Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6d22e3ab-59b8-41bb-8685-0758081d8424.roa
File:                     6d22e3ab-59b8-41bb-8685-0758081d8424.roa (raw, json)
Hash identifier:          XgMkxew1717Fq3S8k7qWDwEpXvR9BI/+cbZmt3FVJQM=
Subject key identifier:   29:26:DB:E2:A4:B7:0E:16:74:1F:62:0A:D6:8B:16:7F:6C:2A:87:93
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       39A14DE737D7DEB5CCF3456C49AB40AB3456ADE1
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6d22e3ab-59b8-41bb-8685-0758081d8424.roa
Signing time:             Sat 28 Feb 2026 04:40:12 +0000
ROA not before:           Sat 28 Feb 2026 04:40:12 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:64b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a1:4d:e7:37:d7:de:b5:cc:f3:45:6c:49:ab:40:ab:34:56:ad:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb 28 04:40:12 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=0a5d45738269f303f36d310f62a90ab0234179afecb049cdd159d269efb09b6f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:fb:13:01:f3:68:6b:6e:62:45:6f:e1:ac:
                    75:c0:95:7c:64:f4:28:44:92:f7:b7:13:c4:2c:bc:
                    a7:8a:e5:0f:de:aa:43:b5:0d:e6:07:f0:c6:87:49:
                    e3:27:9a:c2:af:c9:5d:e6:c0:c5:ec:f4:e4:d7:38:
                    53:21:c5:55:27:d8:52:15:e9:6f:fd:76:11:9e:b6:
                    ca:78:02:df:e8:58:64:47:f1:ef:1a:e9:9f:40:b2:
                    e8:df:97:32:8b:15:34:d0:9d:ca:4c:0a:ee:ac:b9:
                    db:f7:91:4a:4c:57:63:e1:86:5c:d2:86:31:b3:79:
                    92:48:65:f4:dc:a4:b5:e6:d0:d5:92:39:a8:f6:ad:
                    be:1b:3d:04:8f:bc:0d:f6:2f:5c:9d:29:6a:4f:fb:
                    50:74:d4:83:d5:38:94:4a:61:c2:f0:8a:59:65:c9:
                    5b:58:55:b0:23:2d:b1:51:2c:e9:98:cf:b6:90:5b:
                    09:ac:58:b0:b5:87:fe:bd:88:91:f2:ec:66:d6:c2:
                    c0:5c:80:d9:43:0a:42:37:41:8f:0a:77:28:3f:58:
                    cf:2e:9a:77:11:a5:0b:81:e6:0a:f3:b4:b4:e7:d9:
                    df:4d:52:41:4e:32:8e:81:0d:39:da:90:a3:67:92:
                    e3:26:f9:42:64:7d:3c:7f:6c:61:f7:b3:f2:24:85:
                    30:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:26:DB:E2:A4:B7:0E:16:74:1F:62:0A:D6:8B:16:7F:6C:2A:87:93
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6d22e3ab-59b8-41bb-8685-0758081d8424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:64b::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:f7:2c:7e:b9:eb:94:4d:db:9d:e8:ef:da:9d:12:8d:79:64:
         9c:4f:09:21:fe:d4:2e:0b:88:08:f7:b9:b2:9f:4d:47:a0:f9:
         bb:da:f4:b9:9c:2b:e4:d9:63:4e:4a:66:aa:df:25:de:0f:42:
         74:ea:47:22:4d:b0:1b:5f:3e:b3:87:18:9f:28:f5:d2:7a:6d:
         94:10:9a:cd:d3:fc:43:8d:41:b5:50:79:1e:5a:17:3c:d0:0e:
         f9:7b:8c:08:98:75:41:84:87:4f:1b:84:4e:fe:cc:84:b5:de:
         f5:56:7b:01:78:4d:27:7b:91:31:96:91:cb:6a:cd:b2:d2:6f:
         8a:f8:43:75:14:65:05:80:75:70:e9:ac:46:4b:28:3a:94:8c:
         e6:18:6e:a1:80:c9:4e:19:54:16:11:27:2c:d9:2f:6b:79:77:
         84:e1:98:b0:a1:a3:63:07:48:95:da:a0:d6:ce:21:b8:49:cb:
         68:6c:91:de:96:ab:d7:43:15:bf:21:07:92:81:20:86:f3:02:
         29:16:4c:d2:96:f6:02:e0:30:87:11:af:b3:af:31:3e:0a:87:
         0a:46:82:e6:86:50:1f:a9:db:93:b5:3e:05:17:8b:84:90:71:
         06:c8:df:58:8f:c8:b8:ed:ec:4d:c5:fc:1c:9a:d6:be:ce:e1:
         a3:4c:33:f3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUOaFN5zfX3rXM80VsSatAqzRWreEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQ0MDEyWhcNMjYwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AwYTVkNDU3MzgyNjlmMzAzZjM2ZDMxMGY2MmE5MGFiMDIz
NDE3OWFmZWNiMDQ5Y2RkMTU5ZDI2OWVmYjA5YjZmMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCiJvsTAfNoa25iRW/hrHXAlXxk9ChEkve3E8QsvKeK5Q/e
qkO1DeYH8MaHSeMnmsKvyV3mwMXs9OTXOFMhxVUn2FIV6W/9dhGetsp4At/oWGRH
8e8a6Z9AsujflzKLFTTQncpMCu6sudv3kUpMV2PhhlzShjGzeZJIZfTcpLXm0NWS
Oaj2rb4bPQSPvA32L1ydKWpP+1B01IPVOJRKYcLwilllyVtYVbAjLbFRLOmYz7aQ
WwmsWLC1h/69iJHy7GbWwsBcgNlDCkI3QY8Kdyg/WM8umncRpQuB5grztLTn2d9N
UkFOMo6BDTnakKNnkuMm+UJkfTx/bGH3s/IkhTDTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUKSbb4qS3DhZ0H2IK1osWf2wqh5MwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzZkMjJlM2FiLTU5YjgtNDFiYi04Njg1LTA3NTgwODFkODQyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABkswDQYJKoZIhvcNAQELBQADggEBAFn3LH6565RN253o79qdEo15
ZJxPCSH+1C4LiAj3ubKfTUeg+bva9LmcK+TZY05KZqrfJd4PQnTqRyJNsBtfPrOH
GJ8o9dJ6bZQQms3T/EONQbVQeR5aFzzQDvl7jAiYdUGEh08bhE7+zIS13vVWewF4
TSd7kTGWkctqzbLSb4r4Q3UUZQWAdXDprEZLKDqUjOYYbqGAyU4ZVBYRJyzZL2t5
d4ThmLCho2MHSJXaoNbOIbhJy2hskd6Wq9dDFb8hB5KBIIbzAikWTNKW9gLgMIcR
r7OvMT4KhwpGguaGUB+p25O1PgUXi4SQcQbI31iPyLjt7E3F/Bya1r7O4aNMM/M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:48:30 2026 by rpki-client