Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3ee19f4b-6941-451a-a36b-eca835bb4851.roa
File:                     3ee19f4b-6941-451a-a36b-eca835bb4851.roa (raw, json)
Hash identifier:          W6XjshGtWDF55xMD9ltUpjPhP5RPJlDTQDf84TsHA8c=
Subject key identifier:   24:5B:98:ED:A6:58:48:9A:6E:42:20:A1:11:0E:70:79:48:FE:61:78
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       1CFD0A68B1BCC36FE1D1792D08B47563CB964382
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3ee19f4b-6941-451a-a36b-eca835bb4851.roa
Signing time:             Fri 13 Feb 2026 14:50:10 +0000
ROA not before:           Fri 13 Feb 2026 14:50:10 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c0b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fd:0a:68:b1:bc:c3:6f:e1:d1:79:2d:08:b4:75:63:cb:96:43:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb 13 14:50:10 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=48f61d68f2e951503ddc41a6787ea0d5eb24f15768d24369a2f4335a0ef4be4a, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:31:3f:c5:de:63:0c:e9:95:61:3b:dd:ed:fd:
                    56:1d:d7:c0:8e:f2:0e:68:40:6a:f5:17:d5:6e:b4:
                    9e:41:24:20:46:3d:f0:8e:5d:1d:96:a7:23:54:be:
                    39:54:00:4c:fd:0f:bf:82:dd:de:7e:89:29:98:a3:
                    40:09:7a:b3:a2:cc:65:e4:46:e6:f2:a5:2c:cd:6b:
                    69:88:a4:e4:b0:c7:dd:b2:fa:33:83:20:97:9f:77:
                    36:3a:36:e8:99:01:fc:36:60:d4:27:c4:2a:60:52:
                    c1:0b:aa:6f:0b:ed:61:af:1b:26:61:19:24:5f:e8:
                    57:7c:20:3c:62:5e:2a:44:e6:85:ee:fd:4a:8a:c7:
                    0b:06:1c:fb:d1:40:47:59:58:9f:cc:a9:f4:1f:6e:
                    4e:bc:fb:cd:0b:e0:79:f4:37:56:20:32:c6:3b:48:
                    aa:a2:a0:31:e1:d9:23:07:84:80:81:06:1b:6f:78:
                    73:0e:48:ef:a4:79:55:37:ec:68:3e:35:87:44:6e:
                    0b:78:38:71:37:a2:b2:e3:fd:28:ae:7e:09:95:d0:
                    8d:49:b5:3a:fd:0a:7c:ca:bb:62:8b:38:a0:a6:1c:
                    c4:c1:97:e8:97:78:da:a6:02:ef:64:f5:2c:43:2e:
                    ee:b6:d8:2c:d0:9c:a4:7f:73:de:c8:16:7e:42:13:
                    f2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5B:98:ED:A6:58:48:9A:6E:42:20:A1:11:0E:70:79:48:FE:61:78
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3ee19f4b-6941-451a-a36b-eca835bb4851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c0b::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:2f:0b:91:53:81:51:e7:d3:9c:5c:2d:72:97:13:7f:6b:32:
         9f:89:39:30:58:84:35:01:bb:96:45:9d:1d:89:8b:f7:54:d2:
         e0:c5:57:de:c9:6d:e9:c9:c8:0c:16:2d:ef:f9:a4:35:a7:5c:
         1d:a2:77:bb:b7:ca:bd:a5:9a:87:8b:c8:63:aa:1c:a1:cf:1a:
         24:0b:d8:e7:3e:6e:5b:31:0c:b9:4d:d1:6a:bf:27:c6:0b:2a:
         1d:a1:3f:c3:10:90:25:bc:88:f3:e2:e8:ca:34:52:f3:5b:28:
         70:3f:58:00:e0:59:26:4c:ed:be:e0:45:44:6c:ac:81:1a:b8:
         0f:71:04:44:cc:97:6e:50:9d:0f:cf:2b:36:4e:a3:a1:85:88:
         ba:e1:31:ba:56:ab:cf:e3:a4:c9:6a:a8:f1:78:5f:e6:87:a8:
         03:af:dc:8b:eb:c3:52:20:af:79:a1:d4:44:92:53:72:67:9a:
         6f:ba:87:64:a5:6f:d2:9f:f7:da:3e:bb:49:ad:42:3b:cf:2d:
         82:a5:8b:0f:b9:e4:7d:89:ca:fa:c1:9c:66:0b:a1:e7:05:43:
         5b:03:4e:10:40:70:cd:a3:e2:9e:50:f5:32:58:62:09:47:70:
         1b:89:93:76:2d:c2:6f:7b:6d:62:b5:65:ab:1c:b4:13:5a:16:
         18:08:5d:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:09:59 2026 by rpki-client