Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e18a102d-b28e-4f5c-bcf3-44af2c556428.roa
File:                     e18a102d-b28e-4f5c-bcf3-44af2c556428.roa (raw, json)
Hash identifier:          +9uTSgfezmSglRP8TWpjyLHtUFV+lORulkeNua95wjw=
Subject key identifier:   57:FB:E9:6E:FE:98:45:7E:A6:04:C8:69:13:93:D9:33:2D:EB:BA:BF
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       78AB26B0AC4761EC1F308267528B8CC880155352
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e18a102d-b28e-4f5c-bcf3-44af2c556428.roa
Signing time:             Thu 15 Oct 2026 02:50:08 +0000
ROA not before:           Thu 15 Oct 2026 02:50:08 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     8987
IP address blocks:        173.82.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ab:26:b0:ac:47:61:ec:1f:30:82:67:52:8b:8c:c8:80:15:53:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 15 02:50:08 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=5eb6a878926c496846105b7b04efe14c50e3954c80f932495f1655816e8a57ff, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:ee:23:59:51:7b:e7:2d:bd:29:3a:02:92:
                    84:93:cb:8b:ac:f0:b0:6e:80:58:4c:7b:6a:64:44:
                    98:95:97:f7:81:f0:7e:b1:42:92:3a:bb:b4:18:64:
                    42:a6:e0:9b:fb:67:30:31:69:00:30:f4:3c:30:79:
                    7b:5e:14:f4:97:55:03:05:76:36:ce:e0:f9:1c:de:
                    6a:a1:17:53:e3:a7:f5:ce:f7:26:aa:7f:64:d0:c8:
                    5d:f9:be:f7:30:b4:fe:b0:41:ca:7c:44:67:25:99:
                    11:58:e3:b0:37:c9:43:94:67:e0:33:d5:3e:43:94:
                    48:8c:11:ce:ef:49:d0:e0:fa:44:91:4e:d4:1d:27:
                    fa:77:f2:af:71:cb:c0:11:3c:d5:1d:17:78:0a:37:
                    13:6c:cf:17:80:65:6b:59:3a:40:40:11:b6:dd:b0:
                    ef:0f:19:cb:56:4d:21:45:aa:70:6e:dd:17:37:6e:
                    d8:32:0e:01:b3:54:03:79:af:2f:6a:33:6c:09:d5:
                    06:4f:68:72:51:ba:41:9a:a4:07:63:92:25:2f:97:
                    49:7f:a1:90:aa:46:a1:2b:bf:cf:dd:dc:68:43:04:
                    2f:e2:61:77:ea:f8:c2:da:4f:95:27:cd:65:57:d7:
                    15:62:08:e8:f1:ff:5b:81:48:70:4d:ba:13:98:3d:
                    78:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FB:E9:6E:FE:98:45:7E:A6:04:C8:69:13:93:D9:33:2D:EB:BA:BF
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e18a102d-b28e-4f5c-bcf3-44af2c556428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:8a:5a:17:73:6c:34:fe:8a:33:b8:83:73:c1:b6:8d:78:86:
         d2:74:d2:f2:e4:19:94:d0:c6:bb:e0:48:21:1c:3a:88:58:c3:
         a5:49:45:f4:85:48:d0:f4:79:61:ef:bd:6d:ed:dd:31:51:29:
         a6:17:76:0e:06:c4:a8:97:66:97:80:a4:5a:57:a6:d8:6e:ce:
         e4:c1:6b:f5:6f:c8:b7:c2:c3:1b:2f:ce:d8:d8:c0:68:cb:48:
         ec:52:60:0c:11:55:6e:56:7d:0d:75:ee:c8:65:33:9b:06:f0:
         e5:57:8b:bd:05:a5:35:6f:37:71:97:78:ff:c5:66:b3:99:a1:
         9d:16:5c:58:64:9c:ea:b8:6f:99:3d:a4:6f:7b:32:51:6d:4b:
         98:e3:15:b9:0a:5c:8f:f5:d3:a0:af:85:52:97:3a:d2:c7:87:
         69:9a:b3:c1:b5:ed:3b:ab:5d:5f:87:b0:1d:e0:e4:ed:e9:09:
         a9:de:16:ba:4b:cb:bf:d7:38:67:0a:89:59:52:33:50:20:d8:
         97:2a:83:7d:73:77:b3:b9:e8:a9:51:f6:30:4f:5c:c4:96:c8:
         0d:98:d6:5d:c1:60:cf:60:83:a9:ab:a9:fd:5c:4b:2b:d2:8a:
         6e:c2:f9:34:07:80:ea:fb:aa:7d:0b:db:cb:82:9c:de:4a:5c:
         06:9f:29:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 01:08:54 2026 by rpki-client