Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e3c66b01-c8b4-4cf4-a54f-8356d3d956ed.roa
File:                     e3c66b01-c8b4-4cf4-a54f-8356d3d956ed.roa (raw, json)
Hash identifier:          HITHFk71NS/U3GPn+pN34q7hezfHA4G0SkChg9ErY9U=
Subject key identifier:   B4:EB:1B:6C:CF:89:59:38:01:0F:10:CD:25:EC:FD:A8:E8:28:56:7C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5AB1F9AC1C0C0532B9F9751F019370D6AEC15367
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e3c66b01-c8b4-4cf4-a54f-8356d3d956ed.roa
Signing time:             Thu 15 Oct 2026 03:07:35 +0000
ROA not before:           Thu 15 Oct 2026 03:07:35 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:c0f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b1:f9:ac:1c:0c:05:32:b9:f9:75:1f:01:93:70:d6:ae:c1:53:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 15 03:07:35 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=e3a9fe16c16f3028e28826e7abd989e2852b4165173030076b8fd8b05f22d15c, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:b7:0b:2a:ad:fe:01:c6:07:f2:7f:39:26:
                    79:1c:25:54:71:d2:03:70:be:a2:60:90:b8:d9:62:
                    dc:e1:fe:ec:03:39:8f:83:3d:93:e9:41:c3:c4:c9:
                    3c:6d:61:60:2c:c5:2d:0d:8f:6d:c2:29:09:3a:59:
                    f2:e7:51:e6:12:10:20:d6:62:54:c4:44:96:59:50:
                    e6:d4:9a:46:e8:19:c4:c2:16:0d:3e:5e:71:5a:95:
                    c4:c8:1b:91:ce:c2:91:b3:15:b3:e6:16:21:64:88:
                    92:83:4b:66:43:19:51:5c:cc:f7:f9:10:d0:5c:26:
                    5b:66:3d:e6:c0:cc:d6:9b:5b:83:bf:cb:6a:98:23:
                    35:c6:37:ae:c1:4d:b2:01:c9:f6:5f:62:d2:fd:0a:
                    a5:3e:d0:be:12:82:76:c6:d9:7e:d1:6c:07:af:91:
                    3f:72:1e:ca:94:28:ae:24:07:b3:a9:06:42:6b:e9:
                    ac:e8:8f:37:41:5a:3c:5e:a7:cf:31:c1:2b:ad:81:
                    a5:74:9f:f0:3d:a9:0d:21:99:57:9d:78:b1:29:5c:
                    5a:4a:65:dc:91:c6:3f:bc:de:cb:9d:3a:bf:96:13:
                    3e:eb:fc:8a:f8:f9:1a:f2:6d:a2:81:0f:24:53:bc:
                    5c:07:86:ed:a0:a3:c2:8c:c4:b0:db:cb:fe:92:c1:
                    2d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EB:1B:6C:CF:89:59:38:01:0F:10:CD:25:EC:FD:A8:E8:28:56:7C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e3c66b01-c8b4-4cf4-a54f-8356d3d956ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c0f::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:40:23:46:3c:1e:75:23:ba:7e:d8:0e:5b:34:73:c1:fe:07:
         cf:1a:5c:39:a8:e6:23:7f:fd:be:26:e3:b7:5c:35:af:c9:f1:
         09:ef:86:c1:f5:59:74:6f:28:73:0b:a0:b3:d7:1a:0e:1d:48:
         a4:32:55:e5:9d:95:5a:fa:c6:cd:6f:d0:b7:02:bc:11:7b:6b:
         be:63:36:6a:80:e4:1c:ea:34:62:93:a9:0e:f4:f9:0e:65:9b:
         5f:3e:f0:37:32:3b:ea:63:77:80:72:be:fb:57:30:af:92:d5:
         a3:3b:1d:69:05:ca:5d:3a:98:2e:50:63:31:63:72:ca:64:db:
         42:b4:39:a5:23:ff:51:6b:12:04:9d:14:ca:cf:e2:72:c3:d9:
         10:95:07:3b:03:89:6f:c2:21:5c:c2:29:9c:77:04:7d:78:09:
         28:d1:0e:02:61:3d:d9:c8:77:75:77:28:2f:67:2b:f7:41:7c:
         d4:20:85:a1:fd:92:79:90:39:55:a4:1d:eb:aa:87:a2:6f:84:
         fc:ab:c0:51:3a:0e:2a:f2:fc:13:98:0e:51:bb:a8:a7:1d:c8:
         c0:76:e7:0d:f3:40:37:b3:94:05:71:37:35:ff:8c:79:78:95:
         24:77:21:41:24:6f:ea:fe:a3:cc:5c:35:02:2f:86:d5:a8:6d:
         45:2b:5c:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:14:31 2026 by rpki-client