Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bdcaa906-63fd-4cc3-bf7a-252f4f2c9ad4.roa
File:                     bdcaa906-63fd-4cc3-bf7a-252f4f2c9ad4.roa (raw, json)
Hash identifier:          Nh+H0JbpKr8+RVO9UXENxw5+tPJIKYKKLzk1XHU5nHs=
Subject key identifier:   91:CA:26:E8:E3:0A:40:66:A4:F6:A3:A1:2D:36:E4:E6:02:DB:A1:10
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       4BF2A16DB43B959DB27A9EF52A6D6567CEF5BA95
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bdcaa906-63fd-4cc3-bf7a-252f4f2c9ad4.roa
Signing time:             Fri 15 May 2026 00:20:05 +0000
ROA not before:           Fri 15 May 2026 00:20:05 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:d70::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f2:a1:6d:b4:3b:95:9d:b2:7a:9e:f5:2a:6d:65:67:ce:f5:ba:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 15 00:20:05 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=22eb69d329c5d258d24ae05e3a9db82287d234c296ec3e326fb703ecfce6a93f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:52:d0:b3:ae:59:7c:ff:17:c2:3a:68:72:
                    c3:32:a9:59:46:75:07:fb:d3:d9:2f:d7:0a:a8:04:
                    a4:ff:d4:7f:71:98:0c:d6:ab:1e:3b:44:f9:30:41:
                    6b:e7:f2:1a:55:ff:ca:7c:12:36:8e:1b:7d:e3:17:
                    2e:cf:a7:de:62:64:94:20:96:11:1c:9c:0a:56:1c:
                    0e:66:a8:6d:59:fe:b6:3d:ab:94:ac:5e:a1:f8:14:
                    04:43:c1:b4:db:66:7e:70:fa:63:6f:99:5c:8a:42:
                    3c:2b:07:db:ad:db:20:b4:c8:dc:c2:9e:b4:b8:48:
                    d2:f5:7f:f3:17:b4:ec:c1:cb:e5:93:bb:99:25:43:
                    ec:2f:e6:b4:07:67:f8:d2:65:06:ef:e1:0b:8b:3e:
                    95:ea:66:ea:25:d2:cd:96:4b:93:5d:36:a8:84:37:
                    84:e2:4a:ef:0b:20:16:49:64:38:ee:51:1a:0e:a6:
                    3e:5f:a3:55:80:87:65:4c:19:80:72:38:6a:22:da:
                    4c:c6:fe:11:5e:3e:d8:bd:ed:d9:21:0d:68:74:a2:
                    e8:13:fc:88:30:ee:50:01:12:5d:49:60:3f:1c:27:
                    34:d3:f4:33:4e:19:dc:02:63:1f:03:7d:87:eb:31:
                    3d:db:30:dd:4f:24:4b:aa:8e:e1:30:0f:d3:d3:51:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CA:26:E8:E3:0A:40:66:A4:F6:A3:A1:2D:36:E4:E6:02:DB:A1:10
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bdcaa906-63fd-4cc3-bf7a-252f4f2c9ad4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d70::/44

    Signature Algorithm: sha256WithRSAEncryption
         88:83:16:10:03:8c:b1:6c:ed:03:f1:82:bd:17:97:b5:df:7e:
         cb:1f:fb:da:2c:55:46:ba:b9:79:10:2e:da:a6:58:e5:78:46:
         a3:bd:38:ef:66:1a:fa:78:79:fb:d8:29:81:db:cd:f3:e2:06:
         ad:5f:c3:80:db:b7:e5:f2:55:5c:7d:4b:35:58:9e:d9:9a:e1:
         1e:c3:b7:c2:ba:3b:84:96:39:2f:ed:8e:79:c4:8f:12:69:73:
         96:4a:3b:4b:f1:9e:4d:10:7c:01:22:3b:4b:30:e6:a0:39:2a:
         db:9c:b2:76:ab:fe:1e:49:ec:5f:07:36:11:e0:6e:30:ae:1b:
         25:e6:db:8f:76:a2:e9:59:8b:ce:fe:47:ad:41:05:8e:8d:48:
         0c:e4:b5:9a:2a:74:61:ac:8c:96:01:1a:e7:58:ee:c8:03:77:
         3f:c3:30:0a:e2:57:7d:d9:ef:2b:f7:fd:75:85:7a:cb:7a:36:
         0d:42:64:25:1f:2a:9f:02:5d:10:45:b3:9e:76:dc:e4:aa:55:
         80:3c:d4:e9:0d:11:9d:6c:08:6c:11:54:08:6e:99:03:5f:1b:
         11:b6:41:0e:66:f5:c1:a1:c4:6b:f9:e8:65:fb:41:cf:11:5e:
         10:9e:4d:b8:1f:ea:df:5b:f2:11:6d:13:94:88:71:23:ab:86:
         92:2d:dc:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:09 2026 by rpki-client