Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bba8191b-5b5b-4515-a3ee-493cab66a2dd.roa
File:                     bba8191b-5b5b-4515-a3ee-493cab66a2dd.roa (raw, json)
Hash identifier:          RQdrUw6FKBYC0IuTtCXig1mWPWUupMxSlX8QjxSzt+8=
Subject key identifier:   F3:6F:6D:24:AD:E8:33:BE:F0:F1:8E:B9:24:8C:5B:0C:D3:E6:42:09
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       4EE276885E21E7694E2415E7DC1C8970390FC3F7
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bba8191b-5b5b-4515-a3ee-493cab66a2dd.roa
Signing time:             Sun 04 Oct 2026 00:30:14 +0000
ROA not before:           Sun 04 Oct 2026 00:30:14 +0000
ROA not after:            Sat 02 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2606:8140:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e2:76:88:5e:21:e7:69:4e:24:15:e7:dc:1c:89:70:39:0f:c3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Oct  4 00:30:14 2026 GMT
            Not After : Jan  2 23:59:59 2027 GMT
        Subject: serialNumber=650e41b895f6d8920cec071d9d76e0a4333714c7345a3e1f1492c2b3d68c730f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:2e:1f:35:f1:b0:29:b6:45:0a:7b:b0:6b:
                    d5:76:e2:61:0d:b2:7b:94:e7:be:e0:34:c2:15:37:
                    34:bb:b2:fd:d4:1e:d0:3b:be:67:5d:cd:46:db:e8:
                    f0:b1:c7:1d:7c:bc:c5:90:3c:47:1e:dc:4d:38:d7:
                    71:00:f7:31:3e:73:6b:b8:52:78:9e:ca:fa:3c:b2:
                    8a:55:29:07:27:85:3f:5b:a5:f9:93:9f:32:4a:55:
                    cc:00:30:2c:00:51:ac:19:75:9f:fb:be:c2:11:37:
                    f2:d2:d7:96:fe:07:ba:c4:b5:5c:a9:ad:e7:6a:72:
                    a3:9c:a2:c9:4d:ff:05:64:43:ed:74:68:98:8e:ad:
                    ab:5a:9b:bf:26:77:46:45:cc:d1:cd:29:42:e8:fe:
                    a3:b7:05:a2:a5:72:ad:58:bc:f1:a1:dd:07:eb:ec:
                    65:51:6e:7c:26:b9:c1:ed:97:7b:f7:46:52:e9:64:
                    83:f8:63:a2:22:47:8b:10:a0:b2:11:ec:0f:57:c0:
                    68:30:86:dd:c9:bb:af:b0:ab:05:a2:d0:7a:9b:b1:
                    0e:ee:30:5f:71:55:c6:aa:d9:02:42:73:7a:af:64:
                    eb:bf:b4:26:d0:5c:70:6b:36:2e:fb:61:ed:b6:f6:
                    4e:e7:06:11:e1:c4:6a:1b:c3:88:4a:55:8f:18:49:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6F:6D:24:AD:E8:33:BE:F0:F1:8E:B9:24:8C:5B:0C:D3:E6:42:09
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bba8191b-5b5b-4515-a3ee-493cab66a2dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:47:db:e0:c6:0d:42:18:7c:5d:c1:64:41:1e:28:4c:0d:da:
         9f:cd:7f:75:0f:7d:c8:9d:14:7e:8f:09:cc:82:9e:77:01:55:
         a9:d9:64:91:fd:72:d5:25:8e:c6:17:c5:b6:c1:a4:5d:b6:74:
         00:a6:9c:fb:58:6e:99:c4:72:74:af:b5:38:96:9d:6c:e2:4d:
         57:ed:60:45:df:cb:3f:1b:3f:52:4f:39:18:00:4f:0b:1a:f0:
         e0:d2:99:d0:f3:c6:e0:79:9c:5f:84:e1:2d:bf:a9:01:ac:fa:
         c8:32:08:34:22:ef:93:fb:5f:7c:a2:6c:49:eb:a4:30:73:0a:
         25:c5:57:8f:50:ab:94:a8:c2:6d:63:8a:9f:d3:e3:21:73:21:
         9e:00:a7:7e:97:14:eb:ec:23:a5:f0:68:a9:da:c2:f4:77:cf:
         db:8f:16:0b:65:e2:20:7d:13:7e:83:76:24:06:36:d3:f5:ac:
         cc:2d:a4:c1:46:cc:31:8c:f1:d9:2b:4d:4b:a8:aa:87:1b:bb:
         2c:06:4b:9c:8c:7a:df:48:d2:97:90:34:76:86:b9:11:d8:55:
         15:51:f9:55:90:7f:68:64:f0:95:74:33:8e:02:e0:82:f8:f0:
         46:b4:03:e8:40:12:50:89:d1:e4:ed:7f:c1:6f:42:82:87:a1:
         c4:0e:67:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:41:23 2026 by rpki-client