Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/261a9d57-7d2a-4862-8ccb-7296ebb1656e.roa
File:                     261a9d57-7d2a-4862-8ccb-7296ebb1656e.roa (raw, json)
Hash identifier:          o6hh76C0RagBTSX6W1oOQ2/REHLMeTXtI1KrWzG+Occ=
Subject key identifier:   D4:FF:82:77:88:1A:37:89:D3:C3:01:D0:4B:4F:1D:66:1D:0B:5E:56
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       45001AE5DE9E0A225A1D03E05766A4D95645926F
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/261a9d57-7d2a-4862-8ccb-7296ebb1656e.roa
Signing time:             Sat 28 Feb 2026 04:30:57 +0000
ROA not before:           Sat 28 Feb 2026 04:30:57 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:f03d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:00:1a:e5:de:9e:0a:22:5a:1d:03:e0:57:66:a4:d9:56:45:92:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb 28 04:30:57 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=6e60b3b11a94e6bcf32a4934069f8a3f564d13241cd4ad1604bb89d0c913a128, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b6:43:5d:b7:cb:56:25:35:70:8e:c9:ad:a4:
                    53:2d:0b:f6:b5:50:e1:7d:df:57:93:8e:19:11:ec:
                    f9:a2:d6:3a:f9:76:cf:af:e3:f5:cb:77:c2:90:72:
                    ec:b7:17:f5:91:8b:ec:8b:2d:ea:ec:43:22:2f:92:
                    1b:cf:5f:92:66:7f:f9:ff:b4:03:4c:40:dd:1c:0a:
                    df:81:b9:f3:87:70:9c:03:39:0d:f4:ae:92:ad:33:
                    05:2a:85:9d:a1:9e:72:44:d6:f6:f7:d4:ad:d7:18:
                    ff:ba:9e:27:6c:66:76:d7:11:be:8f:42:1b:fd:46:
                    17:a6:d2:5d:77:8b:a0:e7:44:04:4b:3a:29:6d:0f:
                    5a:6f:90:25:c4:b6:1b:6e:59:cd:23:90:84:59:0b:
                    cc:47:68:18:c5:b3:4f:b7:77:b4:a6:c2:2a:0e:0b:
                    6d:48:b7:18:d8:4c:23:39:26:85:39:78:73:2f:24:
                    f1:34:92:f0:73:c0:5a:09:99:1a:74:12:4d:70:31:
                    fd:b2:88:e5:9a:68:36:30:d0:cd:2d:2b:31:d8:72:
                    49:b3:a1:59:fa:5b:ef:b5:99:6d:8b:fc:3d:37:1d:
                    6e:39:a9:a8:0a:ed:6d:e9:08:48:d0:9a:4b:02:4a:
                    98:42:a2:ef:7c:b9:16:cb:3c:ba:fb:fb:8b:cb:62:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FF:82:77:88:1A:37:89:D3:C3:01:D0:4B:4F:1D:66:1D:0B:5E:56
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/261a9d57-7d2a-4862-8ccb-7296ebb1656e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f03d::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:05:1b:c3:e5:b6:5d:dc:c1:2f:96:85:81:12:cc:b0:60:85:
         c6:ab:fb:7c:32:81:32:01:63:b6:ff:ac:f9:22:af:80:41:1c:
         42:ac:9e:8e:0c:74:49:4f:d9:35:2b:fa:70:6f:59:c0:47:3c:
         ad:be:d5:34:ee:f0:cc:9b:43:90:e6:78:10:76:90:48:96:1d:
         ef:cb:b2:f9:0a:1e:86:cb:51:26:88:78:3b:c1:e8:f3:19:a7:
         ed:08:7f:2d:3c:a3:4d:00:38:3f:5b:a2:fa:29:db:18:61:05:
         0c:56:d0:6b:04:74:ac:6a:31:6b:82:81:b7:b5:0e:52:1d:07:
         07:54:54:2f:94:8f:83:12:09:09:82:b6:c1:3e:2d:58:7e:f7:
         ac:da:fe:c1:dd:27:60:39:ec:c4:01:45:08:b3:9d:a6:79:4e:
         15:fe:e2:fe:f3:fd:4f:21:b9:89:b9:e8:46:ed:5a:8c:61:9b:
         cf:5a:bc:25:bf:ea:ec:e3:ff:a9:d4:5d:75:b5:3d:14:6b:8b:
         14:39:41:24:bf:5f:61:7a:13:93:20:8c:dd:c4:9e:96:21:21:
         be:68:a8:88:6c:1f:33:0f:e1:c6:c1:5b:ad:cf:db:38:be:d7:
         e0:ca:ef:af:9e:ff:96:96:ca:1a:82:0f:95:89:3f:c6:88:bf:
         de:d3:f0:d7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:26:29 2026 by rpki-client