Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa
File:                     7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (raw, json)
Hash identifier:          WDU4j0AOaXQw1JFbi5U7LiKyIS6dMUe9nCtuv1+lG6c=
Subject key identifier:   53:B0:D1:51:68:B2:77:B3:2D:5E:E2:50:FB:A1:F0:94:FA:92:C8:D4
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       18CDA5077EF1DB041815015AC6AC45C610ABADF3
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa
Signing time:             Mon 27 Jul 2026 00:00:37 +0000
ROA not before:           Mon 27 Jul 2026 00:00:37 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     62785
IP address blocks:        2605:b140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cd:a5:07:7e:f1:db:04:18:15:01:5a:c6:ac:45:c6:10:ab:ad:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Jul 27 00:00:37 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=da0dabd912942bf20c22abfc8c9b8a967fe24c92505ae41559af26668940ae22, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:5f:80:b8:c4:f0:0e:bf:d6:02:9b:b7:a4:
                    8e:8e:46:76:c0:cc:71:a3:f7:17:b8:88:47:b7:5d:
                    9c:cd:42:dc:eb:6f:55:7b:c2:7b:f3:eb:0b:2e:ea:
                    be:5d:3f:93:c3:1d:77:f1:b1:33:ac:30:5e:24:42:
                    82:43:89:ca:d2:31:9b:fd:8c:a4:c7:6f:89:8f:a7:
                    63:da:20:02:5d:a2:13:8e:8d:42:cd:2f:c0:ca:a4:
                    c4:e9:c1:63:eb:f9:f0:f6:3c:6e:66:1f:cb:82:2f:
                    92:cf:f2:32:22:4e:de:a4:5b:05:47:be:9c:93:dc:
                    fa:7c:6f:e1:22:28:6c:fd:b9:72:b7:0a:09:6b:e2:
                    16:61:43:f6:fc:79:88:90:be:ff:b3:e9:e7:4f:1b:
                    d0:6e:c1:11:5e:2d:a8:b1:9b:35:1d:cf:96:16:fb:
                    86:29:8b:e9:f4:77:8d:0f:76:02:1f:40:c0:cf:12:
                    00:66:1f:4f:c4:fe:8b:bb:e7:46:f1:c7:79:4c:d1:
                    46:07:80:a1:57:61:7e:cc:83:a2:b2:ce:a6:7c:3f:
                    dc:17:f3:5b:b5:23:7e:58:30:68:2e:21:e0:b3:20:
                    08:d3:cf:8d:dd:7b:0b:56:18:11:1f:ba:b9:a4:69:
                    b5:d5:37:c0:5d:0a:4a:dc:a6:9f:c1:da:9c:e0:ef:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B0:D1:51:68:B2:77:B3:2D:5E:E2:50:FB:A1:F0:94:FA:92:C8:D4
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/7e5e4204-8bcf-499a-999a-8f190e991cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:b140::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:de:44:c5:73:f6:58:6f:cb:fd:41:5c:9e:b7:07:09:0f:0f:
         22:9c:fa:ce:5f:19:27:c2:76:99:05:68:2d:f6:d0:5f:38:d3:
         d0:5b:a7:28:d3:1f:42:52:cc:d4:21:fe:62:eb:e7:af:2c:a3:
         61:ee:df:34:33:33:df:c3:48:47:98:fd:ef:61:d8:02:5b:16:
         e9:e6:ad:09:1e:a3:8a:97:5f:f0:51:27:f2:bd:6b:1b:f7:aa:
         13:94:dd:90:3c:35:8a:41:36:19:fd:d1:a8:5c:23:14:77:ab:
         92:c9:0a:41:58:9b:2f:46:4c:6d:fc:09:4d:87:07:bf:5f:e2:
         64:16:8c:39:c7:ff:2c:63:26:00:de:82:55:4e:05:2b:d3:8e:
         bc:d3:34:b4:66:b6:e1:7e:b2:f5:bc:67:ad:ae:cf:99:e8:2d:
         73:f8:54:d6:c7:7b:28:ff:27:c4:be:25:30:5b:38:d7:72:26:
         7f:59:16:f1:f0:98:10:13:b3:e9:8e:4c:5f:d4:ce:bf:51:27:
         aa:0b:19:20:57:2b:3d:97:41:7e:ff:6a:4f:cd:7c:b4:79:af:
         35:82:84:e7:a0:3c:67:2a:de:3a:7c:de:a5:fe:46:c5:53:f8:
         2f:04:24:68:43:37:40:a9:01:39:ed:6d:50:bd:1f:dd:1c:cb:
         f8:61:54:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:22:40 2026 by rpki-client