Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc64ede4-78eb-4056-81e0-5a953a42ee96.roa
File:                     bc64ede4-78eb-4056-81e0-5a953a42ee96.roa (raw, json)
Hash identifier:          xZMRkB8Mf8GvhKaozbWmYDX5q6X6SDsY6gtPLJ/HiTE=
Subject key identifier:   67:3D:7F:9A:B2:0E:43:3E:B5:0E:95:34:EF:E2:DB:D6:B3:D1:B3:A6
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       71276A1E214445D4DECCDD3D4666D32011FE085B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc64ede4-78eb-4056-81e0-5a953a42ee96.roa
Signing time:             Fri 13 Feb 2026 14:50:09 +0000
ROA not before:           Fri 13 Feb 2026 14:50:09 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:612::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:27:6a:1e:21:44:45:d4:de:cc:dd:3d:46:66:d3:20:11:fe:08:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb 13 14:50:09 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=9119210b16700eb90417e1cea235783a1445eb771cfae1ee9a8d9cdcdd13ae0f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:ec:d3:73:57:9e:82:f4:ac:c8:c6:bf:ba:
                    b2:57:ef:80:ae:9e:c4:3c:08:e0:86:b7:1c:3e:a3:
                    ec:6e:7a:01:2d:6f:b3:27:61:3b:24:58:32:05:07:
                    50:88:12:ba:05:35:89:43:a1:61:c5:07:76:b6:1f:
                    09:b9:1c:6e:8b:5d:84:2e:2a:76:b0:fc:6f:d1:93:
                    38:5e:5a:f2:cb:63:23:27:7d:8b:08:a5:a6:62:b1:
                    2c:0d:a5:06:e0:35:a0:39:66:cc:55:9d:bf:7d:ed:
                    98:a4:17:b7:18:fb:44:fe:12:ec:a5:a6:04:b4:dd:
                    a8:de:5e:a0:bc:4f:c4:d4:8b:5d:5c:d8:2f:24:5b:
                    53:d5:de:44:28:cd:ad:c2:db:6f:ca:a0:52:63:70:
                    77:37:06:6a:7e:58:95:1d:40:8f:de:87:99:9f:18:
                    d1:ca:2b:01:69:aa:76:17:cd:83:f7:7c:5e:cd:37:
                    35:0e:55:49:c4:aa:9c:50:92:64:a2:2e:f9:eb:03:
                    b5:48:72:71:27:5d:81:e6:e0:04:d2:a0:d8:89:09:
                    0f:11:85:4e:f6:a2:6d:fd:96:18:5a:2b:a5:29:0c:
                    5c:bd:15:6f:7c:6e:46:ea:65:08:5a:48:18:58:04:
                    99:8a:33:ea:34:20:62:e1:47:58:fe:ae:29:b8:7e:
                    8d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3D:7F:9A:B2:0E:43:3E:B5:0E:95:34:EF:E2:DB:D6:B3:D1:B3:A6
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc64ede4-78eb-4056-81e0-5a953a42ee96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:612::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:c3:e4:ea:4c:f8:a9:c6:cc:71:a1:60:08:05:bd:18:a9:f2:
         9a:a8:b4:d6:35:ae:d6:d3:a6:e7:91:67:3d:85:b1:42:a8:2f:
         6a:a9:e1:cb:48:af:4c:cf:64:2f:a0:0a:53:8e:4f:74:e1:bc:
         ca:0d:5f:b8:c1:7d:47:9b:dc:d7:17:66:f4:b9:76:23:0f:7f:
         2f:05:19:13:a7:5e:81:e6:4f:21:20:e5:99:87:71:08:f9:6e:
         eb:35:7a:5b:37:8a:d8:89:20:49:79:27:c7:99:8e:a6:03:14:
         c5:fa:c0:86:23:ef:09:ff:a9:7d:71:3d:36:0b:68:51:dd:99:
         a4:92:b7:06:33:a2:11:76:51:16:a3:ea:f6:85:65:50:10:dc:
         b8:e4:20:2d:6e:5a:57:b6:90:86:67:1c:0c:41:d8:68:67:70:
         6b:25:6e:0b:5c:bb:0b:db:67:10:38:ea:a3:8b:c0:55:cd:9c:
         7f:7a:58:fc:70:ef:1e:79:77:8f:65:ad:74:af:e3:37:29:b6:
         33:98:7a:7a:9c:77:c6:5d:aa:d0:29:ad:ea:e1:b3:29:42:4c:
         98:aa:54:00:04:64:49:ea:a8:19:e4:d2:a6:dc:ac:4e:9f:9a:
         00:10:4d:7a:1a:7c:07:ab:c7:2d:ba:f5:d6:27:e5:56:c2:15:
         15:0a:8c:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:39:45 2026 by rpki-client