Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c9548f2a-ae67-448c-9ed7-55124dbff6cc.roa
File:                     c9548f2a-ae67-448c-9ed7-55124dbff6cc.roa (raw, json)
Hash identifier:          zHPZMp27DE+p6Ce6qOK5E3d3fDO0bmRfoRg7xJiY8fY=
Subject key identifier:   0D:93:58:D3:8F:1C:0C:8C:F8:E1:31:68:7B:58:BD:3C:42:74:E5:A0
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       7217AC148A8B11FDC3BFE7486A1F77AAB9511693
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c9548f2a-ae67-448c-9ed7-55124dbff6cc.roa
Signing time:             Sun 02 Aug 2026 00:00:22 +0000
ROA not before:           Sun 02 Aug 2026 00:00:22 +0000
ROA not after:            Sat 31 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:8380:c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:17:ac:14:8a:8b:11:fd:c3:bf:e7:48:6a:1f:77:aa:b9:51:16:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: Aug  2 00:00:22 2026 GMT
            Not After : Oct 31 23:59:59 2026 GMT
        Subject: serialNumber=063243561538609964aa99494b983e2cc971f3e76e4fd23b100c941c88a5ebea, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:f0:46:d7:e7:97:3d:b8:1b:24:34:b3:a1:
                    74:c1:48:aa:17:9d:01:b4:b4:73:6f:89:06:93:a9:
                    fc:c3:3c:24:7a:9f:9d:03:ce:47:23:c0:f4:bb:b2:
                    38:b2:84:a4:26:18:87:5b:43:ab:b5:cf:2f:fc:f5:
                    4d:a7:c1:42:0f:55:dd:3a:bc:26:d2:04:55:3c:0d:
                    0a:18:76:09:9d:9c:c5:e9:84:9d:9d:e2:47:a8:ac:
                    52:de:a3:fa:24:b3:6f:f3:4d:c7:83:49:ce:40:8e:
                    81:aa:54:00:93:f4:59:90:68:ca:47:73:09:52:29:
                    f0:bb:85:e6:c4:80:13:a2:5b:9b:65:0a:44:1c:70:
                    5e:7b:5d:2a:3f:af:80:d1:e7:25:ed:1f:f5:85:55:
                    f7:c5:59:99:57:13:73:6b:a0:6f:78:1b:e4:22:bb:
                    30:7b:b2:b3:57:89:5b:84:5c:f0:c4:6a:f6:09:a2:
                    35:b5:67:a7:79:bd:35:e9:8e:05:9f:7b:7f:9d:ec:
                    c3:a3:6c:f5:33:eb:71:cc:ac:ee:d8:8f:97:d5:8a:
                    97:63:0a:23:42:d6:ab:1c:a3:67:7a:e6:9f:46:ae:
                    ab:86:21:32:c9:51:fd:f2:78:01:0f:d2:89:af:f4:
                    fb:58:7b:64:a1:be:bd:fb:cc:ab:43:ac:a4:87:37:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:93:58:D3:8F:1C:0C:8C:F8:E1:31:68:7B:58:BD:3C:42:74:E5:A0
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c9548f2a-ae67-448c-9ed7-55124dbff6cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8380:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:dd:52:69:0d:71:d9:04:29:e1:52:df:54:15:ca:c5:b2:b7:
         74:10:97:56:b5:0e:d9:49:b9:c6:53:3a:73:3b:b7:4f:ff:b8:
         94:59:fd:61:ea:6d:73:ec:a4:6e:86:d1:d9:2f:9e:88:48:89:
         f3:b4:82:3a:37:2e:11:da:1f:26:7e:a2:1d:e3:08:09:fc:61:
         c0:df:10:e0:4c:24:e5:24:31:06:ca:4f:94:eb:2d:6d:e4:63:
         0a:d3:5d:d3:ef:dc:03:59:35:61:e9:54:84:7b:b8:cb:0e:29:
         cd:75:90:a2:97:ce:f4:c2:ff:a2:d1:58:07:fc:34:39:73:22:
         e0:fd:d3:0c:1c:e1:fb:83:bf:3c:70:84:ca:8e:5b:ac:2a:5a:
         83:47:65:8d:ea:72:43:e8:a5:04:1d:bb:68:a0:4f:85:6a:2b:
         52:93:4a:c1:69:eb:ce:e1:1e:f1:68:43:b1:74:42:83:76:2a:
         5a:74:35:cd:02:e1:45:fc:69:68:71:4a:d9:28:15:e9:74:30:
         86:96:f6:c6:94:d4:e2:89:a7:b3:14:3c:45:31:83:3c:ed:49:
         5a:83:1f:a8:ae:eb:26:8f:b4:3e:a0:64:e0:08:0b:77:73:e8:
         29:00:66:bc:6d:d4:63:17:a8:9a:4e:ec:e0:f8:c4:bb:1c:34:
         7f:78:7b:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:35 2026 by rpki-client