Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa
File:                     280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa (raw, json)
Hash identifier:          yy+MTcDZ2cosxHfUBL8+5Z4pOU7XrkhtEH0t+9zDmWM=
Subject key identifier:   E7:53:5A:67:07:C2:80:6A:0B:37:6B:12:4E:5A:1E:0F:4C:93:99:3E
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       56E3C4C276B650C4357D1FB0BCF7B85D5AA8358A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa
Signing time:             Mon 04 May 2026 14:51:07 +0000
ROA not before:           Mon 04 May 2026 14:51:07 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:f001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e3:c4:c2:76:b6:50:c4:35:7d:1f:b0:bc:f7:b8:5d:5a:a8:35:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May  4 14:51:07 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=a26e9c085837e57196b764f88fe6580178bd8d46356b41dac9dc25c256a8ffe3, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1b:73:39:57:49:2a:27:b3:f5:e9:60:92:d7:
                    77:de:6b:32:69:44:b0:1e:79:93:51:e5:a2:50:3b:
                    10:8f:79:bd:84:77:5c:ec:5e:99:8a:d7:6c:28:f1:
                    6e:a1:5f:5e:be:7f:fe:ad:e2:d8:c6:00:7b:74:02:
                    36:a5:ef:73:60:da:22:0c:7e:15:ee:e0:8b:d8:de:
                    f4:62:ac:95:9c:0d:84:50:4f:3f:00:16:70:17:64:
                    a2:14:be:ea:0b:ce:99:86:1c:20:85:d1:36:9c:7c:
                    58:d9:52:a2:4b:89:90:59:63:31:a8:68:1a:15:21:
                    96:9f:f9:fd:47:f9:82:50:d9:9b:01:ff:22:0c:08:
                    c0:19:fc:da:e3:8f:b3:6f:5b:5a:ee:1e:8c:24:ea:
                    0f:fb:7a:8d:b9:29:e7:07:e0:09:45:e3:bc:fb:fb:
                    ca:77:28:9b:a7:e0:8b:e3:2f:f7:28:fa:ee:ab:18:
                    35:a2:d4:13:10:ba:fc:22:4c:b0:9b:06:42:a7:bb:
                    bf:34:7a:7a:b1:02:17:4a:5f:f7:02:81:83:88:81:
                    ac:e2:47:f3:95:d0:58:37:7e:8e:5f:b4:a0:3f:f2:
                    08:6c:d9:24:e3:0b:9f:bb:76:71:c9:70:b0:e3:57:
                    51:03:ef:67:df:49:eb:04:89:4e:f3:b3:e1:3f:c1:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:53:5A:67:07:C2:80:6A:0B:37:6B:12:4E:5A:1E:0F:4C:93:99:3E
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/280415d1-32a5-49e1-bc3f-9ffe53bd726f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f001::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:14:f3:4c:79:e9:17:34:51:24:5e:61:c7:52:66:e7:63:c7:
         0e:e6:8b:ed:a1:45:55:02:ae:9b:f8:00:61:c4:14:9c:35:eb:
         6f:dc:b3:83:d7:f8:60:de:44:89:8a:39:b9:94:12:82:65:a8:
         88:69:69:c2:2b:e8:0b:29:99:eb:4f:51:7c:3e:ad:c1:6b:96:
         68:49:aa:56:d7:d5:c9:30:2a:4c:b4:67:ee:f9:c2:da:77:02:
         67:b0:da:ed:a0:56:2a:92:ba:ec:1a:47:b6:cc:ce:cf:43:a5:
         8e:95:d9:e5:48:bf:90:d5:08:51:ee:f2:64:f0:80:6f:e2:50:
         d0:45:b2:25:43:16:26:7c:e2:e1:8f:0a:0e:f2:2e:bb:82:9b:
         0b:3f:10:7e:d2:87:43:c5:52:e5:f5:aa:8f:ab:b1:0c:b3:36:
         f6:f0:24:69:ce:10:97:c7:09:50:7c:3e:88:7e:c6:13:21:5f:
         e0:9a:ca:7a:63:d9:ec:de:7e:98:9f:b6:a7:be:9b:7d:15:d8:
         8b:cb:8b:2d:b2:67:47:a0:7a:ea:f9:aa:3d:24:95:d8:ab:e9:
         d2:74:48:7a:b7:95:31:8d:32:33:0e:8b:88:31:15:08:f5:65:
         14:64:1f:53:ce:cf:d6:ec:60:5a:81:63:f2:e5:ca:d2:b9:35:
         39:25:15:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:50:07 2026 by rpki-client