Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/da512197-d443-4603-b80f-2a87309b0b87.roa
File:                     da512197-d443-4603-b80f-2a87309b0b87.roa (raw, json)
Hash identifier:          dJpt9b3q8sL8QiiM6g1FZ76kt0RAByg/P0RCskI20p0=
Subject key identifier:   08:BB:26:9C:9A:C8:5A:38:32:D7:D9:17:CC:AA:52:26:7D:67:E9:45
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7381EA0E0F9857F6A54EBE9DF3110B041CBE4B5A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/da512197-d443-4603-b80f-2a87309b0b87.roa
Signing time:             Fri 07 Aug 2026 03:50:24 +0000
ROA not before:           Fri 07 Aug 2026 03:50:24 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:b00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:81:ea:0e:0f:98:57:f6:a5:4e:be:9d:f3:11:0b:04:1c:be:4b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug  7 03:50:24 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=1d56848379ad88a6aeb72c2b25fc7f0834da49fd28d8e1c0ba8f110406155555, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:25:2a:af:47:63:38:3d:78:5c:1d:2a:7e:b7:
                    23:24:0c:15:2f:9b:db:bb:82:49:6e:43:7c:f5:3a:
                    59:04:d4:71:fc:5d:13:ec:b5:7b:b3:56:1b:f3:87:
                    74:11:7b:70:b3:f8:50:b9:c4:09:eb:c6:f3:fa:1f:
                    44:fc:c6:ec:24:56:0b:19:11:e2:5c:1e:73:3c:15:
                    55:d1:45:81:bc:2d:69:47:c3:8d:ad:76:f2:fa:20:
                    94:64:b6:ac:a0:89:3a:56:00:dd:a4:60:fb:bc:1b:
                    df:6b:42:3f:43:fd:72:e1:13:66:3d:66:e9:e0:f2:
                    4f:97:8b:72:73:d8:f3:07:8e:ed:01:6e:44:a2:cf:
                    8d:48:81:d7:56:52:35:bc:59:d2:b2:9d:4c:6b:90:
                    fd:e7:70:bb:b4:34:04:54:44:d1:23:02:15:ff:72:
                    41:2c:0d:db:87:23:f3:67:6d:d5:f1:90:a8:42:df:
                    56:8f:79:35:5e:80:07:b2:61:49:45:ec:0a:d5:63:
                    d7:60:4b:33:e5:85:db:90:80:68:8d:98:59:b2:a6:
                    d0:f3:b4:2e:20:29:d0:f9:38:95:46:84:f6:91:3f:
                    d2:b3:af:33:23:36:8d:43:e7:23:5d:5a:ca:be:ce:
                    61:ae:e1:c1:46:8e:a8:9f:80:cf:82:1c:9b:77:d8:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BB:26:9C:9A:C8:5A:38:32:D7:D9:17:CC:AA:52:26:7D:67:E9:45
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/da512197-d443-4603-b80f-2a87309b0b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:0c:cf:61:a2:18:dc:a7:f4:9e:4e:f5:7a:e7:fc:84:c5:47:
         37:a4:df:a6:5b:49:9a:0c:ae:f5:e6:5c:10:56:e5:45:d7:02:
         62:22:98:cb:3a:05:eb:9c:1f:80:66:f9:96:65:95:3b:01:45:
         66:61:d1:83:4a:c4:11:19:8d:46:73:88:94:22:ac:de:34:a2:
         88:8f:61:1b:9e:63:f2:42:98:dd:23:93:1b:65:44:c2:e7:ca:
         5f:c2:21:bb:2b:73:85:28:cf:c3:b9:52:fb:6b:fc:83:4e:10:
         7d:e9:50:19:c1:c9:e9:2e:5b:1b:72:7b:4e:a5:2e:8e:53:c6:
         50:ce:e0:66:5c:29:36:3a:0a:6a:4b:e3:8b:b7:bf:56:ab:df:
         af:30:d1:ea:89:c5:6b:05:ba:cd:95:42:94:56:9d:bd:1f:02:
         45:d5:cf:39:dc:b2:83:2f:3b:d6:ab:04:aa:f3:9c:a6:33:aa:
         5d:84:91:52:6d:d0:02:b4:07:22:ff:4c:92:57:7b:30:0e:dc:
         bb:31:1f:b1:a2:c6:fd:9a:72:42:ff:88:da:b5:af:3b:ff:d4:
         37:c2:38:25:46:b8:6c:c4:dc:51:69:39:e4:ca:2b:2b:0e:b9:
         ef:3f:20:91:f4:fb:ac:7d:f6:5d:45:0a:0c:d5:32:d1:af:c5:
         ef:29:cf:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 28 08:15:47 2026 by rpki-client