Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/45ca2c55-207f-453b-96fb-935857108122.roa
File:                     45ca2c55-207f-453b-96fb-935857108122.roa (raw, json)
Hash identifier:          CAA4vWRXDl/qOgNBprNH4kh/CDKg2NNfGPw7J4I+VCQ=
Subject key identifier:   30:A3:72:95:51:D8:78:80:4A:0E:BC:7D:4A:65:5A:43:CF:78:1F:57
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       3C74DE6F712A720F5507EABD452ADAB48AA69CDA
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/45ca2c55-207f-453b-96fb-935857108122.roa
Signing time:             Sun 11 Oct 2026 14:50:07 +0000
ROA not before:           Sun 11 Oct 2026 14:50:07 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:74:de:6f:71:2a:72:0f:55:07:ea:bd:45:2a:da:b4:8a:a6:9c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 11 14:50:07 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=1003033b8b191dcc3ea3484ff8554074438383a5e3d97d4df9c3d13df7ba4aa8, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:95:b3:bb:a4:8b:a3:aa:fd:4c:be:d0:ae:
                    b3:ff:fa:28:5b:56:6f:96:c6:76:b9:c1:58:68:66:
                    26:18:bd:2f:62:d9:65:c1:84:0a:10:cb:49:f0:e8:
                    40:3b:05:32:a4:1f:83:16:4d:fd:e6:0f:f7:95:f4:
                    c6:46:c5:ab:c8:dc:24:26:ae:48:80:2d:bd:56:00:
                    22:9e:36:f7:05:da:e9:15:81:5f:d8:dd:ed:11:2f:
                    f7:7e:67:2a:a7:bf:41:84:4f:f8:1f:ea:36:75:93:
                    86:66:9c:2d:0e:ec:11:26:e4:7d:97:c4:4b:eb:ed:
                    8d:94:27:18:5d:44:f8:53:18:c1:b7:6f:4d:45:c2:
                    3a:f7:d8:1e:f6:b3:6e:1e:99:fa:5c:55:91:78:48:
                    08:68:4b:7a:46:d6:7a:4c:a3:f0:24:2f:ae:79:43:
                    60:3c:d6:01:5d:7c:9f:4c:34:ae:12:7d:1e:af:b1:
                    85:c3:10:e0:fe:3d:00:46:38:50:7f:e6:da:fb:22:
                    5e:12:46:79:11:e1:5e:14:30:c3:e8:ca:dc:10:66:
                    1a:46:fc:e2:b7:a6:04:e7:2c:67:20:5d:97:7d:20:
                    c0:7d:4a:e8:28:28:12:96:a8:a6:47:cf:bf:f0:86:
                    93:e7:63:8c:78:01:2b:f1:0d:d9:e4:19:b5:7a:70:
                    7a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A3:72:95:51:D8:78:80:4A:0E:BC:7D:4A:65:5A:43:CF:78:1F:57
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/45ca2c55-207f-453b-96fb-935857108122.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:d2:e3:e0:27:53:b1:5e:57:d8:08:1f:74:55:3a:4e:0c:32:
         90:26:c1:e7:58:c7:b0:da:20:a6:67:8d:d2:95:b0:a0:60:14:
         bc:b8:29:f2:bf:a4:77:10:cf:f2:24:7b:49:bc:5c:9f:3d:4c:
         6e:9f:32:4d:9f:bf:bd:9d:a1:25:e7:84:a2:a0:a1:3b:ff:f3:
         7f:97:7d:01:26:50:d0:5c:fc:e1:ea:5d:2d:51:f4:4e:64:71:
         ee:fb:e7:fe:9a:26:48:63:02:08:40:de:3b:ee:21:99:1f:6a:
         7b:72:a0:90:c6:e9:d5:5e:e0:12:23:d8:88:2b:30:3c:5d:7c:
         8c:50:cf:89:a7:14:69:b2:9a:42:df:e9:7d:15:19:8d:6a:b1:
         5a:34:cf:b3:06:e3:5b:8b:a5:5c:88:c1:4a:fc:33:46:6c:73:
         22:8e:aa:7c:0d:85:0a:4d:d8:2e:8d:c8:6e:af:d1:98:90:23:
         e3:b5:35:0a:80:06:b1:b6:49:e2:a2:66:9f:14:80:0a:1a:9f:
         ac:43:ab:0f:2e:b3:26:ce:b5:82:63:a5:ec:7b:cc:36:90:be:
         94:b0:27:7b:7b:b9:e3:10:8b:b4:07:e8:2e:54:ce:76:89:d9:
         ac:e3:91:d0:f6:af:16:57:a7:6f:0f:67:1c:08:1c:d9:de:8d:
         a4:2a:5d:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 8 06:01:57 2026 by rpki-client