Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa
File:                     1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa (raw, json)
Hash identifier:          +9RDVvCHsb8oiaaHtKuYIyxT2DcJbOkJliliI68uERc=
Subject key identifier:   C9:E8:63:9D:CA:E3:1B:10:3E:87:FF:F6:AA:0C:13:0D:6D:39:4A:C6
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5A74AE4D432F16A6219537A07A25F92D4E7CD973
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa
Signing time:             Wed 21 Oct 2026 01:40:10 +0000
ROA not before:           Wed 21 Oct 2026 01:40:10 +0000
ROA not after:            Tue 19 Jan 2027 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:e00::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:74:ae:4d:43:2f:16:a6:21:95:37:a0:7a:25:f9:2d:4e:7c:d9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 21 01:40:10 2026 GMT
            Not After : Jan 19 23:59:59 2027 GMT
        Subject: serialNumber=d503775b3d0cfcd3f15e118d5ab6c75ba8862a62b4f166d0cfb16130f70c5f08, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:76:5d:fb:64:ae:38:36:18:40:be:73:68:40:
                    a2:65:fd:73:2a:58:22:40:9c:9b:39:39:92:39:e9:
                    8a:f4:3a:e9:de:eb:0b:8d:2c:8f:44:79:a2:21:2d:
                    da:62:19:95:80:fa:50:7f:74:f0:a9:11:66:4e:4e:
                    7b:32:23:ca:12:c2:64:68:a8:21:b3:43:43:48:25:
                    e4:0c:c8:66:f3:8b:9e:01:a9:ff:06:07:df:1e:40:
                    eb:ec:80:c4:01:d4:5d:06:fb:e4:4f:d2:fc:1c:7a:
                    4d:08:51:0a:fc:63:53:41:00:68:a5:47:9f:3e:8c:
                    06:48:7f:00:78:42:71:33:30:55:29:97:57:f3:87:
                    41:65:23:d0:6d:22:b1:14:0e:77:cd:ef:d7:33:99:
                    09:ab:bf:15:d5:e0:34:6c:65:d6:3c:de:35:6b:25:
                    c4:56:4d:71:be:f4:18:2d:42:57:8c:5f:40:74:00:
                    82:69:7c:b5:96:82:61:12:a7:7e:60:9e:21:90:1a:
                    d8:7d:d9:01:fd:c3:3a:a0:a3:9f:69:54:68:8f:7d:
                    ac:25:f2:bc:44:14:68:3b:fe:d2:51:69:c3:42:db:
                    72:7e:83:d0:cf:54:65:e8:92:f7:53:7a:36:2b:78:
                    b4:10:27:b4:d7:93:0c:09:67:89:c3:3c:1e:46:75:
                    98:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E8:63:9D:CA:E3:1B:10:3E:87:FF:F6:AA:0C:13:0D:6D:39:4A:C6
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1fb8a26e-46cc-4838-9d34-4a82ec864e85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:e00::/43

    Signature Algorithm: sha256WithRSAEncryption
         71:cf:61:72:88:d7:79:bf:e0:5d:2b:64:26:53:69:bf:3b:0a:
         88:85:60:86:a7:25:b1:db:6d:4c:6f:f7:33:07:3e:9d:21:55:
         3a:19:76:f5:07:75:f0:f2:70:1e:6f:d0:19:bc:4b:ed:93:0b:
         6d:de:07:a9:0a:e9:2a:26:22:69:91:a8:f1:4e:21:14:71:d7:
         a3:64:8f:2b:6c:6f:5b:05:1c:a5:5b:6d:b4:f8:a3:37:51:b9:
         7e:d1:03:a0:d6:12:b2:e9:46:1a:2a:fb:30:8f:e4:79:de:a4:
         be:41:9e:40:d1:9e:6c:7f:f0:aa:7e:84:48:99:df:f8:1a:bb:
         d4:ff:cc:8c:1a:d4:92:ec:fd:0e:e7:7e:0f:2e:b8:68:b8:67:
         6e:bd:4f:d4:61:94:4a:7e:9f:c5:fb:af:51:e9:a0:af:0d:ee:
         5b:1d:12:f0:72:95:c7:87:27:b8:83:f0:c5:e0:40:5a:1b:69:
         8b:46:3b:88:6f:aa:5f:15:74:20:e9:ac:77:99:8a:ae:d1:d4:
         d0:42:b9:d1:76:be:4b:8e:29:ec:8d:9d:5c:a2:aa:35:08:78:
         b9:66:54:de:b8:5d:33:cd:53:1c:d2:86:63:88:46:32:a4:32:
         7b:88:2d:ef:6c:fa:c1:55:3e:12:2a:2c:b9:98:7b:ec:6d:7b:
         76:13:ee:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 00:43:28 2026 by rpki-client