Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2bd70db9-2525-4e15-8c88-4ccc169122c1.roa
File:                     2bd70db9-2525-4e15-8c88-4ccc169122c1.roa (raw, json)
Hash identifier:          mW0qQOoVy3HAXNtGtmkhcFV8tvnID10Fs9Nb2ETBt9Q=
Subject key identifier:   D5:23:4B:6F:DD:56:36:C3:42:B8:39:B0:66:0C:66:5E:A3:90:3D:72
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       41F86649FE6043F491849C6EE2F554BEA69EE429
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2bd70db9-2525-4e15-8c88-4ccc169122c1.roa
Signing time:             Mon 31 Aug 2026 00:00:07 +0000
ROA not before:           Mon 31 Aug 2026 00:00:07 +0000
ROA not after:            Sun 29 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f8:66:49:fe:60:43:f4:91:84:9c:6e:e2:f5:54:be:a6:9e:e4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug 31 00:00:07 2026 GMT
            Not After : Nov 29 23:59:59 2026 GMT
        Subject: serialNumber=55258d59af754ff0725522c77fc32f82ab9fb55b13b8467cc409a7ceac415fcd, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:65:41:d2:61:f2:57:1e:9f:0b:49:cb:45:
                    cd:e2:b0:d5:22:21:e9:70:3d:5e:92:1b:64:a5:7d:
                    a3:db:44:d5:13:a6:38:2f:99:7c:49:53:15:9e:1b:
                    bf:13:08:99:be:55:f4:28:1d:dc:06:03:63:3d:d8:
                    89:28:6a:04:18:ee:df:46:0a:07:b1:40:f2:70:5c:
                    0c:7f:77:60:7b:cd:6b:23:3e:a9:70:50:7d:84:49:
                    22:b5:fb:48:4e:79:11:61:40:2d:3e:03:fd:c4:71:
                    bc:89:d3:97:2a:00:01:dc:24:7d:6a:d0:2e:83:aa:
                    c3:5d:a4:c9:92:e1:ee:ed:1c:6c:5a:49:e3:24:47:
                    58:20:89:34:80:a8:26:0f:95:d2:6e:1e:60:2b:30:
                    b2:8d:ec:56:5e:f7:34:16:e7:42:c9:3b:7b:9d:91:
                    c3:95:67:f2:ce:c6:bf:b3:de:f9:5e:1b:2b:a4:31:
                    ca:b1:13:57:db:92:ef:29:31:fe:42:17:93:b2:66:
                    36:3a:73:e3:9f:01:87:00:41:75:6c:4e:26:99:5b:
                    49:85:c0:76:57:74:19:ac:df:33:57:ae:68:da:b2:
                    c7:04:bd:6a:41:a6:8f:eb:bb:d4:f2:a4:e9:1d:2d:
                    bb:e4:74:ee:e7:bf:83:65:2c:19:ff:e1:5b:93:c4:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:23:4B:6F:DD:56:36:C3:42:B8:39:B0:66:0C:66:5E:A3:90:3D:72
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2bd70db9-2525-4e15-8c88-4ccc169122c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:21:0f:cd:f8:b3:b7:48:33:68:49:5e:72:c7:87:19:12:dc:
         2e:b8:68:1f:5e:53:38:6e:73:b8:15:6a:50:6b:ae:33:eb:67:
         c9:db:98:65:91:d1:25:19:bd:f1:7e:41:77:3d:a4:8f:b0:f9:
         bd:cf:fb:94:ba:24:cc:39:26:d1:7c:39:93:9b:95:a7:ae:d3:
         8c:87:1c:b0:7d:7f:46:cc:c9:c5:e5:3a:b6:48:ab:a0:fb:9a:
         eb:94:58:09:3c:30:9a:fc:27:98:e2:62:c2:36:c7:7f:13:13:
         d0:9e:ba:9b:81:35:f6:05:ee:dd:7f:77:65:a8:bf:dc:0c:4e:
         75:e4:5f:c3:82:a0:57:70:00:30:f7:37:4a:d6:bf:b4:2f:f3:
         79:f8:6c:4a:a6:ea:41:aa:69:fa:7e:87:af:a1:b4:51:1c:7f:
         9d:95:66:93:7b:71:6c:54:cc:ed:56:dc:4f:a5:e3:4d:38:40:
         38:b9:44:e0:51:db:09:74:55:55:9b:4f:61:98:9a:83:b8:06:
         c6:90:05:46:7e:a7:1e:70:1f:17:83:83:2d:74:c8:b2:1e:63:
         c3:c4:8a:81:5d:4a:3a:69:98:b9:d6:21:f4:e0:34:8e:ff:1b:
         55:46:94:7a:bc:76:2e:03:0f:71:ac:c0:3f:a0:32:39:32:de:
         7a:81:8a:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:59:28 2026 by rpki-client