Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa
File:                     3191e88d-746d-41d2-84db-9fc65334e5a8.roa (raw, json)
Hash identifier:          POFUr0qFZx7gNQF7nq5EN3+B0f9jC22khaW5paIvChA=
Subject key identifier:   CB:EE:22:17:FD:8C:41:E3:71:A5:EC:FF:6F:45:06:FC:A3:99:21:99
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       630FBCCAD991A97262E140CA8F361C3BBD612A99
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa
Signing time:             Tue 19 May 2026 03:40:42 +0000
ROA not before:           Tue 19 May 2026 03:40:42 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:100::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0f:bc:ca:d9:91:a9:72:62:e1:40:ca:8f:36:1c:3b:bd:61:2a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 19 03:40:42 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=2dea0d65d703fabc5aeec7cc17dbe37980a1ac73fce2b3f58a491bbe6a1fe514, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:be:b8:9f:5e:c5:69:3f:f6:65:66:0a:e9:
                    80:64:01:4e:b5:f9:d5:3f:f3:de:03:8e:fb:1b:99:
                    de:57:51:06:2d:d7:5c:80:5c:54:46:93:04:02:c5:
                    47:20:75:aa:97:b0:6f:68:14:40:1a:0e:aa:32:63:
                    73:66:06:0b:dc:d7:ea:a9:b0:48:e7:bf:90:e5:6c:
                    f9:b9:02:0d:be:ad:f4:d1:ce:4f:8c:8c:92:55:73:
                    f9:0d:17:cd:30:bd:07:5c:d4:4f:3a:44:0f:65:af:
                    33:f2:b2:4f:af:ae:27:17:6e:6e:49:ef:b4:d1:c6:
                    80:fa:b7:80:10:cf:22:19:bd:96:64:05:e1:7d:47:
                    5b:d6:44:d9:ea:cf:64:41:de:f2:49:59:80:58:d4:
                    35:dd:3e:53:10:da:30:af:5d:1c:85:da:2b:39:1b:
                    d1:53:11:00:1a:9d:b4:80:27:fe:cf:a5:08:67:df:
                    35:d7:e6:70:9d:9c:5c:ad:c2:45:9a:e0:34:3b:d7:
                    d8:d2:99:b8:ab:c5:0b:31:34:42:04:4b:71:17:fe:
                    be:50:4d:f5:b5:a8:fb:24:fc:c5:d2:17:e8:0a:24:
                    25:e1:7c:e2:ae:8d:07:c7:db:0f:e9:50:9d:31:78:
                    f4:b0:09:a3:54:1f:75:8b:bc:da:70:52:64:a7:89:
                    46:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EE:22:17:FD:8C:41:E3:71:A5:EC:FF:6F:45:06:FC:A3:99:21:99
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3191e88d-746d-41d2-84db-9fc65334e5a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:100::/42

    Signature Algorithm: sha256WithRSAEncryption
         80:d5:1d:6c:39:d4:4b:85:5a:d4:23:34:f4:04:fe:da:9b:5f:
         d3:7c:c4:d4:a9:60:4f:76:99:a8:2a:de:e4:29:1f:97:9c:fb:
         3a:94:d9:32:53:0b:ad:68:88:c9:ae:73:81:e3:7e:d5:7e:21:
         19:df:5c:f7:fc:74:48:71:7b:d0:78:db:68:9c:d7:28:f9:87:
         d4:bc:ab:bf:5a:44:ce:35:7f:da:40:78:4b:97:a2:5d:6c:71:
         40:60:6f:4c:80:d8:0b:a2:3e:13:27:4f:0a:04:ee:59:1f:f4:
         b8:c7:97:5c:2b:37:31:de:87:29:cb:24:af:17:bc:71:10:c4:
         31:9b:af:1d:8f:7c:97:6d:ad:9b:5a:12:4d:46:5b:7e:f8:8d:
         8b:12:90:91:00:6b:47:8c:cb:6a:b0:8d:c3:db:f0:58:c4:f6:
         af:74:c0:84:f9:6b:27:ce:ae:df:f4:83:ff:10:ed:95:80:ff:
         36:e6:37:32:45:46:00:c4:a0:5f:b6:c9:76:ab:fd:66:c6:a6:
         8e:65:d0:e8:52:a9:ae:81:93:9b:b5:eb:17:48:30:26:2b:54:
         6a:d1:35:ec:ec:43:bf:57:10:9b:4f:88:e6:14:9c:e9:44:31:
         7d:ef:b2:b9:dc:7f:e9:8a:22:bc:d1:09:16:2c:bb:55:b7:96:
         cf:f8:14:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:11:46 2026 by rpki-client