Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d29b6497-5e29-4d74-9bc9-54ef6082f794.roa
File:                     d29b6497-5e29-4d74-9bc9-54ef6082f794.roa (raw, json)
Hash identifier:          wILwvt8jtpR5jcSY5GYreKxIvAe1+eos6+hiyp58V6Y=
Subject key identifier:   6D:BB:E1:7A:56:80:E5:8D:A0:A6:55:10:79:85:E5:00:88:DA:0F:90
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       4D23CE399AC41D623BA64988E22F95645248B577
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d29b6497-5e29-4d74-9bc9-54ef6082f794.roa
Signing time:             Sat 28 Feb 2026 04:30:14 +0000
ROA not before:           Sat 28 Feb 2026 04:30:14 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:308::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:23:ce:39:9a:c4:1d:62:3b:a6:49:88:e2:2f:95:64:52:48:b5:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb 28 04:30:14 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=4db555ce554107460c0ec90417c8cc86803f5ff33f5211ca3c9df161ea7f4fb9, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:1e:67:62:64:5e:83:3e:c2:b5:f7:46:bd:
                    66:35:c0:80:1f:70:23:40:5b:d6:21:26:88:32:1c:
                    00:d8:ba:82:19:be:46:b3:dd:f2:2e:55:3d:13:8f:
                    da:78:5d:68:68:a9:53:ea:1a:98:06:bf:6b:01:dc:
                    ce:a5:0b:bc:b9:e0:6b:1a:5d:cf:42:41:5b:15:c9:
                    f9:76:e3:e4:bc:37:6f:17:08:17:db:4b:51:93:49:
                    b1:d5:48:0e:de:b1:44:6f:c8:64:08:d1:e8:47:63:
                    50:1d:c5:c5:d3:85:32:53:d7:1f:06:d4:68:9f:d4:
                    92:52:08:82:37:da:6f:ce:41:87:78:d3:9f:6d:7f:
                    ab:7b:b4:73:40:1f:19:24:1d:9f:cd:05:76:e4:93:
                    a2:81:71:3e:65:59:e6:b0:f4:24:4e:bd:b2:62:aa:
                    66:53:07:b1:26:97:79:46:4d:bb:0d:1f:ad:5f:77:
                    71:0a:bb:c2:fd:5f:26:96:b4:7d:f3:3d:6d:a3:b3:
                    e7:39:c0:06:1f:a9:25:e3:c3:49:cb:e8:40:aa:85:
                    e7:52:6c:f6:a0:ca:54:fb:a0:d6:9f:5d:5d:bc:a7:
                    df:cc:1c:1d:8c:c1:78:f7:cd:d0:a0:cd:99:fb:a9:
                    0e:42:4b:3b:dc:37:d1:0c:ae:81:73:e5:eb:d8:38:
                    1e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BB:E1:7A:56:80:E5:8D:A0:A6:55:10:79:85:E5:00:88:DA:0F:90
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d29b6497-5e29-4d74-9bc9-54ef6082f794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:308::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:b5:55:86:b2:f4:96:b6:90:c8:48:85:a9:68:e1:5a:7d:da:
         c5:80:99:1e:e8:3a:fb:d3:83:ca:8c:f1:50:1e:6e:b0:c1:2e:
         be:f7:76:d2:48:58:e1:b9:37:1c:18:78:45:53:34:7c:7b:51:
         08:0b:53:66:b8:29:63:b9:e2:fb:83:6a:b8:f9:c4:4c:d8:eb:
         41:46:1a:6f:b9:a9:26:ae:26:0a:83:7c:e6:96:8a:ec:7e:e4:
         dd:72:78:72:9d:05:f8:17:06:8f:cc:41:c4:33:bc:f3:41:9a:
         be:04:ca:0b:9e:a7:c1:55:0c:e0:cf:4f:50:48:e0:fb:be:e8:
         52:6d:b1:93:23:9f:cb:bc:02:e3:d6:04:25:13:dc:1c:bd:c6:
         61:af:14:24:24:b4:0b:f6:d0:ea:31:42:56:03:90:10:af:15:
         5f:75:86:de:4e:bf:f0:60:78:6a:81:4b:62:55:1c:af:57:ee:
         4b:1b:d9:57:51:dc:95:d9:99:8a:92:f9:6c:7c:1f:5c:3c:89:
         a9:eb:de:84:02:b9:94:84:e2:db:8f:71:df:20:13:0e:c0:ff:
         7e:4c:77:e4:96:6e:08:b4:e5:46:db:b3:73:2a:c0:8e:ad:75:
         7b:80:7a:f5:b4:ee:d3:f4:4d:29:9d:d7:4e:79:5d:3b:1a:88:
         5b:6a:c6:66
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTSPOOZrEHWI7pkmI4i+VZFJItXcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwMjI4MDQzMDE0WhcNMjYwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZGI1NTVjZTU1NDEwNzQ2MGMwZWM5MDQxN2M4Y2M4Njgw
M2Y1ZmYzM2Y1MjExY2EzYzlkZjE2MWVhN2Y0ZmI5MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNXh5nYmRegz7CtfdGvWY1wIAfcCNAW9YhJogyHADYuoIZ
vkaz3fIuVT0Tj9p4XWhoqVPqGpgGv2sB3M6lC7y54GsaXc9CQVsVyfl24+S8N28X
CBfbS1GTSbHVSA7esURvyGQI0ehHY1AdxcXThTJT1x8G1Gif1JJSCII32m/OQYd4
059tf6t7tHNAHxkkHZ/NBXbkk6KBcT5lWeaw9CROvbJiqmZTB7Eml3lGTbsNH61f
d3EKu8L9XyaWtH3zPW2js+c5wAYfqSXjw0nL6ECqhedSbPagylT7oNafXV28p9/M
HB2MwXj3zdCgzZn7qQ5CSzvcN9EMroFz5evYOB4hAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUbbvhelaA5Y2gplUQeYXlAIjaD5AwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2QyOWI2NDk3LTVlMjktNGQ3NC05YmM5LTU0ZWY2MDgyZjc5NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzAAwgwDQYJKoZIhvcNAQELBQADggEBAFK1VYay9Ja2kMhIhalo4Vp9
2sWAmR7oOvvTg8qM8VAebrDBLr73dtJIWOG5NxwYeEVTNHx7UQgLU2a4KWO54vuD
arj5xEzY60FGGm+5qSauJgqDfOaWiux+5N1yeHKdBfgXBo/MQcQzvPNBmr4Eygue
p8FVDODPT1BI4Pu+6FJtsZMjn8u8AuPWBCUT3By9xmGvFCQktAv20OoxQlYDkBCv
FV91ht5Ov/BgeGqBS2JVHK9X7ksb2VdR3JXZmYqS+Wx8H1w8ianr3oQCuZSE4tuP
cd8gEw7A/35Md+SWbgi05Ubbs3MqwI6tdXuAevW07tP0TSmd1055XTsaiFtqxmY=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:46:17 2026 by rpki-client