Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/965e9a15-e7a7-4ff3-9f9f-747ffcbcda73.roa
File:                     965e9a15-e7a7-4ff3-9f9f-747ffcbcda73.roa (raw, json)
Hash identifier:          E5d0GWpMqO4lIpBobOcbA/zR1uvscVKh3NKAoHUmNjs=
Subject key identifier:   49:98:F5:02:B7:BD:74:42:79:CB:DF:49:71:89:32:49:0C:B7:F4:E7
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       030220266225013189B5A924A332B6674FF3B875
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/965e9a15-e7a7-4ff3-9f9f-747ffcbcda73.roa
Signing time:             Sun 02 Aug 2026 00:00:13 +0000
ROA not before:           Sun 02 Aug 2026 00:00:13 +0000
ROA not after:            Sat 31 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:8380:1900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:02:20:26:62:25:01:31:89:b5:a9:24:a3:32:b6:67:4f:f3:b8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Aug  2 00:00:13 2026 GMT
            Not After : Oct 31 23:59:59 2026 GMT
        Subject: serialNumber=9f6a440469ac3243060d4fb6ff935354ba908bcc44e985f63e1d1145e4556b32, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2b:7c:38:35:21:98:5d:43:f5:df:97:37:7c:
                    b5:6c:54:35:b6:82:35:cb:34:fd:96:0f:7e:49:38:
                    fc:d3:a9:0e:a2:b6:d7:94:10:e8:04:1c:b1:ce:1a:
                    a4:c4:c6:62:78:36:a8:7f:08:b5:d8:37:ad:cd:5a:
                    ef:1e:b5:95:55:1a:7a:17:e7:3c:b0:84:dd:cb:3a:
                    a4:0f:a2:03:33:8e:cc:84:0e:d1:87:47:0b:c0:b5:
                    98:10:12:61:6f:ba:72:82:8c:f2:36:72:71:4a:d5:
                    c8:41:91:da:4a:74:22:58:8b:ca:cd:3d:c4:a6:e1:
                    c4:ba:46:42:b3:a8:6e:8a:2c:5f:0d:e5:86:7d:95:
                    16:89:90:13:41:14:c7:5a:06:26:36:f5:13:2e:75:
                    85:bf:26:8a:46:83:09:42:66:37:71:c6:21:ed:b2:
                    9c:df:91:ed:3a:ab:5f:bb:3d:f7:1d:2f:6b:17:5f:
                    86:21:71:95:3e:9a:03:14:44:8f:24:a6:85:77:f2:
                    9a:35:dc:4c:49:2c:11:2a:c8:43:ad:b5:84:bd:02:
                    3a:35:9f:47:11:2a:10:4c:14:ae:13:6b:bd:88:84:
                    53:c7:4d:48:0b:34:a6:f3:17:5d:5a:9d:08:f8:b4:
                    16:93:2e:4c:1b:b0:8e:64:b1:83:52:c2:ec:19:64:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:98:F5:02:B7:BD:74:42:79:CB:DF:49:71:89:32:49:0C:B7:F4:E7
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/965e9a15-e7a7-4ff3-9f9f-747ffcbcda73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8380:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:29:8d:41:3b:12:6f:db:da:e3:27:a8:52:e7:00:23:16:e5:
         13:84:01:5f:51:f1:69:24:4e:e8:48:2f:2c:ff:5a:f7:5b:05:
         7c:d7:f8:5b:ac:fa:6d:e1:07:fc:6d:23:50:aa:56:a1:60:bc:
         f1:2f:97:69:df:98:c2:c6:3c:a0:27:e4:7e:ef:71:a5:98:0d:
         68:9e:0c:b5:d6:13:23:89:89:74:b0:ef:e2:65:08:d0:ef:9b:
         57:89:f9:27:b5:d9:57:ae:61:7e:bf:cb:5d:9e:6f:e9:a6:ca:
         e3:b9:33:63:81:18:80:fa:3d:2c:36:16:01:37:bf:3d:ba:41:
         92:1d:f2:05:fd:59:41:65:ad:e4:35:2f:35:ea:b9:dd:0e:1b:
         8e:9f:62:d0:f6:97:8e:26:91:36:d0:b9:0c:de:2b:fd:88:a0:
         97:c3:75:3c:fb:88:a1:26:ca:4f:09:85:1e:66:98:63:36:57:
         2b:7e:42:47:3c:43:92:b4:bf:70:41:86:94:8c:97:2d:6a:92:
         fd:2a:13:6e:e8:f4:f5:aa:aa:d0:e3:c3:f1:70:d7:f6:fa:70:
         f8:2b:14:08:fd:55:40:00:7e:b5:fa:d1:71:78:06:0a:1e:a9:
         96:09:a0:82:9f:5b:a9:96:5e:2d:9b:b4:1a:de:6a:e6:f2:eb:
         60:32:5d:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:40 2026 by rpki-client