Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/61d0f0de-c001-4ed4-8fa9-ee3d8430599c.roa
File:                     61d0f0de-c001-4ed4-8fa9-ee3d8430599c.roa (raw, json)
Hash identifier:          2eLti85eFH+kEnYKVOX/N/S04g/Il+8njJgYVV/ivrc=
Subject key identifier:   31:84:E4:28:83:8B:9B:19:64:96:16:44:0E:7E:61:3C:68:7D:84:0A
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       311CD6444E9D4B52983B2349B5D0E91B1185CAF8
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/61d0f0de-c001-4ed4-8fa9-ee3d8430599c.roa
Signing time:             Mon 17 Aug 2026 00:00:04 +0000
ROA not before:           Mon 17 Aug 2026 00:00:04 +0000
ROA not after:            Sun 15 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:8380:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1c:d6:44:4e:9d:4b:52:98:3b:23:49:b5:d0:e9:1b:11:85:ca:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Aug 17 00:00:04 2026 GMT
            Not After : Nov 15 23:59:59 2026 GMT
        Subject: serialNumber=fbfd5a1a4bb0689795fc8a8f6f4bc48bc9f25d2594e0706d7254c37f52686a1d, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:db:8c:99:da:b5:28:53:2a:0f:53:64:cd:
                    72:5c:e9:ab:4f:31:6b:cb:4c:6e:ed:d6:0c:4c:a0:
                    55:50:88:c1:8e:cc:35:52:cc:e9:c6:c4:bd:08:60:
                    a1:80:19:3c:c0:6d:36:3c:5a:28:c3:70:e9:5f:39:
                    0d:e2:28:ae:2d:78:9c:a8:50:d9:56:30:99:5d:79:
                    2c:ee:31:11:29:03:82:49:f3:6c:14:b0:ae:b1:42:
                    7e:72:e8:47:ca:a5:21:4c:cf:bf:96:04:91:11:df:
                    35:f5:86:6d:4e:08:aa:89:5c:e0:78:4f:63:08:f6:
                    02:8a:f4:ee:66:e6:22:cf:f8:c3:67:87:21:aa:13:
                    b6:5f:36:5f:a2:3a:f7:66:f3:74:51:71:b9:f0:ee:
                    7f:01:8c:34:49:0e:e0:77:8b:e6:c2:f5:75:a7:f0:
                    84:62:8c:8a:6e:f8:59:a6:75:21:33:70:82:be:c8:
                    b9:ef:f8:a9:bf:0d:4b:9a:23:6b:0d:e1:02:4d:7b:
                    81:14:32:00:06:55:a3:7a:c3:b9:0d:2a:80:a0:b0:
                    80:c6:0a:96:e9:27:b6:cb:95:a6:92:7b:43:52:b7:
                    2b:46:2e:92:68:c1:ef:ef:66:d9:6c:dc:24:1e:2e:
                    75:9a:db:ab:3d:96:50:80:45:bc:f0:47:b6:93:32:
                    98:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:84:E4:28:83:8B:9B:19:64:96:16:44:0E:7E:61:3C:68:7D:84:0A
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/61d0f0de-c001-4ed4-8fa9-ee3d8430599c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8380:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:cf:c0:cb:a4:7b:a2:5e:36:9e:e6:67:41:31:f4:ca:c3:d7:
         65:2c:fa:c3:0f:c9:f1:e0:fa:96:d7:23:84:4e:d2:99:be:b5:
         5a:b4:a2:3e:d3:65:d7:15:9b:96:74:df:d2:c6:65:d1:be:4c:
         e9:8a:45:fd:0a:05:0e:e6:df:6f:21:5d:b8:86:6f:77:41:f2:
         cb:1e:7e:cb:33:85:bd:1b:7c:9b:6b:29:eb:50:37:5f:09:ff:
         4b:aa:da:0d:a7:52:df:1c:1f:fa:41:39:d0:23:71:1a:06:f0:
         e0:5c:c7:37:ed:b8:31:ff:18:39:a5:ce:7d:87:c0:f8:d5:9e:
         5f:8a:b2:46:a5:87:67:c9:77:54:93:75:b3:eb:56:9b:dc:7e:
         49:8d:8c:5c:1e:51:7d:dd:fc:a7:99:f0:07:9b:cc:a2:2c:85:
         ad:44:96:2e:6a:a8:5c:40:d9:88:a6:a7:37:0d:3d:e8:4d:01:
         fd:1d:e1:bd:1a:3e:7d:b2:0d:c5:2c:53:95:67:7d:52:90:3d:
         47:11:ca:65:52:0f:8c:fd:ed:36:ac:a1:8c:dd:0f:42:66:e8:
         5b:d7:ed:f3:ed:5f:ec:c1:ea:ef:a3:a4:1e:e4:5a:67:86:c9:
         68:0d:33:82:e2:98:f7:2c:d8:f0:e7:94:84:34:4c:97:8b:79:
         cd:3c:91:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:33 2026 by rpki-client