Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/29afec76-525a-4bc4-b33b-bce824242df2.roa
File:                     29afec76-525a-4bc4-b33b-bce824242df2.roa (raw, json)
Hash identifier:          a+uSjlyunlh50vIOAvyH2OAiysbY967a5iFf/ne4dqU=
Subject key identifier:   5B:31:F3:D3:DF:0F:83:94:D2:75:46:E1:A5:A5:A3:F1:0C:47:0B:1F
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       263D7780F7D1863232FCD60A27092A6E523AC95E
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/29afec76-525a-4bc4-b33b-bce824242df2.roa
Signing time:             Thu 15 Oct 2026 03:07:19 +0000
ROA not before:           Thu 15 Oct 2026 03:07:19 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     40045
IP address blocks:        2605:9cc0:c08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3d:77:80:f7:d1:86:32:32:fc:d6:0a:27:09:2a:6e:52:3a:c9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 15 03:07:19 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=b00ba02b35eb3ffe6b396c33a0628e1ea1401ff744aedea71b91c1b7c16f7b5f, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:b0:6d:06:50:28:d3:61:fb:50:16:c2:a8:
                    07:d2:b0:ec:23:65:4c:d2:90:86:ee:d2:c5:fa:5a:
                    7a:e2:7f:06:8d:d1:99:fc:35:78:55:ca:01:67:07:
                    ef:8f:d3:4e:be:2e:1b:6d:36:76:25:8e:17:d9:8e:
                    b8:22:4f:2d:96:02:76:32:3d:55:02:fc:2f:0f:bb:
                    84:07:51:4f:44:00:ef:3f:d2:f7:8e:95:d0:cc:7a:
                    9f:aa:e8:0a:6d:71:21:51:0d:c6:9d:38:ec:0b:52:
                    e6:31:50:f6:71:82:53:f8:37:38:51:e0:7e:4f:c8:
                    ba:bd:6f:d9:2c:7d:c0:ff:ec:74:15:3c:98:54:dd:
                    3c:3b:4a:9a:5b:bd:ef:54:63:fc:39:f5:82:ba:c1:
                    b0:c9:e9:fe:a5:cf:7c:bb:84:c8:bc:e0:d1:ba:7d:
                    45:35:2c:67:47:83:d8:7f:b6:6d:5f:ea:da:dd:7d:
                    55:e7:67:fa:7d:44:bd:45:05:5e:66:74:01:c1:ce:
                    b7:97:fb:30:80:51:96:b9:1a:8b:88:f6:1e:4b:02:
                    43:30:4e:07:d3:a7:2c:9c:a4:77:dd:e4:c1:1e:2c:
                    ca:d1:c3:4c:22:bc:e9:cc:74:d6:3c:2f:2c:77:5a:
                    3b:b1:43:88:c4:96:71:28:90:3e:3c:a8:9e:66:28:
                    1b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:31:F3:D3:DF:0F:83:94:D2:75:46:E1:A5:A5:A3:F1:0C:47:0B:1F
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/29afec76-525a-4bc4-b33b-bce824242df2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c08::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:e4:4e:d9:e0:fe:bc:80:29:14:b8:3b:0b:c3:e8:54:72:5b:
         99:ad:40:cf:2d:8e:bb:1a:6e:b4:2f:64:ff:12:7b:30:a6:cc:
         5c:ed:11:2e:7a:8e:03:57:2a:01:cb:bf:5e:1d:09:a5:d7:eb:
         4f:1a:06:58:2f:ea:94:d9:99:8d:ce:1d:dc:48:c0:7a:48:cc:
         df:b5:48:49:cb:e8:a6:e2:58:15:8e:f4:8e:ca:9e:90:90:a0:
         b3:0e:35:e2:86:ce:ab:40:be:29:c8:f1:88:32:da:1c:17:15:
         30:1a:2f:a2:29:97:52:f7:98:80:20:8a:ca:36:de:e8:a7:3d:
         dc:65:36:d2:07:98:67:7c:af:a5:ed:01:a6:0b:bd:a7:01:bd:
         38:ed:fa:3d:f5:b5:99:c0:63:ed:f4:93:76:b3:b8:4e:dc:c0:
         7d:53:26:ac:16:b6:45:61:04:04:e1:88:fe:f8:6f:46:1e:f6:
         f4:82:9a:d6:5e:c4:a4:32:0c:cb:e9:fd:6c:4f:cd:71:7c:55:
         82:b7:30:af:9b:95:2e:77:d0:cc:6e:c8:c3:e1:81:4b:f8:6b:
         b2:b3:a1:98:89:6e:8f:b4:7e:9f:07:b6:13:3e:4e:b3:b9:28:
         e0:ed:81:5e:b1:e5:12:b9:e3:7f:75:79:c0:93:d5:a4:9b:89:
         f4:bf:41:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 8 01:55:56 2026 by rpki-client