Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/07f4a85e-de83-42f6-84ff-18bd059accc5.roa
File:                     07f4a85e-de83-42f6-84ff-18bd059accc5.roa (raw, json)
Hash identifier:          BCLyztT7FrRM5PyXXVChlD53TCE+Ywzy3R4wUS/r7Kg=
Subject key identifier:   8D:19:94:D3:D1:A9:77:6F:82:45:80:9C:49:05:74:16:27:B7:FF:15
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       1D12B79F0C118E575F218E84E5A07559830E504E
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/07f4a85e-de83-42f6-84ff-18bd059accc5.roa
Signing time:             Tue 19 May 2026 03:40:43 +0000
ROA not before:           Tue 19 May 2026 03:40:43 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:100::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:12:b7:9f:0c:11:8e:57:5f:21:8e:84:e5:a0:75:59:83:0e:50:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 19 03:40:43 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=daf482920652a5a332eb9d10a6df0be86abf7a5069d4ed8749e2bc23456b7c9c, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5f:36:dc:ae:58:50:d8:c5:74:65:84:a5:c6:
                    5b:a0:cd:92:68:23:40:49:5b:ae:c8:94:f1:3a:19:
                    8c:50:a8:1c:62:bc:34:7d:7d:e7:7e:55:17:e6:9f:
                    51:b8:16:b1:95:89:e3:7c:68:eb:c5:c5:55:c8:6e:
                    ac:67:22:24:65:6e:b3:bb:69:f6:43:47:e7:7b:fc:
                    e8:2d:01:22:1c:b3:31:9a:5c:d5:09:c2:9c:6d:cc:
                    af:ef:40:50:f4:4b:45:d5:b2:6f:04:3c:59:a7:e0:
                    43:30:f4:a3:7a:ea:2d:cd:6d:d3:76:6e:a9:32:50:
                    6b:76:68:c6:40:10:e7:f6:48:24:c5:df:09:ea:c4:
                    8e:65:44:f5:48:16:6c:29:f5:11:3c:bc:10:1a:2c:
                    13:36:9b:5d:31:36:9f:ce:38:85:ec:7e:51:24:8e:
                    97:7e:ef:09:4e:0b:7d:8f:29:29:9d:54:5b:94:9f:
                    d9:63:dd:c3:57:ba:7a:6d:6e:75:f9:1e:bf:20:9b:
                    f7:73:5a:11:48:fe:2a:7c:8f:0d:1d:74:ed:1a:f9:
                    af:dd:bc:9e:b2:34:0a:79:6a:65:e6:68:e1:9e:dd:
                    14:13:29:25:3c:ec:d2:82:6c:00:0e:79:5d:cc:73:
                    8c:f0:dc:32:3b:a4:40:41:a1:4b:f0:48:00:4c:4b:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:19:94:D3:D1:A9:77:6F:82:45:80:9C:49:05:74:16:27:B7:FF:15
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/07f4a85e-de83-42f6-84ff-18bd059accc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:100::/42

    Signature Algorithm: sha256WithRSAEncryption
         33:58:d4:eb:72:40:39:e9:91:92:c0:88:2b:ec:16:d1:7f:d9:
         88:3e:db:11:7d:ae:2d:66:22:bd:e6:d0:f5:b0:ee:80:ff:c1:
         22:3e:cb:a5:62:21:17:25:97:19:e5:18:cb:3f:28:43:26:bf:
         dd:4a:77:e2:08:4b:e5:d1:0d:86:cc:69:9f:a5:63:3a:f2:61:
         b2:5d:01:79:32:bd:43:b0:e8:5b:af:ca:a9:cd:3a:d0:ff:e3:
         b1:41:50:a8:5b:fc:e1:99:33:5a:3e:80:08:25:da:64:2a:d2:
         1c:3f:a1:e9:7e:a9:57:97:5d:20:16:ae:ad:2f:42:64:22:2f:
         92:d5:f4:85:8f:66:c7:53:5c:ea:bd:0e:40:42:6f:b6:10:9b:
         3c:7d:42:3f:7d:64:ee:87:1d:c7:f2:65:96:bf:e1:6b:50:0c:
         38:18:e9:ee:bc:86:63:04:c8:d0:f8:c4:08:0a:ea:2b:2f:55:
         8e:84:d3:53:d6:5a:28:68:ef:38:8e:1b:97:16:7d:eb:d8:68:
         dd:26:da:1e:bf:4e:65:10:5a:c2:ca:62:9c:68:c9:fb:79:77:
         85:b5:e4:42:c4:3a:e8:fa:08:de:ca:61:56:32:70:ec:b1:00:
         91:39:61:c4:f4:6f:5b:46:04:59:28:13:9a:26:9d:42:79:08:
         f2:66:d5:64
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHRK3nwwRjldfIY6E5aB1WYMOUE4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE5MDM0MDQzWhcNMjYwODE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYWY0ODI5MjA2NTJhNWEzMzJlYjlkMTBhNmRmMGJlODZh
YmY3YTUwNjlkNGVkODc0OWUyYmMyMzQ1NmI3YzljMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdXzbcrlhQ2MV0ZYSlxlugzZJoI0BJW67IlPE6GYxQqBxi
vDR9fed+VRfmn1G4FrGVieN8aOvFxVXIbqxnIiRlbrO7afZDR+d7/OgtASIcszGa
XNUJwpxtzK/vQFD0S0XVsm8EPFmn4EMw9KN66i3NbdN2bqkyUGt2aMZAEOf2SCTF
3wnqxI5lRPVIFmwp9RE8vBAaLBM2m10xNp/OOIXsflEkjpd+7wlOC32PKSmdVFuU
n9lj3cNXunptbnX5Hr8gm/dzWhFI/ip8jw0ddO0a+a/dvJ6yNAp5amXmaOGe3RQT
KSU87NKCbAAOeV3Mc4zw3DI7pEBBoUvwSABMSxupAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUjRmU09Gpd2+CRYCcSQV0Fie3/xUwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzA3ZjRhODVlLWRlODMtNDJmNi04NGZmLTE4YmQwNTlhY2NjNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmBZzAAQAwDQYJKoZIhvcNAQELBQADggEBADNY1OtyQDnpkZLAiCvsFtF/
2Yg+2xF9ri1mIr3m0PWw7oD/wSI+y6ViIRcllxnlGMs/KEMmv91Kd+IIS+XRDYbM
aZ+lYzryYbJdAXkyvUOw6FuvyqnNOtD/47FBUKhb/OGZM1o+gAgl2mQq0hw/oel+
qVeXXSAWrq0vQmQiL5LV9IWPZsdTXOq9DkBCb7YQmzx9Qj99ZO6HHcfyZZa/4WtQ
DDgY6e68hmMEyND4xAgK6isvVY6E01PWWiho7ziOG5cWfevYaN0m2h6/TmUQWsLK
Ypxoyft5d4W15ELEOuj6CN7KYVYycOyxAJE5YcT0b1tGBFkoE5omnUJ5CPJm1WQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:23:54 2026 by rpki-client