Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fc2e9df4-0643-4bfc-b528-6948594de8d8.roa
File:                     fc2e9df4-0643-4bfc-b528-6948594de8d8.roa (raw, json)
Hash identifier:          6tju1uem8vSR8eXwq0l8JIQ59a5g6pWAAMoHi91xlMc=
Subject key identifier:   DB:9D:58:B9:C8:91:C1:AB:57:3A:86:62:BD:9A:2A:C8:75:D1:F0:3C
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       3962B1A5440CE461EB73A58905BDE14CD5C7C438
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fc2e9df4-0643-4bfc-b528-6948594de8d8.roa
Signing time:             Thu 15 Oct 2026 02:50:09 +0000
ROA not before:           Thu 15 Oct 2026 02:50:09 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     21664
IP address blocks:        173.82.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:62:b1:a5:44:0c:e4:61:eb:73:a5:89:05:bd:e1:4c:d5:c7:c4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 15 02:50:09 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=3eb86ac82d8df77d769a95256f06993e36dc33352b286ab5d22f904c8e278ae2, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:e0:3d:ac:bd:73:f6:90:71:b1:55:3c:26:
                    7f:e5:e3:48:29:4c:ab:13:97:f4:0f:3e:4c:01:76:
                    f0:4e:ed:47:a1:59:1f:ab:2d:4b:44:0f:de:94:d4:
                    52:66:d0:0e:49:e9:d9:6f:84:c8:22:ab:e5:d6:e4:
                    0c:82:93:80:22:b2:c5:90:ca:b0:19:e6:4e:e8:e7:
                    fe:cb:05:aa:5a:78:41:15:dc:3f:bd:4e:63:f0:7f:
                    6d:ff:45:ab:84:a9:2e:e2:6c:c2:f0:34:71:5b:8c:
                    dc:2e:4d:fe:81:55:8f:00:74:2e:43:7a:14:59:05:
                    95:c3:6a:33:18:72:39:5d:9f:4e:40:d9:24:5d:32:
                    31:a0:34:71:a4:0c:26:bd:d8:76:5a:2f:74:db:2d:
                    0b:f7:71:c9:5d:b5:33:29:d9:07:7a:ca:b7:f2:58:
                    cb:a2:ba:45:bb:d8:48:bf:fa:42:0d:80:85:14:75:
                    d8:47:66:31:84:9c:19:a3:6f:9d:9d:6f:04:40:2b:
                    ac:e4:86:82:5b:06:1b:f6:99:67:71:c6:c2:cc:dc:
                    64:cc:e1:b8:66:ff:32:44:b9:18:28:73:25:ee:a1:
                    1f:af:b8:45:f7:ba:1d:f6:60:74:92:e4:5c:be:bd:
                    58:40:23:e4:c8:26:50:90:72:73:61:d0:fa:4f:44:
                    63:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9D:58:B9:C8:91:C1:AB:57:3A:86:62:BD:9A:2A:C8:75:D1:F0:3C
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fc2e9df4-0643-4bfc-b528-6948594de8d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:1f:26:a7:d1:67:ff:b0:39:2a:1b:66:a3:c5:50:e2:f8:
         1d:74:c9:d2:21:a5:e5:15:f7:fa:58:99:9a:68:9c:06:f4:e6:
         2a:54:74:20:51:ef:ac:04:77:d4:39:d2:fa:b3:85:8b:c8:6a:
         74:88:7b:ea:53:eb:2a:0b:eb:16:b0:0d:ba:f9:80:69:db:2e:
         f2:d7:c1:5c:a2:db:ef:81:25:6b:a9:7b:b5:61:fe:ed:db:fc:
         7a:91:b9:e3:ff:cb:4a:0b:86:9f:48:bd:2f:30:da:43:95:7f:
         3e:08:6e:c9:a1:60:78:99:ed:3d:c3:c5:eb:54:87:98:6b:02:
         8f:f9:fb:94:82:b0:3d:a5:5f:0e:ae:e9:b1:a6:6d:e5:df:00:
         89:f6:5e:80:e4:d9:c1:cf:59:b9:a8:9b:6e:ea:0a:35:e4:c9:
         d0:26:e6:9e:43:1c:db:d6:89:e0:25:4d:88:09:25:27:83:2f:
         bc:cc:0f:ba:56:2e:f7:35:9e:0c:38:dd:c2:5e:f8:66:8b:ce:
         ad:e8:41:da:df:78:35:26:f3:2d:43:45:a5:58:6a:46:3a:da:
         dd:4f:a1:cb:9c:60:62:31:ea:4e:d1:94:3b:91:01:cb:40:50:
         f9:de:6e:47:7f:98:db:85:a2:3f:2f:54:fa:e4:c9:3c:d8:88:
         f7:0e:ed:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:59:10 2026 by rpki-client