Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41bd3cf9-8613-4e24-ae61-0f8b0a979958.roa
File:                     41bd3cf9-8613-4e24-ae61-0f8b0a979958.roa (raw, json)
Hash identifier:          H3IRJEIdert0iCzQ4S19JE3dOToCkXbn7hpaPpARquE=
Subject key identifier:   BA:DF:F6:5C:3F:1C:41:48:41:4E:4E:C6:D1:C8:3C:57:89:3B:1F:20
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       24126CC24F233C93157E3CE23CA431F914F4D828
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41bd3cf9-8613-4e24-ae61-0f8b0a979958.roa
Signing time:             Fri 13 Feb 2026 14:40:11 +0000
ROA not before:           Fri 13 Feb 2026 14:40:11 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     40045
IP address blocks:        2605:9cc0:c16::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:12:6c:c2:4f:23:3c:93:15:7e:3c:e2:3c:a4:31:f9:14:f4:d8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb 13 14:40:11 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=f3026ca15dd1d72a07bdd94a6d757a5a7bc907ccacbcaf4aa5b7813e3a4591e3, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:95:e0:95:e5:57:d1:c5:5d:d7:ac:83:30:a0:
                    65:9c:91:89:c8:eb:bf:1c:24:54:78:92:42:f0:de:
                    0a:f2:49:7f:48:1c:c8:43:13:f8:75:33:c8:47:a1:
                    5c:41:e2:ab:a1:e1:ab:ab:67:32:28:98:df:6c:a3:
                    36:73:86:ee:44:76:0e:49:1c:de:83:cd:12:cb:3c:
                    ad:22:60:a8:89:c6:fe:56:ad:48:8c:52:da:3d:9e:
                    18:08:ee:a1:7c:b1:6a:bb:9c:00:0e:30:6c:d4:d5:
                    12:44:b8:94:5f:39:e0:75:75:59:c5:43:60:0e:28:
                    6b:a2:8b:b0:c7:8f:4a:55:ac:98:ac:d5:73:0e:d3:
                    1c:16:82:4d:3e:da:a3:f9:9f:ba:fd:e3:cb:22:6d:
                    ee:5c:10:7e:61:fb:40:bc:62:fd:2c:c4:48:4c:e5:
                    cb:ba:b6:a0:b2:90:82:ce:9a:e7:73:8a:0c:16:3f:
                    61:5b:4b:ed:0e:7f:95:8c:21:28:f9:a0:a7:51:3d:
                    32:97:7d:50:be:71:3d:12:31:de:7e:85:3d:c3:c8:
                    c6:e5:6f:ee:f6:35:b1:40:de:6a:de:60:94:04:fc:
                    58:ca:d7:48:d2:c4:3b:fe:04:9b:41:20:b1:be:04:
                    1c:b6:f9:04:0a:33:d6:fc:f0:35:92:13:8d:fe:e1:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DF:F6:5C:3F:1C:41:48:41:4E:4E:C6:D1:C8:3C:57:89:3B:1F:20
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/41bd3cf9-8613-4e24-ae61-0f8b0a979958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c16::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:b4:fc:c3:57:71:23:a5:d6:67:fd:b3:d3:29:4c:3a:45:ac:
         a6:15:12:ae:34:47:a6:8c:64:94:21:13:69:ab:e0:67:85:07:
         1a:c0:7d:ef:c3:1f:ea:94:34:fd:a3:dd:32:40:5c:71:4c:de:
         5c:d6:e5:91:79:ae:d4:54:5f:a0:5d:0c:a7:76:71:73:bc:64:
         80:9a:4f:79:f9:52:5d:47:31:b7:8f:e8:9d:f8:76:34:b3:a1:
         a3:98:18:77:aa:90:ec:18:87:a7:22:64:5a:af:fe:30:b9:aa:
         ae:51:82:20:20:2c:09:8b:06:a0:eb:99:1f:a4:fc:7d:1d:f9:
         cc:3d:9e:9b:61:76:84:02:12:37:c3:a2:f7:dc:f6:95:87:a3:
         5f:12:ea:06:6a:16:f7:82:dc:ca:e5:0f:0b:fa:88:ad:84:19:
         b0:4f:d0:9b:bf:63:0e:1e:1f:37:a3:67:bf:7e:cc:83:f2:5b:
         f2:3a:89:23:64:84:fe:68:31:62:61:2c:99:94:17:46:4e:03:
         98:b8:65:4a:32:23:ca:6e:84:fa:86:12:7b:f8:a8:af:6c:46:
         af:12:14:1d:d5:6d:a3:b6:05:12:4c:2a:77:2a:dc:08:69:41:
         78:73:4a:46:5c:85:27:c9:e7:d5:ba:d5:e7:26:6e:8a:f4:06:
         d9:c9:5f:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:10:03 2026 by rpki-client