Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/818308ca-00f8-4bcd-be3d-6888ee126bf1.roa
File:                     818308ca-00f8-4bcd-be3d-6888ee126bf1.roa (raw, json)
Hash identifier:          Gd7Wov2AyZOmSjo9cfKb0qDsuPYXPL7v+YgV2P3TLLg=
Subject key identifier:   FA:66:D8:71:47:9C:A6:57:06:78:9F:5C:FB:A5:31:E3:CD:1A:49:7E
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       74FB47D65DAF4E8B7787F3A0116A8C0BF26F7626
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/818308ca-00f8-4bcd-be3d-6888ee126bf1.roa
Signing time:             Tue 19 May 2026 03:50:08 +0000
ROA not before:           Tue 19 May 2026 03:50:08 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:64b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fb:47:d6:5d:af:4e:8b:77:87:f3:a0:11:6a:8c:0b:f2:6f:76:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 19 03:50:08 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=2eb8dd9589110aa2ce245dd973a1034eff026b2f90ec5d6f06103e974cc28904, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:a4:aa:6c:bc:6f:ee:73:15:5d:a9:c1:ff:
                    8f:d3:73:fd:35:7d:3d:21:c1:20:88:a0:ba:a2:8f:
                    02:56:a3:92:eb:49:2e:00:4e:92:87:ed:90:55:b6:
                    c3:fe:51:f1:71:8b:17:d0:da:e1:0d:85:e5:58:63:
                    55:7c:dc:1c:48:79:9e:66:f6:5d:93:98:4b:e3:32:
                    69:3f:d5:93:c7:ed:04:ea:53:29:a2:71:05:5c:0f:
                    22:be:1d:42:cd:42:92:ec:b1:5d:af:6d:f7:f3:cc:
                    3b:95:f7:ce:fb:eb:e7:e6:99:a4:08:25:75:85:1a:
                    6f:6c:bb:4c:2b:04:7e:21:aa:6d:fa:5c:7a:4b:67:
                    09:48:fb:7c:19:a3:06:5e:77:b6:82:0c:14:39:db:
                    a6:a6:fe:78:09:6f:28:e5:71:aa:57:29:23:0b:2a:
                    07:19:12:d4:60:4f:4f:d3:a6:98:49:2f:f2:eb:75:
                    a5:7f:22:0d:ae:7f:ea:b4:56:05:0d:0d:13:ee:66:
                    e7:84:38:12:8d:4e:88:2b:82:2e:12:fa:c0:75:78:
                    25:ee:35:2c:7d:b8:eb:16:22:c0:7d:bd:70:da:a3:
                    23:a8:ab:30:76:5c:79:45:44:cb:7e:b6:d7:ac:df:
                    4f:f5:fa:91:38:1d:fa:26:9f:3b:d8:cd:1a:92:ec:
                    c5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:66:D8:71:47:9C:A6:57:06:78:9F:5C:FB:A5:31:E3:CD:1A:49:7E
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/818308ca-00f8-4bcd-be3d-6888ee126bf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:64b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:b0:cd:68:ba:30:d7:68:d1:6f:c2:14:9e:64:b8:32:55:55:
         4a:c7:1b:02:e0:e2:38:ca:63:43:18:14:5d:28:25:5f:9a:c7:
         8e:c8:ae:80:07:2f:ff:38:e8:a7:c2:d8:02:e1:71:57:cd:e7:
         ce:c4:48:e0:04:9a:1e:ae:1d:a2:5a:7b:a2:4f:9d:46:ee:fc:
         2b:92:e8:ba:5d:56:17:4e:61:cf:1c:6e:83:76:4b:d2:9d:be:
         70:40:48:da:b9:12:85:ee:df:08:f9:31:81:61:b6:c5:f8:14:
         58:f6:86:fc:0d:b4:61:13:81:41:8d:d8:df:2b:bb:02:d9:f0:
         3f:0a:3e:a8:4c:7c:d5:41:7c:6b:c6:ec:88:e2:6d:5f:bc:6e:
         5a:49:e6:93:c7:8a:a9:98:7f:49:db:40:89:23:bd:a2:03:8d:
         41:c6:3d:d6:f7:f3:e7:3d:d0:e5:bc:17:c4:79:44:8e:20:51:
         23:9a:b9:3e:1e:89:62:2d:db:47:d6:95:03:f6:73:f4:09:25:
         84:11:b1:53:ea:3e:70:a7:df:76:d5:5a:19:05:8a:48:3d:6a:
         70:01:6f:17:7c:fc:cd:45:9a:cb:d2:87:74:95:ec:2d:66:0a:
         67:e6:a1:21:67:cd:6f:5a:d4:8f:6b:78:f3:1f:4b:7b:79:8b:
         2c:24:29:41
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUdPtH1l2vTot3h/OgEWqMC/JvdiYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE5MDM1MDA4WhcNMjYwODE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyZWI4ZGQ5NTg5MTEwYWEyY2UyNDVkZDk3M2ExMDM0ZWZm
MDI2YjJmOTBlYzVkNmYwNjEwM2U5NzRjYzI4OTA0MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8b6SqbLxv7nMVXanB/4/Tc/01fT0hwSCIoLqijwJWo5Lr
SS4ATpKH7ZBVtsP+UfFxixfQ2uENheVYY1V83BxIeZ5m9l2TmEvjMmk/1ZPH7QTq
UymicQVcDyK+HULNQpLssV2vbffzzDuV98776+fmmaQIJXWFGm9su0wrBH4hqm36
XHpLZwlI+3wZowZed7aCDBQ526am/ngJbyjlcapXKSMLKgcZEtRgT0/TpphJL/Lr
daV/Ig2uf+q0VgUNDRPuZueEOBKNTogrgi4S+sB1eCXuNSx9uOsWIsB9vXDaoyOo
qzB2XHlFRMt+ttes30/1+pE4HfomnzvYzRqS7MUBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU+mbYcUecplcGeJ9c+6Ux480aSX4wHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzgxODMwOGNhLTAwZjgtNGJjZC1iZTNkLTY4ODhlZTEyNmJmMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABkswDQYJKoZIhvcNAQELBQADggEBAJ+wzWi6MNdo0W/CFJ5kuDJV
VUrHGwLg4jjKY0MYFF0oJV+ax47IroAHL/846KfC2ALhcVfN587ESOAEmh6uHaJa
e6JPnUbu/CuS6LpdVhdOYc8cboN2S9KdvnBASNq5EoXu3wj5MYFhtsX4FFj2hvwN
tGETgUGN2N8ruwLZ8D8KPqhMfNVBfGvG7IjibV+8blpJ5pPHiqmYf0nbQIkjvaID
jUHGPdb38+c90OW8F8R5RI4gUSOauT4eiWIt20fWlQP2c/QJJYQRsVPqPnCn33bV
WhkFikg9anABbxd8/M1FmsvSh3SV7C1mCmfmoSFnzW9a1I9rePMfS3t5iywkKUE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:59:43 2026 by rpki-client