Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa
File:                     bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa (raw, json)
Hash identifier:          e44MH8CnBOIIXYOzCEj3o6wbP6KVS3bB54+OmLF8q/I=
Subject key identifier:   C1:96:09:9E:97:E5:B4:C5:2E:3A:C8:F2:8B:CB:32:7B:93:89:FA:C3
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       367717646B93DF18B859346FC4D9624F678AC588
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa
Signing time:             Fri 13 Feb 2026 14:50:06 +0000
ROA not before:           Fri 13 Feb 2026 14:50:06 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:c11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:77:17:64:6b:93:df:18:b8:59:34:6f:c4:d9:62:4f:67:8a:c5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Feb 13 14:50:06 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=5ecfec88a620460ff78f5838dca898d1e017fa0f4cd90ac6ded838be726c600b, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:c0:c5:c5:a6:97:71:14:d9:c9:ea:84:82:
                    f2:e2:7c:31:68:67:5b:41:f4:e2:93:26:13:da:db:
                    f2:68:30:7d:48:8f:d4:de:4a:f9:64:ba:23:11:c1:
                    40:cf:8d:81:37:38:0c:6b:ef:0b:0d:62:d6:93:e5:
                    91:0c:13:3e:c0:8a:ab:e3:04:78:1e:bd:7e:f1:d3:
                    3f:32:13:1b:b4:12:9b:8b:0f:22:40:75:60:5f:f9:
                    2e:35:c4:5b:12:57:99:92:9b:96:ad:be:98:32:be:
                    7d:f1:e7:5e:2e:4e:f4:e0:aa:96:2a:ba:0a:1f:33:
                    c6:c4:36:73:aa:5f:c8:03:04:75:0a:81:1c:d0:7a:
                    07:81:de:bb:d3:3e:35:43:e9:83:d7:44:10:d3:ba:
                    b2:c0:8a:98:85:ef:03:1e:f0:81:9f:31:f5:9b:b6:
                    fb:56:9c:b2:db:14:ab:e8:f2:3e:d1:13:0c:f6:53:
                    ee:0f:58:fb:65:89:5e:6f:7f:5c:30:cc:0a:9c:54:
                    f9:6f:77:63:a4:0c:a7:f3:cd:b3:15:77:34:16:36:
                    0f:ca:f9:14:03:98:57:32:29:a2:f4:3a:64:ab:9c:
                    ac:2f:3f:a3:c9:f6:79:21:74:8f:1b:2f:a1:a6:87:
                    1d:36:c9:fe:bf:e4:f4:44:bf:51:d3:05:ab:28:fc:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:96:09:9E:97:E5:B4:C5:2E:3A:C8:F2:8B:CB:32:7B:93:89:FA:C3
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bc3c50fc-4993-4c0f-8718-f66fc8fccce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c11::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:e8:3e:7d:bc:1c:a4:9a:7f:c9:72:6a:86:b6:8e:3e:06:92:
         c5:3f:6e:6d:82:56:20:ef:5a:f4:e3:46:b7:a3:82:ff:97:46:
         48:80:99:23:47:2c:73:25:0e:88:fe:a9:af:9e:71:da:44:4a:
         da:0b:72:54:80:2e:15:15:dc:3f:d1:14:dc:bf:6d:a0:3e:38:
         5a:c6:6d:4d:11:ed:c1:d3:f4:64:71:c4:b7:57:2d:b4:e3:98:
         3b:6a:89:81:6e:1e:76:f9:4a:5d:08:68:72:9f:bd:3e:6e:7b:
         68:ae:76:b2:4a:b7:b9:07:f8:52:23:4d:62:a1:50:7c:90:8a:
         38:f0:a1:52:1e:67:5a:4b:2b:50:5f:fa:f6:3e:23:c8:89:0b:
         69:ba:1c:86:8e:f9:6f:ac:ae:b4:e9:5c:8b:6b:9d:40:85:50:
         ca:b2:e3:12:00:7b:c9:7e:c6:a4:fc:9c:da:2d:91:2b:b6:01:
         2b:c4:35:dd:54:f8:f2:4c:e6:19:ae:2b:5b:ff:9b:f0:6e:96:
         dc:19:32:e0:ab:ad:31:fe:9e:44:fa:a9:de:52:ad:f4:db:01:
         08:38:7d:f1:28:63:16:86:0f:9e:82:97:8d:a9:a9:40:02:a5:
         33:f9:ca:f6:d6:d9:03:6a:eb:c1:64:d5:9b:28:1e:ee:2b:eb:
         f3:4b:1f:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 23 14:46:34 2026 by rpki-client