Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3500b8ef-7be2-4b73-a003-e1ded8f81352.roa
File:                     3500b8ef-7be2-4b73-a003-e1ded8f81352.roa (raw, json)
Hash identifier:          CzxwXQy84QnvWuL4cNI01aBoUDIZOXsS7Mwl9o8Jt/M=
Subject key identifier:   8C:E6:E1:12:E7:FA:ED:19:89:3A:EE:0D:82:5F:26:2D:0B:10:0C:DF
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       537795C97BD51D23C5E5A2C61464FC6482D7B968
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3500b8ef-7be2-4b73-a003-e1ded8f81352.roa
Signing time:             Mon 26 Oct 2026 03:50:25 +0000
ROA not before:           Mon 26 Oct 2026 03:50:25 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:2110::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:77:95:c9:7b:d5:1d:23:c5:e5:a2:c6:14:64:fc:64:82:d7:b9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 26 03:50:25 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=251bb923f5dcdc46a59590d8a350a98cda02c6ea861b68b5b65193f2e6c859e5, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:ae:11:0c:18:9c:fb:18:5a:c4:e7:cd:3e:
                    f5:ad:9d:7a:5d:1a:4d:d7:12:ee:a2:d4:18:7e:59:
                    67:6c:57:62:ee:fd:5f:54:18:be:2d:aa:d7:e4:25:
                    ef:42:e9:6e:7d:15:e0:d1:6b:8a:cc:0f:c4:0e:89:
                    60:68:9e:92:82:7e:23:27:71:73:49:b5:c5:33:3d:
                    f5:27:5e:c3:7e:31:c2:74:50:eb:fc:bd:b0:12:7e:
                    47:37:e9:b7:0c:25:93:9f:43:6c:8e:1b:38:2e:cd:
                    d4:79:cb:25:7f:2e:52:84:c8:f2:81:1a:d8:c3:6e:
                    ae:6a:aa:57:c2:c4:f1:51:02:b3:2c:df:40:b5:c3:
                    75:e6:8f:d0:8c:fd:0e:9a:75:41:2d:20:2e:8f:59:
                    64:30:3f:7a:18:8d:88:f9:6e:3e:b3:d1:2b:a6:35:
                    b9:ae:49:82:61:65:93:8a:d5:5e:63:85:41:2d:d9:
                    fe:55:d2:e5:54:87:07:86:99:41:15:dd:8c:28:1b:
                    45:d5:4a:1c:57:e3:26:a7:39:52:13:4f:7b:71:79:
                    c5:7d:b5:a1:05:c0:06:7f:80:25:6d:54:9c:ec:a8:
                    03:91:19:eb:ce:5f:83:02:8c:45:17:3c:41:a5:76:
                    b4:d9:6d:79:d7:d7:6f:b7:18:da:cf:6d:0a:ea:18:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E6:E1:12:E7:FA:ED:19:89:3A:EE:0D:82:5F:26:2D:0B:10:0C:DF
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/3500b8ef-7be2-4b73-a003-e1ded8f81352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:2110::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:e5:37:27:cb:f6:f1:1c:94:a7:3b:41:65:6e:73:be:a5:72:
         07:c1:3f:bd:f3:d7:26:e6:ab:11:d0:72:ba:52:89:b5:de:a1:
         aa:4b:3f:99:9a:48:3a:6b:28:84:a4:23:b0:26:15:cf:63:c4:
         f0:4e:af:5d:6c:61:91:83:52:0b:23:d7:51:46:aa:f8:29:77:
         ea:6b:58:f4:ec:84:46:e6:7d:da:77:5c:47:fe:70:71:4a:93:
         93:06:98:ff:9a:ed:7a:58:51:8c:6b:02:e7:56:39:e6:d8:f1:
         97:0b:95:af:83:c8:14:30:41:49:1d:2d:6d:db:88:c4:d9:76:
         a1:81:38:c9:f8:d8:2b:d8:5c:2d:42:5c:60:7a:f1:d5:69:01:
         b0:12:2f:19:5d:93:30:98:fd:b6:d4:47:b0:45:84:c6:6d:6e:
         4c:dc:fc:de:82:c7:59:22:58:39:63:23:47:3f:7b:b3:ec:ba:
         91:25:d1:df:e2:4a:9e:c8:1f:0b:35:bd:b9:cf:36:69:0e:74:
         e1:ff:8c:58:bf:f5:af:3b:70:58:69:14:6e:39:4b:f2:00:54:
         8d:6f:61:04:a1:53:73:c9:20:88:83:ef:ed:22:21:a7:bd:ca:
         35:4f:b9:8d:f5:f4:7c:a0:87:f7:d7:2b:05:37:83:37:cb:5c:
         d7:72:38:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:27:52 2026 by rpki-client