Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa
File:                     1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa (raw, json)
Hash identifier:          NbTJYilYQkRjuSHfquy4D0AOj8wrPCdCKS2qweU2Acs=
Subject key identifier:   F0:5B:8D:4F:16:92:1F:E7:7C:ED:B9:4A:B4:38:54:DE:B5:42:B3:48
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       08FDD2C34F35C81543431F49488E1FED238537B9
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa
Signing time:             Sat 25 Jul 2026 00:00:37 +0000
ROA not before:           Sat 25 Jul 2026 00:00:37 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2620:108:d000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fd:d2:c3:4f:35:c8:15:43:43:1f:49:48:8e:1f:ed:23:85:37:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Jul 25 00:00:37 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=7e6290bc75108ec4b1da10c0c5af0ef28185020a48ebf7bbf5be0b7beb9f0385, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:bb:04:3a:9c:14:62:e0:12:78:6b:b7:53:
                    99:1b:f8:0c:b4:0a:58:e3:f6:22:c9:95:90:d0:90:
                    d0:5b:35:7f:37:35:58:75:34:09:e7:ac:ea:bb:ee:
                    30:4b:35:43:19:01:a3:94:97:26:ec:44:b6:e6:48:
                    dd:a6:fc:4d:10:7e:90:d9:17:17:1e:cb:1d:86:26:
                    75:09:fd:6e:95:06:d3:aa:ba:c2:5a:a3:24:d2:1e:
                    08:88:97:05:62:8c:dc:f1:a1:0a:3b:f8:60:07:b4:
                    d2:34:8d:95:43:a8:9b:78:75:26:7f:6c:23:1d:93:
                    0e:fe:db:65:c5:c2:76:0f:88:f9:eb:40:25:9f:94:
                    49:37:86:ad:3d:fd:7a:52:1f:61:8a:22:1c:9c:77:
                    59:5e:24:2a:ef:c2:5f:63:09:97:9a:53:0e:4d:d2:
                    af:ee:e3:5f:c5:b5:9e:b3:da:04:e3:53:62:eb:d8:
                    15:98:54:71:e9:c6:17:bd:da:a1:b6:3c:f4:7b:27:
                    bf:04:d1:cf:a3:bf:f8:6d:3c:00:04:06:43:79:b0:
                    38:63:4b:15:4f:1f:52:d3:aa:c4:e7:2c:0b:5b:e5:
                    28:a7:70:45:b9:43:53:64:49:4e:40:c8:d6:a0:22:
                    aa:ba:71:36:a6:de:39:0a:4a:29:73:05:5e:ee:01:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5B:8D:4F:16:92:1F:E7:7C:ED:B9:4A:B4:38:54:DE:B5:42:B3:48
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:108:d000::/44

    Signature Algorithm: sha256WithRSAEncryption
         63:b6:39:8a:b0:41:15:54:9f:56:ff:3a:70:36:d6:12:46:cd:
         e4:33:f3:e4:38:3b:eb:81:d7:03:79:85:95:cd:29:01:57:90:
         a2:0a:6e:d9:e7:7f:d2:01:6d:11:f4:00:11:7e:82:d3:2d:47:
         e1:3b:39:22:4f:7d:7b:c5:93:3b:26:6a:ba:d0:1e:f8:3a:92:
         0e:df:fd:a4:dd:4e:72:24:57:60:38:57:57:46:ea:d7:1e:ff:
         83:4f:4f:ce:f4:b5:34:86:42:f8:06:43:24:6a:10:11:7e:f0:
         0d:fe:9c:98:ea:93:27:3e:2d:4f:4d:cf:2c:e8:5d:d9:a8:dd:
         9e:1f:84:84:15:d8:b0:31:66:7f:04:cc:46:f7:fa:15:ce:62:
         30:6e:7e:c5:8d:c5:13:75:78:d1:80:04:9f:0d:d3:6b:74:63:
         cd:05:d8:ce:06:f8:91:cd:4e:fa:ce:45:71:90:56:59:fe:22:
         5d:b8:b0:72:63:35:bd:60:3f:8e:2c:1b:16:b4:aa:bc:51:ca:
         ba:e2:45:be:60:16:4d:7c:a7:5d:ed:fa:66:be:94:1c:a8:a6:
         22:15:4b:44:ee:5a:5e:ec:7e:29:91:ee:93:db:4c:7c:aa:cc:
         f7:d1:06:99:10:fd:3a:e2:e4:4a:2d:9c:9c:e7:4e:30:42:c2:
         01:e8:ab:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:19:30 2026 by rpki-client