Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/854cdc18-0507-4635-a2a7-cad1690f9b8b.roa
File:                     854cdc18-0507-4635-a2a7-cad1690f9b8b.roa (raw, json)
Hash identifier:          miliS1UM6ogdX9zQjTRcD39V6k0EzyJzcXGSMOBoPgs=
Subject key identifier:   51:82:7F:89:D6:CC:AB:55:81:56:11:76:7B:92:66:97:83:80:9E:19
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5E6B0ECDED19713C4660920090734A73FD958E34
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/854cdc18-0507-4635-a2a7-cad1690f9b8b.roa
Signing time:             Mon 27 Jul 2026 03:00:43 +0000
ROA not before:           Mon 27 Jul 2026 03:00:43 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     40045
IP address blocks:        2605:9cc0:c0c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6b:0e:cd:ed:19:71:3c:46:60:92:00:90:73:4a:73:fd:95:8e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 27 03:00:43 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=b9c2d405300b72d99c47157a95532acf4dcd2a07c8caf15bace31195f8f27a29, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:ef:12:21:3c:95:0d:8f:ee:d5:40:a0:82:
                    fd:fd:e4:f3:a8:2d:04:8a:c7:ca:e4:4e:58:27:2d:
                    f4:f9:ec:3f:1b:9b:47:5c:86:66:20:0c:9b:9c:f6:
                    dd:3e:69:81:18:1d:5d:05:4e:43:fb:41:47:d7:89:
                    60:64:5c:e0:aa:27:aa:87:ab:9c:ed:ad:21:b6:22:
                    f9:19:00:67:63:6a:78:7a:ee:72:12:2a:3c:d5:47:
                    5c:db:23:2c:04:4e:fa:6c:75:8e:09:f8:02:e5:14:
                    81:f7:29:1f:ae:3c:45:b0:a7:ef:bb:eb:00:7f:81:
                    35:b0:44:01:ba:c9:96:a5:9a:bc:24:d2:45:a2:ee:
                    29:f3:5d:a3:ed:42:de:a9:ac:78:d3:bd:7b:c9:db:
                    f3:16:b2:ab:af:ae:a1:e2:0f:bc:77:a7:b1:8d:34:
                    64:70:c2:6f:40:7d:9f:ba:b8:9f:37:ad:57:d2:c0:
                    db:cc:46:b2:e5:22:ad:df:89:2f:15:50:a5:af:ae:
                    9f:7f:f6:2b:5d:8f:34:43:3b:00:d9:ad:e2:4d:f6:
                    d8:f6:b1:9b:b5:f8:dc:2e:5c:51:a5:7e:e9:93:8f:
                    a5:44:96:ad:24:66:26:94:fd:03:c2:13:38:bb:5f:
                    c3:e0:4a:61:19:62:63:24:9b:f7:de:df:9d:c0:75:
                    b5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:82:7F:89:D6:CC:AB:55:81:56:11:76:7B:92:66:97:83:80:9E:19
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/854cdc18-0507-4635-a2a7-cad1690f9b8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c0c::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:f4:7c:d4:85:56:9e:e6:fe:2a:5a:1a:e1:6d:b8:b0:7f:4a:
         5d:e8:7f:a4:da:fd:f5:03:35:a8:36:e5:d4:96:3f:4b:c5:e7:
         c4:05:93:e6:49:18:6c:55:de:1c:be:ff:d8:78:fb:1b:c8:56:
         b0:17:4b:7c:bb:94:d3:06:63:39:c0:92:bb:35:a0:09:3a:1b:
         1e:3f:76:26:d1:97:d0:e4:29:b4:12:1f:c5:62:f9:b8:90:14:
         a0:b6:39:48:c0:f2:c5:8f:ae:b0:de:5b:75:d9:e2:75:67:25:
         3f:3d:a6:cb:98:bb:12:0d:80:89:02:23:db:68:53:fb:e7:07:
         df:6d:1b:ec:98:cf:c5:1f:d8:df:a7:50:7f:ec:b6:a5:1f:78:
         c6:16:e3:18:2d:eb:ec:82:7b:c9:39:9e:4e:76:d1:02:00:5c:
         fe:58:4b:2a:a5:6b:07:a1:a1:ab:b7:af:6f:ab:fa:9f:ee:1e:
         49:f8:0a:e0:b2:19:78:a8:b3:52:a7:71:5c:9c:96:27:dc:a7:
         ea:cc:30:59:5e:45:d2:45:0b:1d:00:8a:fa:f9:ef:d4:5c:e5:
         95:c1:46:bd:31:c2:2c:ea:d1:01:97:ac:cd:f8:fe:8e:1f:c7:
         66:6e:c0:6d:ad:ba:16:2d:2d:05:79:9b:4f:57:70:06:ca:12:
         28:d8:fe:6d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUXmsOze0ZcTxGYJIAkHNKc/2VjjQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNzI3MDMwMDQzWhcNMjYxMDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiOWMyZDQwNTMwMGI3MmQ5OWM0NzE1N2E5NTUzMmFjZjRk
Y2QyYTA3YzhjYWYxNWJhY2UzMTE5NWY4ZjI3YTI5MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGv+8SITyVDY/u1UCggv395POoLQSKx8rkTlgnLfT57D8b
m0dchmYgDJuc9t0+aYEYHV0FTkP7QUfXiWBkXOCqJ6qHq5ztrSG2IvkZAGdjanh6
7nISKjzVR1zbIywETvpsdY4J+ALlFIH3KR+uPEWwp++76wB/gTWwRAG6yZalmrwk
0kWi7inzXaPtQt6prHjTvXvJ2/MWsquvrqHiD7x3p7GNNGRwwm9AfZ+6uJ83rVfS
wNvMRrLlIq3fiS8VUKWvrp9/9itdjzRDOwDZreJN9tj2sZu1+NwuXFGlfumTj6VE
lq0kZiaU/QPCEzi7X8PgSmEZYmMkm/fe353AdbVzAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUUYJ/idbMq1WBVhF2e5Jml4OAnhkwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzg1NGNkYzE4LTA1MDctNDYzNS1hMmE3LWNhZDE2OTBmOWI4Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzADAwwDQYJKoZIhvcNAQELBQADggEBAIL0fNSFVp7m/ipaGuFtuLB/
Sl3of6Ta/fUDNag25dSWP0vF58QFk+ZJGGxV3hy+/9h4+xvIVrAXS3y7lNMGYznA
krs1oAk6Gx4/dibRl9DkKbQSH8Vi+biQFKC2OUjA8sWPrrDeW3XZ4nVnJT89psuY
uxINgIkCI9toU/vnB99tG+yYz8Uf2N+nUH/stqUfeMYW4xgt6+yCe8k5nk520QIA
XP5YSyqlawehoau3r2+r+p/uHkn4CuCyGXios1KncVyclifcp+rMMFleRdJFCx0A
ivr579Rc5ZXBRr0xwizq0QGXrM34/o4fx2ZuwG2tuhYtLQV5m09XcAbKEijY/m0=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:20:34 2026 by rpki-client