Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d7e60239-def6-4254-bb11-383c707d64aa.roa
File:                     d7e60239-def6-4254-bb11-383c707d64aa.roa (raw, json)
Hash identifier:          L1ORNmYW3ldEXrSzOF7rwZJErFQQIMRCY7tbiItvUQs=
Subject key identifier:   13:9C:8F:99:FF:99:34:78:B1:D1:33:34:0F:FA:FC:D2:DD:F9:1E:C4
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       511CF94B189336E3CCDA7186A44A2B1772ED9E07
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d7e60239-def6-4254-bb11-383c707d64aa.roa
Signing time:             Sat 28 Feb 2026 04:30:56 +0000
ROA not before:           Sat 28 Feb 2026 04:30:56 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:549::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1c:f9:4b:18:93:36:e3:cc:da:71:86:a4:4a:2b:17:72:ed:9e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb 28 04:30:56 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=2d2a3c615d4d47a51af59aed2f58e457dddace41f955e5edd33891b310b13514, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ac:d4:ea:ac:c9:38:58:f8:c7:3e:2c:c9:e7:
                    1f:95:3a:fe:0c:e0:6b:b3:9e:e3:c0:0c:63:d7:79:
                    78:e0:f8:65:a7:94:2b:c1:37:94:a4:da:2a:eb:2c:
                    c7:bb:9f:d5:fe:ac:05:5b:91:a0:2a:31:92:24:87:
                    ec:d5:b5:11:93:7e:17:5e:be:df:9b:b3:c4:7e:b7:
                    1c:b5:13:8d:9b:d2:64:6e:05:bc:31:51:ab:8b:f5:
                    50:70:5e:5f:33:ff:af:99:ff:e2:ee:af:9a:f3:7b:
                    52:1f:fe:66:8e:47:86:10:24:b0:f5:75:00:86:4c:
                    fb:f7:69:09:89:48:6a:f1:62:42:0d:6f:f9:0d:05:
                    35:6c:4d:4d:bb:08:18:0d:36:d9:92:3e:5f:8c:b5:
                    24:33:65:18:bc:8b:26:e4:05:83:99:9d:db:82:e9:
                    77:be:16:a8:b2:09:0e:1b:5e:02:ba:49:8f:ec:ab:
                    a3:20:d9:5d:86:38:f4:a5:0f:6f:a9:35:65:c7:1e:
                    18:5d:19:c7:d0:b2:e7:12:87:d1:05:91:c1:f5:b1:
                    34:85:c7:97:69:20:db:d8:24:ed:6e:8a:ae:5c:2c:
                    37:99:8b:93:e7:65:ae:ee:95:7f:45:54:14:cc:23:
                    b3:a4:79:57:5f:93:b6:0e:0c:a8:c1:be:97:0a:79:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9C:8F:99:FF:99:34:78:B1:D1:33:34:0F:FA:FC:D2:DD:F9:1E:C4
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d7e60239-def6-4254-bb11-383c707d64aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:549::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:19:e8:90:69:d1:66:0f:f0:4d:71:da:c6:27:67:8a:3f:8e:
         70:6d:91:d1:37:d1:cd:41:a2:3f:c0:67:b8:63:b0:e5:fa:8e:
         e1:f9:42:27:d2:cd:8b:a8:1f:3a:28:0a:11:d9:4b:49:f2:c3:
         1d:48:d8:c4:26:14:88:7b:53:46:19:9d:1b:ef:1e:2e:ff:ef:
         ed:e4:d5:1e:49:ff:59:98:c8:8b:b2:56:de:6a:e1:05:85:3b:
         dc:bb:fb:0e:d8:14:11:d9:92:0f:20:c0:ea:08:30:e4:03:ee:
         ec:76:0f:60:d1:14:b6:b0:fe:fb:79:7b:e8:bf:6a:c4:82:b3:
         75:c2:b2:90:b2:5a:a2:c4:76:14:1e:5a:a1:1e:cf:d3:39:5a:
         5d:09:3f:fd:7e:4a:13:48:9e:ce:2a:82:d3:b3:b5:e7:90:bc:
         93:d6:08:76:8b:42:53:a3:1c:3d:c4:7b:8b:e1:6d:76:c7:68:
         0e:c5:b5:01:1a:8f:6e:c5:62:a5:74:f3:50:16:cc:80:c1:9f:
         a0:23:fc:97:b4:56:88:72:97:9c:84:7e:e3:0c:4c:82:59:07:
         41:a3:59:7f:53:a2:f9:d6:7c:e7:5d:9d:95:52:6f:8b:9d:7f:
         54:fd:a4:7e:27:77:c6:ca:26:0c:87:b7:7a:ce:87:1e:61:a4:
         f6:f7:25:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:25:49 2026 by rpki-client