Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c044dfdf-545b-46de-a181-9b87e5052e28.roa
File:                     c044dfdf-545b-46de-a181-9b87e5052e28.roa (raw, json)
Hash identifier:          M8cOeC4sjnaz9SHZwNkRuvt2+2/dNzkeMsGh3Tm9MsI=
Subject key identifier:   7E:18:2E:0B:97:63:11:D6:26:7F:A8:99:66:CF:DC:45:C0:A2:1E:9E
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       18F4788DF2AA844E4C6BF9B40C7402530349CD0B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c044dfdf-545b-46de-a181-9b87e5052e28.roa
Signing time:             Sat 28 Feb 2026 04:30:08 +0000
ROA not before:           Sat 28 Feb 2026 04:30:08 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:2110::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f4:78:8d:f2:aa:84:4e:4c:6b:f9:b4:0c:74:02:53:03:49:cd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb 28 04:30:08 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=87d2410da52be8a17bf762b70fd11b754f7bc931ec25dd2ae44179fa8d46fe8f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:21:d7:54:7c:8e:0d:9a:5f:d8:ff:b7:f2:
                    7d:d6:20:ba:d2:01:66:04:de:14:2f:c7:e2:e0:ed:
                    6b:46:fd:87:05:57:80:28:70:24:7c:b4:72:da:f0:
                    38:96:98:a1:b6:1c:08:cc:3d:fd:b4:3f:90:10:6d:
                    3b:29:35:a5:84:2c:08:d7:66:c5:e7:93:06:27:18:
                    07:92:79:fe:64:e6:25:d5:59:6d:86:d2:38:28:99:
                    30:c2:b6:12:f3:d5:29:e1:b1:20:51:52:86:4f:0a:
                    0b:91:f2:04:85:f7:37:de:37:21:12:f6:3e:5c:13:
                    aa:67:54:d9:e1:79:05:19:2e:a9:ab:48:53:de:20:
                    5f:82:27:e2:d2:8e:3b:4e:fb:21:8c:f7:92:1f:9b:
                    9c:41:5e:04:6b:83:ad:cd:bb:24:11:db:05:55:24:
                    ff:1d:6a:92:b0:6b:78:23:e6:ef:f8:dd:f1:33:60:
                    28:e8:3a:2e:59:f1:cf:24:6b:9f:97:e7:a8:4c:2d:
                    f2:7c:11:99:6d:b9:3f:86:a2:42:45:50:54:80:5b:
                    04:0d:4b:cb:46:1e:cf:71:68:46:fe:80:fd:90:5a:
                    21:25:fc:b8:2d:a7:67:bf:2b:6b:5e:3d:6f:6e:7c:
                    0a:bb:ac:f4:ad:50:66:9f:c3:73:45:9d:81:76:ca:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:18:2E:0B:97:63:11:D6:26:7F:A8:99:66:CF:DC:45:C0:A2:1E:9E
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c044dfdf-545b-46de-a181-9b87e5052e28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:2110::/44

    Signature Algorithm: sha256WithRSAEncryption
         15:f1:96:c8:29:af:95:54:e9:6d:32:e8:81:c9:eb:16:92:e6:
         07:18:0d:0d:7d:60:8a:d1:76:4f:58:97:15:46:fb:8a:ad:4f:
         47:6c:3f:38:88:f2:f6:85:fa:85:bf:a7:db:1f:2d:60:1a:71:
         40:7d:e6:5a:fb:3b:90:7a:40:a1:fb:db:2e:44:8d:c2:a8:41:
         a4:5b:b8:5a:a2:a7:53:b5:60:3e:0a:d9:e5:15:fc:6c:0e:c7:
         b3:2a:6a:ed:67:77:ee:1b:ef:8a:40:fc:f8:dc:f7:5e:aa:77:
         5e:eb:61:5f:94:2c:47:fe:7b:e2:c0:31:20:44:36:25:5c:9b:
         8d:3d:eb:8a:ad:9d:04:39:83:5b:db:ae:d1:d2:07:1e:41:62:
         ed:6b:2f:55:d9:15:f2:4d:71:e6:f9:99:31:52:a3:81:8f:12:
         53:c7:fa:70:24:43:b7:8d:57:d6:55:7b:8c:26:e3:16:ad:d7:
         97:aa:b0:52:7c:e9:14:d6:0d:15:83:30:95:92:df:8a:20:1b:
         66:b9:6f:7e:4f:45:c1:9c:0a:7e:e2:fe:53:06:34:79:ea:55:
         fb:e7:71:c0:65:7d:91:e3:69:14:1a:1c:5e:f0:7c:48:ff:67:
         d2:03:2e:1b:28:74:f9:45:1f:35:56:d7:d0:6a:38:80:d5:13:
         cf:bc:5b:d0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:21:46 2026 by rpki-client