Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0f6b659b-9df4-477a-a87b-b8bcd08d670e.roa
File:                     0f6b659b-9df4-477a-a87b-b8bcd08d670e.roa (raw, json)
Hash identifier:          1VDNK6kLJWYLD0tyR10hXNU2JF/7ZUbwvpCRiiC4zdI=
Subject key identifier:   76:28:B8:91:8D:2D:FB:99:5C:F1:DB:ED:10:2A:A1:4C:F6:EF:A1:DF
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       411032503BC755FF71339F595B5CD0FE49915028
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0f6b659b-9df4-477a-a87b-b8bcd08d670e.roa
Signing time:             Tue 17 Feb 2026 02:50:05 +0000
ROA not before:           Tue 17 Feb 2026 02:50:05 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:402::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:10:32:50:3b:c7:55:ff:71:33:9f:59:5b:5c:d0:fe:49:91:50:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb 17 02:50:05 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=60565e08c4284df8be535060b4357e11883948c5e4d41ae23d88443a70808049, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:73:57:ec:ce:02:fa:ec:47:a6:aa:f3:92:
                    24:db:9d:57:c2:c3:21:20:39:86:1c:5e:6d:bd:b0:
                    03:fa:4f:ff:1f:9d:0d:74:d3:53:2c:55:bf:02:03:
                    ba:82:ab:5b:af:17:e1:01:9f:06:94:35:6f:12:ad:
                    31:c7:04:2e:2e:75:93:a4:bb:f5:d7:63:2d:b0:47:
                    9e:f6:ec:70:3f:1c:c0:86:62:8b:e6:13:12:20:e4:
                    77:6f:48:49:c6:97:69:b3:e7:20:7e:7d:48:41:81:
                    90:4a:1b:5f:99:41:ce:e6:96:ce:e9:69:7e:76:be:
                    50:9e:a1:0a:fb:f9:7c:a2:2d:96:9b:d5:ef:68:e6:
                    9b:62:22:de:d9:34:dc:c2:c5:99:4b:22:3d:0f:61:
                    cb:20:ce:32:c1:71:df:8d:fc:73:cc:5f:cf:7f:af:
                    b0:e9:35:54:e6:73:66:e3:c9:f5:83:7b:5a:7c:2d:
                    a0:fa:68:56:34:b9:aa:1d:98:b5:45:d8:5f:e2:e3:
                    b0:47:16:24:31:03:15:38:f7:0d:d7:08:ec:a4:fc:
                    ec:02:55:53:20:80:86:b3:ff:af:17:c2:d3:b5:9f:
                    d7:58:2b:bf:36:f7:87:f2:8a:13:44:e1:0b:2e:6f:
                    4c:4f:55:5e:98:dd:69:a7:14:49:12:d1:be:36:b8:
                    23:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:28:B8:91:8D:2D:FB:99:5C:F1:DB:ED:10:2A:A1:4C:F6:EF:A1:DF
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0f6b659b-9df4-477a-a87b-b8bcd08d670e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:402::/47

    Signature Algorithm: sha256WithRSAEncryption
         11:d1:13:c3:bd:d9:06:14:a5:aa:64:6f:c5:3f:a9:0b:5a:03:
         ea:00:c5:ab:a9:a2:0f:0a:6d:73:33:d2:df:99:57:8f:31:39:
         fe:89:22:77:87:e1:cf:5f:d1:4e:88:58:e1:57:9f:0c:04:b0:
         42:fe:b1:2e:25:f9:5f:0b:cb:8e:e9:bc:f0:a1:b6:02:3b:59:
         fb:b8:48:32:49:89:e3:d6:16:55:b1:63:9a:93:b7:d4:3e:7f:
         62:4e:1c:1d:db:d7:06:44:e8:40:39:31:a1:37:7a:a3:a3:13:
         30:a6:0d:57:5a:3e:29:be:a7:a1:f9:48:14:21:12:51:39:e5:
         da:55:89:16:11:3e:33:1a:4d:23:4a:d2:43:4c:89:f1:fe:d3:
         93:60:33:0b:e2:a9:88:68:5a:7b:7c:db:52:79:a0:c6:c2:64:
         88:26:96:6d:ff:0a:f6:c0:c7:79:5c:e2:2e:0f:72:3c:69:e0:
         f7:ea:d0:8d:ee:d4:e2:57:1a:82:9c:76:ad:9a:db:b4:ec:a4:
         ea:1a:d8:65:5b:b8:3a:04:d6:78:19:a2:7b:81:24:26:2a:25:
         61:bd:d0:0b:9a:9b:2b:c1:f1:70:54:d9:9f:17:df:de:bd:73:
         6b:86:f1:05:bd:4b:c4:92:a2:8c:92:32:94:7d:75:53:3b:4f:
         26:e2:90:b1
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQRAyUDvHVf9xM59ZW1zQ/kmRUCgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjE3MDI1MDA1WhcNMjYwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MDU2NWUwOGM0Mjg0ZGY4YmU1MzUwNjBiNDM1N2UxMTg4
Mzk0OGM1ZTRkNDFhZTIzZDg4NDQzYTcwODA4MDQ5MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCUzHNX7M4C+uxHpqrzkiTbnVfCwyEgOYYcXm29sAP6T/8f
nQ1001MsVb8CA7qCq1uvF+EBnwaUNW8SrTHHBC4udZOku/XXYy2wR5727HA/HMCG
YovmExIg5HdvSEnGl2mz5yB+fUhBgZBKG1+ZQc7mls7paX52vlCeoQr7+XyiLZab
1e9o5ptiIt7ZNNzCxZlLIj0PYcsgzjLBcd+N/HPMX89/r7DpNVTmc2bjyfWDe1p8
LaD6aFY0uaodmLVF2F/i47BHFiQxAxU49w3XCOyk/OwCVVMggIaz/68XwtO1n9dY
K78294fyihNE4Qsub0xPVV6Y3WmnFEkS0b42uCO5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUdii4kY0t+5lc8dvtECqhTPbvod8wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzBmNmI2NTliLTlkZjQtNDc3YS1hODdiLWI4YmNkMDhkNjcwZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmBZzABAIwDQYJKoZIhvcNAQELBQADggEBABHRE8O92QYUpapkb8U/qQta
A+oAxaupog8KbXMz0t+ZV48xOf6JIneH4c9f0U6IWOFXnwwEsEL+sS4l+V8Ly47p
vPChtgI7Wfu4SDJJiePWFlWxY5qTt9Q+f2JOHB3b1wZE6EA5MaE3eqOjEzCmDVda
Pim+p6H5SBQhElE55dpViRYRPjMaTSNK0kNMifH+05NgMwviqYhoWnt821J5oMbC
ZIgmlm3/CvbAx3lc4i4Pcjxp4Pfq0I3u1OJXGoKcdq2a27TspOoa2GVbuDoE1ngZ
onuBJCYqJWG90AuamyvB8XBU2Z8X3969c2uG8QW9S8SSooySMpR9dVM7TybikLE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:10:08 2026 by rpki-client