Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b0008e8c-b611-434e-addf-481ff9706650.roa
File:                     b0008e8c-b611-434e-addf-481ff9706650.roa (raw, json)
Hash identifier:          diyq783ZvL962YZAxjNv2XXkeJS2zNlRCR+3nVULVpA=
Subject key identifier:   DA:66:27:A1:43:63:D7:5C:41:79:C8:08:2D:AE:60:4E:01:B8:AB:DE
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       42DA6151491BBD5858D69D199D9BE45CF5752BD5
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b0008e8c-b611-434e-addf-481ff9706650.roa
Signing time:             Mon 23 Feb 2026 00:40:05 +0000
ROA not before:           Mon 23 Feb 2026 00:40:05 +0000
ROA not after:            Sun 24 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:e00::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:da:61:51:49:1b:bd:58:58:d6:9d:19:9d:9b:e4:5c:f5:75:2b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb 23 00:40:05 2026 GMT
            Not After : May 24 23:59:59 2026 GMT
        Subject: serialNumber=5bf8c8f5a523f783adeff9e0fcb23081e91c322bdcc30789d259b8b8fb7eba61, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:4e:a1:1f:fe:53:15:89:d1:0b:c3:14:54:
                    48:75:3e:0f:11:3b:b1:3c:9c:8a:a0:6a:cc:4c:2f:
                    90:2c:a7:50:25:21:63:a7:23:a9:15:ee:48:15:4a:
                    cf:c9:5a:cc:28:9e:c4:cf:5c:57:8f:f6:2b:21:5f:
                    2d:a7:e3:c5:61:6a:47:5d:7e:02:ed:3d:97:d4:8d:
                    59:07:9f:29:52:a7:eb:b9:d6:17:85:58:92:b0:62:
                    54:62:7d:23:c4:23:0b:82:50:dc:db:b2:79:12:e8:
                    c6:64:32:ea:62:43:81:0c:ac:ef:73:11:fc:13:4d:
                    ad:d1:60:b7:41:f6:60:9e:e2:af:41:20:ad:b2:50:
                    d6:3e:22:ed:68:c0:91:58:b2:a8:48:6d:20:d0:57:
                    28:1c:7d:db:3f:e5:2b:de:31:60:17:29:a6:88:8f:
                    56:ef:1b:da:14:bb:67:8f:69:81:20:e6:32:3a:39:
                    53:c6:25:73:1e:72:ab:ad:2f:aa:75:9b:75:89:c7:
                    35:eb:a7:3b:8d:94:ea:4f:df:fb:25:38:41:42:96:
                    7d:24:db:aa:f8:04:75:21:78:5d:2d:82:b8:11:04:
                    d7:45:9f:f0:9e:70:e4:5d:54:12:18:ba:d7:b7:49:
                    07:e5:04:c6:ad:ea:d6:8b:8d:92:2e:dd:b5:08:49:
                    33:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:66:27:A1:43:63:D7:5C:41:79:C8:08:2D:AE:60:4E:01:B8:AB:DE
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b0008e8c-b611-434e-addf-481ff9706650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:e00::/43

    Signature Algorithm: sha256WithRSAEncryption
         65:5a:70:ef:74:ea:fd:19:d1:7b:69:ef:94:79:cf:4b:60:74:
         a8:86:d9:ab:05:eb:65:0b:1f:54:0d:4a:79:5a:9b:ee:5f:57:
         e4:46:2a:ce:ac:e9:ec:e7:f0:eb:3f:b6:66:af:83:f6:11:64:
         2d:5c:3c:d5:60:9d:90:46:45:0e:f5:49:6a:60:c1:0b:9c:20:
         9d:2e:91:43:f1:4c:3d:a7:4f:15:54:2e:eb:b8:44:2b:40:59:
         eb:64:86:67:a1:42:ee:e2:d6:b8:5b:7b:4a:eb:a5:ba:fa:46:
         ed:3a:97:41:d3:f4:8e:3e:a5:e4:b5:37:c2:7c:be:d7:91:cd:
         8e:a0:67:1e:a8:a5:60:bb:46:f4:44:13:37:2d:02:64:ae:71:
         f3:eb:dd:ef:37:f0:d8:0a:61:4f:d1:fb:1a:d1:e8:47:2e:41:
         65:bd:5f:c1:ce:df:cb:c8:e0:06:12:c8:91:59:54:35:c5:52:
         77:13:ae:d6:a4:85:4a:3a:9b:ff:37:30:0a:14:4e:d7:e5:7c:
         26:07:4f:66:fd:b3:6d:d5:13:d5:55:35:50:dc:9d:b6:48:79:
         e9:b8:51:67:45:56:d2:1a:92:ff:ca:9b:5b:fe:20:65:6d:da:
         57:96:11:dd:4c:2d:b8:7e:8c:4c:7b:5b:dc:bb:d2:94:e3:5d:
         cc:87:2b:11
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 23 14:46:34 2026 by rpki-client