Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0a13ab87-af2d-4793-9495-8c0d09f5b9b9.roa
File:                     0a13ab87-af2d-4793-9495-8c0d09f5b9b9.roa (raw, json)
Hash identifier:          FkcYTG+WQvwrM57Eh34INhKWqE9b1dbIaGHrTyier7g=
Subject key identifier:   5E:4C:A4:8D:63:5B:AB:59:25:13:7E:48:9A:71:0C:80:DD:BF:AB:E6
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       668BFC8CDCA597CEFDB579AB2AC07213027BD74C
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0a13ab87-af2d-4793-9495-8c0d09f5b9b9.roa
Signing time:             Tue 19 May 2026 03:51:01 +0000
ROA not before:           Tue 19 May 2026 03:51:01 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:30e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8b:fc:8c:dc:a5:97:ce:fd:b5:79:ab:2a:c0:72:13:02:7b:d7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 19 03:51:01 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=a0f9695bd6aac2ee7052d381bac07491f0cd823bbd714504134a2d00f5714eb2, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:99:99:fe:87:15:77:dc:69:c9:4d:74:c5:
                    d7:5a:4a:7d:f1:0e:95:26:bf:96:4e:ea:37:23:d7:
                    ac:ee:64:5d:ca:9a:6f:7e:62:80:f4:48:79:db:4e:
                    42:44:02:86:37:da:25:2e:00:df:93:d7:00:92:59:
                    d6:33:26:4e:c2:0a:1f:1e:92:c0:c1:69:85:ae:53:
                    62:f5:17:6c:36:24:2b:44:19:35:81:f4:ee:61:ff:
                    23:d0:3e:90:df:ce:7b:8a:fd:6a:b4:e9:cc:3b:b4:
                    2f:12:28:be:fe:9d:98:85:2e:75:66:82:fb:0c:53:
                    a4:4b:77:7b:1e:03:6c:5c:bc:b4:16:37:a8:c2:31:
                    c6:71:38:38:af:e8:4e:56:93:98:24:be:f8:7c:b6:
                    67:2b:c7:b0:cf:16:8a:e1:2a:60:72:06:03:0e:07:
                    ea:79:26:b4:6e:b1:69:9d:ef:8b:fa:cb:9c:55:61:
                    be:53:0a:bf:fe:de:4d:2c:bc:69:c2:84:31:e7:f8:
                    89:4b:01:08:bf:3a:2d:43:e2:d3:e1:72:98:28:0c:
                    e7:ef:20:32:86:0e:8e:91:e5:56:55:5e:90:f1:cd:
                    f1:cc:43:23:5f:48:f6:72:d9:b6:35:f2:1f:11:5c:
                    54:f4:1e:e4:a6:87:48:8b:e1:24:42:a1:0d:83:32:
                    b1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4C:A4:8D:63:5B:AB:59:25:13:7E:48:9A:71:0C:80:DD:BF:AB:E6
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0a13ab87-af2d-4793-9495-8c0d09f5b9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:30e::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:42:8e:b7:fd:65:31:8f:77:3d:ed:a1:e8:00:98:7d:60:df:
         1c:8f:72:2a:6a:95:ca:e7:9b:05:2f:17:5b:e1:f1:8e:84:e0:
         70:e5:0e:9a:bc:49:34:4d:b6:ae:f1:4e:0b:27:9d:9a:c0:fb:
         c2:2c:9d:20:05:69:24:81:95:73:94:78:8e:35:52:3b:cb:3f:
         51:1f:ea:cc:84:23:4b:77:11:49:cd:bc:ec:0f:d0:5e:06:58:
         b3:ee:dd:18:4b:a9:0d:68:df:25:f0:64:b4:c6:37:3b:8b:b2:
         12:7c:86:40:62:0e:ad:72:0d:31:91:eb:d1:23:47:94:8d:c0:
         c6:30:f1:c0:70:9e:4b:a8:33:01:8b:55:d1:c6:a3:a7:e6:b8:
         bb:7b:03:2d:b5:61:1a:bb:f7:50:62:b0:25:f7:a3:0c:dc:83:
         dd:dc:2a:ab:16:29:ec:a1:04:2c:b6:b6:9d:d0:b0:aa:a1:20:
         21:b0:7f:0b:5d:5a:4d:46:92:0a:b1:df:eb:0f:da:06:fc:3d:
         8a:08:91:81:33:7e:5b:fc:37:df:ce:fb:83:cf:dc:9c:d9:79:
         76:12:22:a4:45:ef:ae:d3:f4:73:01:89:d5:f6:3c:d0:42:1e:
         8f:6c:b5:13:2a:71:2c:4b:d7:52:58:1d:12:22:cc:28:40:0e:
         d1:57:8e:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:24:27 2026 by rpki-client