Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35efcf72-708d-4456-b1d1-8419a2636e00.roa
File:                     35efcf72-708d-4456-b1d1-8419a2636e00.roa (raw, json)
Hash identifier:          wR57Py+0hnUyrqA/wTm/1uVJeXAG3RSoGch1FJhCDx0=
Subject key identifier:   00:26:A7:BF:0E:88:8C:FF:ED:56:5B:C5:AE:CE:B2:26:B4:5F:24:10
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       2F8A672C82B09B62158917A1F3D5EBA5972B41
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35efcf72-708d-4456-b1d1-8419a2636e00.roa
Signing time:             Tue 19 May 2026 03:40:56 +0000
ROA not before:           Tue 19 May 2026 03:40:56 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:f03d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8a:67:2c:82:b0:9b:62:15:89:17:a1:f3:d5:eb:a5:97:2b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 19 03:40:56 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=497a1b6b3e3c959d3f9394f0f0f8fdcd3307370a5410d107ef2bc49daee7acdb, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1a:f4:81:e7:84:1a:67:ad:be:11:ca:54:08:
                    99:b5:d3:48:06:ff:44:cb:ad:6a:ef:62:d9:a8:65:
                    e6:f8:6c:74:82:1f:a0:42:41:8a:1a:c9:a7:e1:1d:
                    cd:9e:76:d3:3f:46:16:3f:dc:c2:c7:4b:79:99:7e:
                    59:b9:4f:57:70:9f:76:59:64:e0:07:a6:66:a7:52:
                    56:a1:56:9c:ef:a1:5a:d9:43:98:18:2d:34:9a:01:
                    83:05:4b:01:68:15:87:88:46:35:69:e8:4f:33:43:
                    03:29:7e:84:21:d7:32:f4:2a:92:d4:49:29:54:ff:
                    3c:39:50:1b:b4:1b:56:b4:55:ab:7c:46:36:cf:0b:
                    39:b6:93:5a:d6:4c:b6:db:31:de:22:ec:89:ef:6f:
                    8b:2f:60:9f:91:5c:44:a3:71:fd:dc:4c:bf:ce:5a:
                    73:59:86:f1:8b:df:2c:3b:06:9a:b1:ce:e8:3b:ba:
                    30:fd:ca:48:19:a8:e5:fc:4f:de:c1:40:e8:9c:a4:
                    1e:e2:cc:8a:ca:f3:2a:4d:39:e2:a3:25:ff:4a:ea:
                    2c:12:68:55:66:b7:79:36:05:c8:39:e1:1c:db:46:
                    d3:b0:f2:76:a3:b4:3c:de:0a:2d:fb:61:4a:70:c9:
                    86:e9:d1:fe:91:e7:96:17:cd:35:d8:83:2a:18:50:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:26:A7:BF:0E:88:8C:FF:ED:56:5B:C5:AE:CE:B2:26:B4:5F:24:10
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/35efcf72-708d-4456-b1d1-8419a2636e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f03d::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:d1:06:b8:28:e3:a7:88:1f:0b:78:2a:a5:93:d5:40:fb:e5:
         c6:9c:ee:25:34:65:b7:7f:84:fa:91:63:81:8a:82:c0:ec:8b:
         b3:f6:b7:e2:ca:bf:9a:cd:3c:40:c2:5a:c9:c2:a3:bd:b3:3d:
         a1:e4:7e:b9:56:f8:ee:4d:2e:90:cb:dd:c8:b4:9d:26:35:3d:
         58:70:2b:e9:13:ef:3d:85:10:a6:4e:2f:5e:3d:d6:51:59:8d:
         d6:36:cc:4a:19:a7:b0:00:f5:c2:38:50:af:42:da:1f:43:9f:
         e6:2d:96:a3:4a:e3:89:b1:01:7d:68:d3:2d:c5:ab:c6:f6:45:
         a1:43:b4:51:78:1f:3e:0a:50:a9:1e:41:25:96:a3:b8:40:aa:
         1d:4c:dd:55:f4:8c:e3:6a:1c:74:7d:6a:68:a2:d5:04:ed:d7:
         86:4c:6d:32:f8:f8:d2:16:5c:4f:e0:43:9c:ef:3a:12:e9:8a:
         8b:d1:c6:9a:d3:98:21:ac:4c:05:79:08:80:b3:66:e7:c3:61:
         7c:03:24:9f:68:d1:be:71:f2:f9:db:ad:c0:c4:94:c1:61:5b:
         e6:19:c9:6f:cb:41:cb:d7:70:f3:67:4d:7d:1f:e2:bc:e0:81:
         11:26:e1:d3:82:a2:71:27:ee:5d:61:30:56:d0:19:39:e8:19:
         f9:23:9b:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:22 2026 by rpki-client