Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa
File:                     7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (raw, json)
Hash identifier:          Mrtfroi736x+t0blZHu7y04uc0U+LYe+zara4TtUCIo=
Subject key identifier:   77:BE:6C:34:11:A4:AE:5E:06:66:1C:22:6C:C7:FD:33:13:33:3C:B5
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       5EE81A0DD28824996F9DA05F70D8900B2CC50A78
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa
Signing time:             Tue 17 Feb 2026 00:10:06 +0000
ROA not before:           Tue 17 Feb 2026 00:10:06 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     62785
IP address blocks:        2605:b140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e8:1a:0d:d2:88:24:99:6f:9d:a0:5f:70:d8:90:0b:2c:c5:0a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Feb 17 00:10:06 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=2d25ca94b2d35096f33dd37079df8ce9c47a739919df9ebab0b44e4487f5cd85, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:2b:b5:cb:30:45:12:07:d3:d8:2f:58:06:
                    6b:10:13:ab:36:02:d5:cc:85:e1:78:8f:bb:f1:e1:
                    67:47:7a:de:f7:a9:90:0e:39:8e:ab:ee:e4:b0:cb:
                    a4:06:e4:3e:6f:cf:1e:5d:a3:d5:43:3e:4a:6c:f2:
                    f7:cc:a8:7d:de:ed:37:8b:02:5d:c5:89:ad:1e:59:
                    9b:f2:7f:67:b1:86:36:0f:a9:bd:9b:d6:d8:41:2c:
                    78:0b:c0:7e:4f:80:06:b3:ea:48:8f:72:de:84:ae:
                    42:88:4f:a0:1a:a3:5f:1c:ec:4d:50:5e:18:e5:9f:
                    d3:1b:b0:e8:c5:b3:40:cc:2b:46:0a:2d:af:ed:b9:
                    fc:cd:53:a5:11:67:c7:c4:80:a7:15:03:4d:8b:5a:
                    0b:58:bb:34:17:bb:ac:7e:96:84:2a:24:b9:50:42:
                    b0:2d:5d:e9:16:99:6b:de:78:5f:37:3f:d3:5a:14:
                    a3:f1:f0:03:10:36:46:06:4a:ae:ae:7b:00:7a:45:
                    a2:6a:0a:3b:79:d4:b7:9f:92:09:78:e0:c4:9e:9d:
                    2e:00:e8:95:97:04:ef:bb:49:65:6d:dc:e2:4f:70:
                    5a:54:46:ad:7f:e7:7c:8f:06:2e:36:b6:fe:fb:2a:
                    75:04:ba:c2:b2:1d:d1:13:d2:b2:ec:51:2b:05:24:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BE:6C:34:11:A4:AE:5E:06:66:1C:22:6C:C7:FD:33:13:33:3C:B5
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:f5:9e:4b:75:09:92:90:9a:3c:0c:13:06:bc:8f:58:bb:b4:
         45:c8:cf:c2:6e:c5:82:17:90:cd:b6:bb:f5:bc:1b:d8:4f:87:
         3a:c0:f8:04:11:d0:41:ff:02:39:9b:41:e4:75:f3:e2:ee:e2:
         2b:04:62:73:60:e6:95:30:46:79:bf:f2:c5:06:cd:ae:79:67:
         72:88:68:be:ac:84:0e:74:8d:c5:fe:ed:f4:29:7d:76:79:74:
         b1:68:5b:ed:7e:3c:f4:97:1c:cb:3c:cf:1c:a3:be:3e:42:f3:
         7f:50:b7:75:e5:d0:a5:0e:3e:85:7d:07:03:0e:f8:b7:ac:bd:
         88:bf:7b:b2:31:02:6a:51:ad:dd:39:5c:f7:4c:47:bc:35:ca:
         c6:f2:5a:47:3f:3c:35:05:47:82:cd:dd:33:2a:23:60:85:e2:
         35:f2:7d:72:8a:33:75:c6:5b:18:ff:c0:ea:10:1b:6b:65:88:
         11:77:69:55:18:e3:c4:86:64:6f:86:7f:b9:95:06:f7:1c:ff:
         6a:7e:47:48:a9:7e:0d:e0:7f:42:96:ef:a1:69:85:c7:2e:f1:
         b3:ba:ff:b7:75:bf:37:77:32:8c:5d:ff:9a:00:ef:13:c5:8a:
         6e:c4:90:46:38:ac:fd:e8:9c:5c:d2:a6:5b:02:0a:af:3b:57:
         9d:33:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:55 2026 by rpki-client