Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa
File:                     1311a895-43fc-49eb-996b-222d911710a4.roa (raw, json)
Hash identifier:          MCScu7yUujy1X8LFDT8Hnyu+GA2thvWXCVabGAz9h5I=
Subject key identifier:   51:25:D9:A4:29:7C:09:7B:25:A1:EE:F2:0F:59:2B:C0:BC:F8:1C:B8
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       70B5846C61D707A71616B970C27FAF3048DE6654
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa
Signing time:             Sun 11 Oct 2026 14:50:07 +0000
ROA not before:           Sun 11 Oct 2026 14:50:07 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b5:84:6c:61:d7:07:a7:16:16:b9:70:c2:7f:af:30:48:de:66:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 11 14:50:07 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=fe33076752cd21fde0c1196cffcd93b0de033744dfdf9ebdb72b52c70d6bc2c1, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:b3:b3:55:53:f7:b2:dc:04:8e:bd:0d:f5:
                    b7:a2:ea:5f:d1:0a:e0:ec:1f:7b:2e:87:be:31:7b:
                    c1:69:1c:22:60:65:ea:71:11:e6:63:5a:dd:1a:3e:
                    e9:7b:d6:d2:7f:d3:b1:d0:bb:89:e6:8d:e5:c7:a9:
                    59:1e:73:7c:7e:83:e3:bb:58:f9:fc:79:84:34:fe:
                    1a:bf:41:ae:57:ba:f0:b3:20:14:21:9e:31:e2:fa:
                    f3:f3:1d:12:c4:08:ae:f0:d9:f7:05:cb:bf:70:af:
                    b3:8e:41:34:d6:56:f7:2d:c2:cd:90:3e:a9:58:eb:
                    eb:ed:63:cd:bb:17:6a:6e:c4:1f:b0:69:2d:70:93:
                    03:51:40:f5:89:6e:5b:e2:6d:82:47:bb:9c:eb:cb:
                    e9:f3:ba:4b:a2:27:12:4a:a8:71:fe:d8:97:04:81:
                    bc:26:79:a6:91:db:55:32:5b:25:b9:46:45:95:b6:
                    68:6d:cc:cc:f2:26:6b:ab:43:97:f1:79:1a:e0:33:
                    7f:59:18:3c:36:56:cc:b5:ec:fc:8a:d3:eb:75:75:
                    20:d0:6a:53:bc:56:b0:fd:c1:44:2e:3c:ba:88:df:
                    49:cc:2d:27:3f:12:a8:9b:55:ac:ef:f7:d5:88:d2:
                    2b:20:28:c1:9a:49:d0:3d:4c:ca:1f:c6:02:63:43:
                    72:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:25:D9:A4:29:7C:09:7B:25:A1:EE:F2:0F:59:2B:C0:BC:F8:1C:B8
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1311a895-43fc-49eb-996b-222d911710a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:c0:65:5d:1a:6e:6d:b9:1a:58:d1:c6:43:32:14:fa:ed:
         d6:23:0d:5f:7f:d6:71:2b:99:f3:4a:16:b4:2b:8d:c3:63:6c:
         fe:c8:65:68:23:0a:e4:d2:a2:73:1d:c9:52:c3:af:f7:22:a7:
         1a:af:d1:5c:f2:b9:ab:5a:3f:f0:85:ce:6e:cd:dc:eb:c4:8d:
         4c:ed:18:7a:91:7f:e8:af:ef:7e:ac:21:66:04:77:23:ed:68:
         36:55:c4:6b:70:2a:25:6a:8d:4d:4e:bb:77:c8:9d:6d:ea:f6:
         9f:0c:8e:ec:f5:45:29:90:03:be:5b:4f:72:0d:95:48:37:54:
         86:e6:58:60:25:f0:ed:e7:5c:05:4f:e8:28:12:c5:14:fd:92:
         49:31:ec:28:5a:b9:87:f2:15:b0:3f:41:4b:53:e2:ed:c1:fe:
         bb:68:f2:ea:43:41:5d:ad:94:33:d3:4b:0c:e4:3b:1d:d5:7a:
         7f:d9:fb:70:5d:5f:c8:27:4c:75:23:77:c6:b4:6c:9d:61:3e:
         2f:f5:51:9d:2c:57:80:e6:dd:7b:f1:e7:3b:27:60:7c:11:d5:
         f1:30:d0:32:23:85:27:fc:8d:44:66:1a:6c:62:aa:34:2c:ff:
         bf:2d:39:44:e9:38:fe:1a:47:fe:50:80:d8:3f:6e:77:2f:d2:
         98:4f:a8:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 04:37:17 2026 by rpki-client