Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9429af41-5ca8-4fc9-9b14-bf2a6ca525b6.roa
File:                     9429af41-5ca8-4fc9-9b14-bf2a6ca525b6.roa (raw, json)
Hash identifier:          5OiCs2mj7hWZ6cfuST6z/iXABadgTNkvX1/dVMrA9qk=
Subject key identifier:   F6:89:77:1F:7D:C4:3F:30:B6:E9:CE:0C:06:05:05:AF:74:01:90:A1
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       688DCBB1EC5CDDB68C8819C4869692F8EB27DCBD
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9429af41-5ca8-4fc9-9b14-bf2a6ca525b6.roa
Signing time:             Thu 14 May 2026 21:47:19 +0000
ROA not before:           Thu 14 May 2026 21:47:19 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:8380:1600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:8d:cb:b1:ec:5c:dd:b6:8c:88:19:c4:86:96:92:f8:eb:27:dc:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: May 14 21:47:19 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=f227014a0a6eb8ed99bf329e519aacce40348a8ca8612bf6e4837a8ae367e44e, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:5a:36:a2:44:44:66:ce:0e:46:30:6c:05:
                    7d:31:43:77:d8:9f:d3:e1:14:cb:28:91:59:37:3c:
                    21:6d:c3:13:de:1a:98:1e:e1:04:60:3c:a4:75:57:
                    8b:7a:56:ba:f8:3a:81:bd:fd:71:28:a8:ed:8c:96:
                    60:fd:c0:bd:d9:4f:20:fa:91:14:e6:d5:6e:4d:a5:
                    ec:b8:ce:49:a7:b3:3a:8c:4b:e0:43:a5:d4:ee:48:
                    f4:b8:a3:b3:56:81:4b:d1:c5:37:e5:ca:e2:fe:a4:
                    1c:b2:0d:bf:7a:c0:46:bc:fc:f0:de:70:57:f6:ca:
                    9a:53:ad:bc:d0:ae:a1:39:ec:7b:51:5e:1a:cf:5d:
                    1a:d2:ad:21:ff:dd:d9:1f:30:25:15:d8:39:87:7e:
                    31:fd:b6:73:c7:26:dc:e8:ac:11:e4:62:1c:dc:2d:
                    d5:9a:5a:ed:67:a7:aa:77:11:f5:09:b0:c5:50:e0:
                    66:5b:87:a2:a8:60:59:a6:13:f0:47:14:a8:ac:8c:
                    bb:60:93:9a:4a:a6:75:9e:e6:43:7e:51:5c:88:52:
                    2f:0c:75:22:89:97:19:1e:73:a9:9b:65:19:fc:0b:
                    fe:89:d8:5f:4b:50:d3:13:c8:70:16:af:fe:14:fd:
                    74:e4:8e:b6:b0:3e:ae:65:da:f1:52:d0:f8:dc:c2:
                    a4:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:89:77:1F:7D:C4:3F:30:B6:E9:CE:0C:06:05:05:AF:74:01:90:A1
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/9429af41-5ca8-4fc9-9b14-bf2a6ca525b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8380:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:d3:0f:cc:0c:05:a1:e1:78:02:f3:1a:98:3b:c3:c0:6a:91:
         71:9e:2f:7a:93:79:7c:6f:c1:89:db:ee:26:b0:82:ad:6c:b6:
         9c:e5:80:c5:53:93:d9:59:aa:20:49:73:05:dc:ae:e7:af:cf:
         f8:c6:33:08:32:0b:40:6e:00:d3:31:fa:6a:78:fe:03:66:5b:
         7f:a8:5e:b7:cd:5e:60:3d:c8:c5:9b:59:59:d7:51:f0:00:fe:
         4b:4d:2d:31:5f:a0:af:db:d6:67:34:d5:4b:5b:0a:02:52:b4:
         43:96:93:14:e6:13:65:bd:4b:f1:13:aa:90:83:62:33:28:db:
         e8:f5:50:50:5e:63:c6:e5:60:b8:a3:cc:d9:9c:ba:ba:6b:01:
         15:a1:19:7f:c8:8f:52:bd:c1:84:aa:79:20:40:b3:9b:4e:a1:
         6b:d5:eb:0c:e8:a3:ec:f2:49:01:b8:85:0e:fb:f9:ee:15:92:
         0f:b3:b9:fd:8a:c8:00:fc:09:5f:49:10:1e:10:11:89:6a:a6:
         4c:33:d3:71:2c:4a:32:55:ad:b2:e2:26:89:1a:37:87:8c:99:
         97:cd:e4:8b:f8:9f:a5:85:6e:2b:ce:27:b2:a9:2e:c3:ba:bc:
         e1:2b:e9:3d:3c:c6:dc:8d:4f:1b:cd:42:89:8e:1e:bb:3c:e5:
         d7:91:9e:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 22 16:04:30 2026 by rpki-client