Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6cc0aad2-8ec1-4017-bb54-1e1f058c5c3f.roa
File:                     6cc0aad2-8ec1-4017-bb54-1e1f058c5c3f.roa (raw, json)
Hash identifier:          ThkOVuuGr1VPtIJ6XXfN7MepCvhiEnem8CibTM/swrI=
Subject key identifier:   AD:C9:DA:63:9B:B8:61:56:1F:F7:93:D0:BA:BC:16:30:31:90:63:20
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       626EA092ACDFE22345069FB4CC1746A54AF06F7E
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6cc0aad2-8ec1-4017-bb54-1e1f058c5c3f.roa
Signing time:             Thu 15 Oct 2026 02:50:10 +0000
ROA not before:           Thu 15 Oct 2026 02:50:10 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     214101
IP address blocks:        173.82.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6e:a0:92:ac:df:e2:23:45:06:9f:b4:cc:17:46:a5:4a:f0:6f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 15 02:50:10 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=dbccb371546c2b1e63e5addef441c303ab8111038cec6744f419e6e711bff9ab, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1a:73:45:4e:64:56:af:cb:66:fb:02:a1:90:
                    6a:6a:fd:a3:2f:98:a9:cb:40:67:33:48:19:66:1e:
                    69:f1:cc:ff:f7:00:18:d4:11:a0:fb:03:ba:a2:19:
                    eb:af:56:e1:3b:ab:e6:bb:d1:33:98:2c:03:d3:a2:
                    67:31:a7:54:b8:3e:45:90:29:36:fa:e9:74:6c:91:
                    ab:83:fe:b1:7d:5a:9a:a4:2e:bd:8d:88:c1:96:29:
                    4e:a7:47:a8:62:6f:50:a3:c4:45:ba:31:b3:30:0f:
                    ac:31:77:27:d4:db:e4:d0:b9:98:80:5d:02:b4:70:
                    78:4e:62:05:de:31:09:87:b7:c9:e4:35:2e:28:b2:
                    ff:7f:df:5c:24:de:96:38:ab:79:de:93:2b:8e:50:
                    2a:76:58:ec:c7:1b:c2:b3:09:93:21:4f:fc:44:fb:
                    06:a8:39:6b:bf:7a:86:ab:79:1c:30:40:f0:a5:ef:
                    1b:92:22:b3:96:37:96:2a:99:bc:ea:48:bc:9a:3b:
                    5d:4e:63:c4:f3:22:9a:f4:b1:cd:66:cd:97:01:18:
                    73:2a:86:08:41:2e:df:f7:78:e3:d2:eb:cb:28:44:
                    48:dc:52:eb:d8:32:16:85:51:e2:ad:8a:42:09:e9:
                    b5:5b:00:f5:cd:04:33:02:05:e9:e4:58:17:ff:67:
                    5c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C9:DA:63:9B:B8:61:56:1F:F7:93:D0:BA:BC:16:30:31:90:63:20
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6cc0aad2-8ec1-4017-bb54-1e1f058c5c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:9f:fb:4e:16:06:6d:02:58:1c:2a:16:e9:60:e4:91:cc:a8:
         21:b9:11:03:47:93:0d:ec:b6:07:8f:09:4d:ba:0a:ba:ba:fb:
         fc:5b:ca:a3:8c:fa:0c:e9:be:bd:80:37:cd:e1:4d:b8:ae:43:
         96:08:04:8c:d0:5c:4a:d8:e3:8c:43:14:f0:2b:44:6d:8e:eb:
         55:9f:b6:13:0e:3b:35:9c:1c:8e:a1:43:0a:00:73:57:28:a1:
         e8:7f:fa:3a:6e:c3:5f:48:49:64:ca:64:99:4b:4a:1e:71:20:
         0c:77:56:03:e6:09:4f:ae:74:f7:4d:cd:72:ae:5a:1a:5e:17:
         6a:0c:19:49:11:fe:d0:92:92:0e:c7:84:8e:d7:2d:5c:d9:80:
         7d:99:c8:67:b9:48:93:18:18:12:a5:68:5a:c3:f4:42:39:0b:
         47:fa:cb:9e:84:c2:0c:5b:c2:a4:42:06:b8:11:2f:af:12:d2:
         0b:01:8c:c8:96:a0:cb:aa:ab:44:bd:c1:12:09:41:02:7f:4f:
         d5:5f:d0:b5:b3:60:e6:aa:8e:c9:50:01:5e:65:08:7d:58:1c:
         01:8e:5a:fb:8a:b0:43:ab:f4:ea:eb:98:7f:6c:fa:3d:ea:a6:
         10:35:8f:76:e8:54:19:d0:51:e0:ea:53:14:fb:cc:f0:ba:a7:
         87:1a:3f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:58:24 2026 by rpki-client