2b:e0:88:fa:da:5d:21:f5:bc:58:8a:e3:a6:bf:b4:54:d3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 13 05:41:34 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=ad714cf110f5bc1b69b53fbfb38c8990c7a444b0b95d15fbe3774a2f5817822f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:24:c7:a0:95:b7:9a:c8:7c:01:45:d2:8f:
                    0a:5e:e4:5e:ae:14:48:9d:57:b8:06:fe:9b:c9:40:
                    72:08:82:24:3d:87:1f:ed:3a:54:a0:31:03:5e:46:
                    dd:4c:c3:17:3f:64:eb:35:59:4d:b0:61:08:d9:d8:
                    13:c8:e0:f5:bf:5a:6e:88:81:3c:02:97:0d:a0:7d:
                    0b:82:9f:68:7d:c1:df:49:f2:b1:21:96:81:4f:f9:
                    af:f4:59:15:b3:8a:0c:c3:07:93:aa:97:13:8b:9d:
                    b6:9b:fe:8d:7f:f7:d6:d3:80:20:b6:9e:13:47:cd:
                    08:6c:e1:b7:b7:3d:5c:2c:de:27:c8:f9:3e:f9:3c:
                    b1:8a:e9:48:02:8e:2c:37:a0:5b:a1:51:c7:d5:f8:
                    be:5a:e4:fd:91:97:18:2d:b6:3d:0f:99:17:9b:01:
                    66:20:4c:5e:81:95:df:ab:71:07:39:95:37:3e:00:
                    b4:95:85:34:aa:a8:04:b3:06:86:26:c7:99:f6:39:
                    25:39:33:40:4b:b2:fc:84:68:7c:f1:f9:70:06:21:
                    e9:5b:2f:5d:83:f9:46:63:b4:b9:03:d3:de:1b:a6:
                    04:30:f3:3a:e4:79:49:3c:84:68:43:6a:ff:e8:47:
                    3c:2f:9a:e2:f9:35:5c:81:a3:f3:dc:49:b7:83:92:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9F:75:AE:B7:EB:BE:A1:38:FB:F4:1F:93:90:F8:C2:36:32:BC:BB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/fff03c25-a34c-44fe-bd99-e6c5e86fb5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3dc0::/42

    Signature Algorithm: sha256WithRSAEncryption
         af:4a:d1:e3:d9:03:a6:1a:35:a0:30:15:dc:6a:41:6d:22:f8:
         04:0b:ae:7d:e8:d3:f2:10:01:17:ee:4c:3d:c9:01:d5:aa:da:
         bb:ba:3a:be:f2:65:b1:4f:04:3f:73:1e:13:6b:e1:a8:e6:11:
         f3:cc:0d:b3:78:34:37:39:4d:b4:97:71:71:8e:8e:38:14:c9:
         ad:0a:6b:8c:52:42:f9:02:4d:9c:ff:43:63:c7:b6:eb:cf:c5:
         f7:90:bd:61:71:89:d4:67:26:50:be:e6:a6:12:53:10:9f:63:
         9f:28:2d:d1:b3:98:17:58:a7:f8:af:f4:eb:3a:9e:d1:6c:d4:
         b3:a9:92:cd:93:b3:ef:76:d4:1f:b6:96:33:7f:0d:8f:45:76:
         77:79:f0:46:a8:ce:76:59:74:7f:38:30:03:76:3b:6a:4a:89:
         57:f5:88:4c:4c:ee:3f:c7:60:ba:96:c3:87:38:04:15:81:63:
         07:52:57:8d:84:67:ce:40:bc:9d:71:52:a3:2b:1a:9b:dd:9b:
         b9:5b:c5:99:de:5a:5f:f6:dc:2e:62:10:7f:07:85:4c:5f:9e:
         5b:be:99:b3:24:6f:fa:2d:3b:dd:9a:b2:33:8d:82:67:39:45:
         51:82:55:86:ab:1d:2a:0d:b8:20:1b:7e:65:48:f1:7c:e6:54:
         ab:10:15:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:19:32 2026 by rpki-client