Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e2efdf3b-dc09-4793-a9e7-fac601e5bcc6.roa
File:                     e2efdf3b-dc09-4793-a9e7-fac601e5bcc6.roa (raw, json)
Hash identifier:          /8zLUcEbMyRxIh6sJ3eNMf2h1n6rtmXMTVdQw37yKz0=
Subject key identifier:   5B:1A:73:8C:68:05:0D:46:0C:BE:78:C4:97:B2:B5:28:F0:38:C5:EB
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       35AA65F6C890824133718EA014EE87F64ADAEEAC
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e2efdf3b-dc09-4793-a9e7-fac601e5bcc6.roa
Signing time:             Fri 08 May 2026 03:10:06 +0000
ROA not before:           Fri 08 May 2026 03:10:06 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:aa:65:f6:c8:90:82:41:33:71:8e:a0:14:ee:87:f6:4a:da:ee:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May  8 03:10:06 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=fa5cce6890f5eda9336fe8742d114df640944d588a2f429f6aca1c1851239099, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:b6:bc:f9:e7:7b:84:aa:ac:c2:84:a4:a4:
                    65:ed:4a:aa:3f:f4:9a:f5:dc:d4:ea:e6:85:d2:b3:
                    c7:5f:f0:e2:ab:8a:ea:1f:de:21:ce:5f:c1:65:03:
                    c9:db:1c:e6:44:fe:11:47:68:cb:bc:72:3c:11:28:
                    9a:d8:26:22:6f:16:7a:a1:5f:5f:92:eb:2f:03:79:
                    aa:27:66:55:35:76:dc:ea:99:de:30:5d:90:d4:32:
                    44:b8:d1:80:27:b3:41:61:43:9f:86:1d:bb:94:ec:
                    b2:29:6e:79:64:5d:96:4b:05:31:e5:8a:8e:fd:e1:
                    d7:4a:de:ae:bb:f0:77:3c:b1:20:08:ac:93:69:d6:
                    2a:0b:2f:ff:86:8f:d5:4a:11:40:5b:00:f7:fe:dd:
                    01:dc:7b:df:f4:5f:f0:e0:30:f5:ab:8b:e0:fd:f9:
                    85:51:9d:55:c6:1d:3c:eb:b1:89:87:db:17:8a:72:
                    48:fe:30:a5:ca:94:0c:58:e8:a1:e5:84:c2:6c:80:
                    42:03:84:bd:46:d5:1a:62:f9:9f:ca:8a:49:88:eb:
                    66:6f:d9:d9:44:5f:2e:0b:08:41:ab:00:91:1f:09:
                    bb:10:54:7d:60:e5:71:25:70:b1:94:bf:50:ea:d0:
                    89:f1:0f:4e:c8:ab:de:bc:84:0e:b7:5d:34:49:a2:
                    af:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1A:73:8C:68:05:0D:46:0C:BE:78:C4:97:B2:B5:28:F0:38:C5:EB
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e2efdf3b-dc09-4793-a9e7-fac601e5bcc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:95:a1:58:34:ef:ef:ca:64:f3:8c:41:85:fe:3e:fa:39:f3:
         73:01:97:e7:7e:0a:0f:6a:67:c8:6b:b4:07:c3:b6:44:e6:09:
         88:93:cb:ec:84:4a:a7:6d:22:43:a3:c9:0b:69:be:88:e6:fb:
         b8:eb:6c:b1:72:39:0d:4e:9a:65:91:cb:30:16:43:07:25:a6:
         14:14:4b:36:86:7d:a0:be:f3:4d:d1:be:1f:84:ec:8a:1c:77:
         14:d1:c8:63:d4:c3:bb:76:c4:2c:dc:e7:05:ca:28:21:cd:99:
         62:fb:5a:be:6c:a1:9b:62:b7:66:1d:52:9a:a4:ad:d8:81:bd:
         09:67:53:bf:90:76:fd:1b:95:d7:a5:4e:a0:67:46:6a:cc:e9:
         3f:c9:96:37:2a:27:14:16:b8:e5:c7:7e:82:f6:6a:ec:9c:a8:
         7b:0e:90:12:0f:7e:fb:45:a3:a8:f3:c4:80:61:02:8d:e6:cf:
         74:69:c5:0a:19:fe:0c:84:b0:22:08:3e:ee:18:77:1f:17:fc:
         be:dd:ae:3f:76:1a:06:d6:06:f9:66:21:32:e7:43:5d:92:c2:
         5e:45:80:19:f5:86:73:08:68:d7:a1:b2:f7:c9:b4:8b:e4:9e:
         6d:01:60:23:a8:05:d7:12:27:0b:88:f2:f7:37:83:39:1d:ec:
         29:eb:74:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 23:36:02 2026 by rpki-client