Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2777ce81-159e-42d7-a70c-8e57586449b7.roa
File:                     2777ce81-159e-42d7-a70c-8e57586449b7.roa (raw, json)
Hash identifier:          iTtcI4C8UCbsT5WLfmneHn6ckIpkFVSf92jgWmxgB+U=
Subject key identifier:   47:12:E6:B4:CD:6B:6A:DE:DD:E4:93:F3:73:FB:35:14:D0:94:85:CF
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       29C23A135A2C871109226E858C20D16D34652843
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2777ce81-159e-42d7-a70c-8e57586449b7.roa
Signing time:             Mon 27 Jul 2026 03:10:41 +0000
ROA not before:           Mon 27 Jul 2026 03:10:41 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c14::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c2:3a:13:5a:2c:87:11:09:22:6e:85:8c:20:d1:6d:34:65:28:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 27 03:10:41 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=49c546770cea21c90b5cddad1e5e15ba462a6304beaf5189ded34ab5cd28a5ca, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3e:28:86:ba:f0:62:79:9b:bc:2b:b3:ff:ec:
                    e4:41:b9:74:44:59:a9:cc:25:36:4d:1b:32:8f:ce:
                    cd:25:70:0c:5c:67:d0:83:d4:9d:aa:1b:cb:98:e0:
                    89:6d:0a:3e:90:84:ec:39:9b:07:c1:70:c8:5d:57:
                    df:b2:38:e6:5c:67:96:0b:2f:19:dc:94:1c:34:4c:
                    38:b0:2f:b8:a7:57:b7:14:25:22:0b:e1:99:20:12:
                    ab:dd:41:a0:c2:6d:ed:18:9e:77:43:d4:10:11:83:
                    a5:ab:fe:7d:a6:0d:b7:b9:22:99:6b:30:e9:7f:7f:
                    f9:e2:4a:08:20:0a:b6:13:07:ac:72:6a:a6:6f:1b:
                    13:62:9c:f6:cc:c6:b4:b3:e3:80:94:6e:71:3e:09:
                    f6:2e:02:2b:b2:64:d7:9a:92:35:e9:79:ef:71:29:
                    fb:a7:c9:03:c8:25:2c:6d:db:81:0c:ed:5a:4f:00:
                    51:cb:4e:62:5c:8f:61:e4:9e:9b:04:cd:e5:3b:2a:
                    0b:0e:ab:46:95:be:7d:b7:83:2d:69:52:00:96:9e:
                    4d:58:4c:11:fa:2d:5e:33:56:f6:ca:13:b6:14:bc:
                    05:6d:38:ab:04:c2:55:60:2d:6a:43:f0:65:40:1e:
                    5b:3d:8e:d6:ff:8b:ee:a0:47:1f:fc:51:a6:4b:66:
                    c7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:12:E6:B4:CD:6B:6A:DE:DD:E4:93:F3:73:FB:35:14:D0:94:85:CF
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2777ce81-159e-42d7-a70c-8e57586449b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c14::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:7a:89:b6:10:f6:24:43:17:52:c2:f4:24:ac:f6:d1:62:35:
         c5:8b:ae:49:04:0c:ca:28:28:c3:81:23:84:39:d0:68:32:a6:
         fb:66:96:38:0b:66:40:eb:f9:9a:b4:ee:cb:bc:a4:6a:6b:f8:
         ff:c5:ba:9d:36:1a:0f:f6:80:6b:d2:33:95:40:9e:3f:a0:3c:
         72:ec:45:00:eb:4c:42:77:79:b1:d4:f1:4b:f9:5d:df:15:5d:
         6c:42:79:8c:c4:4c:73:d7:ac:fe:5b:5e:0a:c4:b4:98:e8:c6:
         6f:a7:0b:da:3f:8e:52:3e:ec:25:3c:a0:4d:a6:af:54:92:3f:
         c5:e5:17:f5:1d:b2:1f:48:1f:2e:a5:9f:b5:7f:4c:3b:6f:7f:
         f0:b0:48:06:25:ed:09:d5:32:d4:e9:92:f8:74:29:4d:bd:bc:
         c8:26:a9:ef:f5:dd:43:88:d9:58:64:60:7f:3b:e3:01:fd:05:
         a2:bd:4c:e8:1c:d8:68:78:0e:42:d2:35:ff:1c:7c:e0:85:92:
         56:f2:84:44:0e:f5:34:6d:0e:76:4e:5c:ac:92:dd:27:02:0d:
         9c:9c:93:49:17:5d:54:c4:c3:2f:e8:27:8c:17:7d:58:c5:37:
         96:f9:16:63:d7:a9:32:97:6e:29:2a:2b:3a:b5:01:5f:f6:aa:
         a4:77:be:8c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUKcI6E1oshxEJIm6FjCDRbTRlKEMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzI3MDMxMDQxWhcNMjYxMDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0OWM1NDY3NzBjZWEyMWM5MGI1Y2RkYWQxZTVlMTViYTQ2
MmE2MzA0YmVhZjUxODlkZWQzNGFiNWNkMjhhNWNhMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7PiiGuvBieZu8K7P/7ORBuXREWanMJTZNGzKPzs0lcAxc
Z9CD1J2qG8uY4IltCj6QhOw5mwfBcMhdV9+yOOZcZ5YLLxnclBw0TDiwL7inV7cU
JSIL4ZkgEqvdQaDCbe0YnndD1BARg6Wr/n2mDbe5IplrMOl/f/niSgggCrYTB6xy
aqZvGxNinPbMxrSz44CUbnE+CfYuAiuyZNeakjXpee9xKfunyQPIJSxt24EM7VpP
AFHLTmJcj2HknpsEzeU7KgsOq0aVvn23gy1pUgCWnk1YTBH6LV4zVvbKE7YUvAVt
OKsEwlVgLWpD8GVAHls9jtb/i+6gRx/8UaZLZsc9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQURxLmtM1rat7d5JPzc/s1FNCUhc8wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzI3NzdjZTgxLTE1OWUtNDJkNy1hNzBjLThlNTc1ODY0NDliNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADBQwDQYJKoZIhvcNAQELBQADggEBACh6ibYQ9iRDF1LC9CSs9tFi
NcWLrkkEDMooKMOBI4Q50GgypvtmljgLZkDr+Zq07su8pGpr+P/Fup02Gg/2gGvS
M5VAnj+gPHLsRQDrTEJ3ebHU8Uv5Xd8VXWxCeYzETHPXrP5bXgrEtJjoxm+nC9o/
jlI+7CU8oE2mr1SSP8XlF/Udsh9IHy6ln7V/TDtvf/CwSAYl7QnVMtTpkvh0KU29
vMgmqe/13UOI2VhkYH874wH9BaK9TOgc2Gh4DkLSNf8cfOCFklbyhEQO9TRtDnZO
XKyS3ScCDZyck0kXXVTEwy/oJ4wXfVjFN5b5FmPXqTKXbikqKzq1AV/2qqR3vow=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:21:40 2026 by rpki-client