Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/277fb1fb-3655-4c68-80f2-1f4160a003be.roa
File:                     277fb1fb-3655-4c68-80f2-1f4160a003be.roa (raw, json)
Hash identifier:          Lo4dW6pRW9aIuexHqmgoedDdHHuOEMrkGJRx8FY+xv4=
Subject key identifier:   19:C7:34:86:BF:2D:33:40:1C:3D:B0:12:FF:A5:1F:19:53:75:C0:41
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       0E35DD2DA40B668545577F4CBCE0004E329149C7
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/277fb1fb-3655-4c68-80f2-1f4160a003be.roa
Signing time:             Fri 07 Aug 2026 04:00:41 +0000
ROA not before:           Fri 07 Aug 2026 04:00:41 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:398::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:35:dd:2d:a4:0b:66:85:45:57:7f:4c:bc:e0:00:4e:32:91:49:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug  7 04:00:41 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=4719317454e78361fe209c462383da4984df3f5a37566911ee1631888ce66ace, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:87:81:6c:db:13:6f:9f:36:17:1b:1a:f7:c3:
                    78:b0:5d:d8:52:9b:39:c8:57:9f:75:91:e7:d8:bf:
                    4c:e0:63:69:a8:a4:ba:d2:1e:6f:4d:d5:7d:ce:b8:
                    d2:5e:8e:fc:b6:46:ae:ba:af:df:45:50:c1:7b:ab:
                    a0:12:4f:7d:8e:35:19:76:37:8c:38:02:ea:9e:24:
                    46:f6:9f:8e:a3:2b:3e:48:e2:19:41:70:af:f1:69:
                    2b:67:0b:ee:de:37:3f:b2:be:01:1c:7d:ef:6c:ef:
                    f4:28:6c:86:76:6c:0c:95:f4:3b:13:8f:75:6e:db:
                    3a:c5:eb:73:f5:43:e6:c9:e6:ff:83:81:64:8c:b4:
                    c0:ea:5c:e3:52:8a:5e:04:67:de:9c:32:d9:b4:59:
                    94:b8:fc:60:e9:23:c1:8e:5b:ba:5b:2b:eb:50:19:
                    58:4b:61:78:c3:b2:7d:c5:39:7b:a7:2b:4d:14:ec:
                    94:72:8b:5d:4b:c4:d0:2d:e0:fa:bc:b5:88:27:03:
                    2b:ed:57:ff:e3:b9:a4:be:e0:a0:39:6a:27:e9:36:
                    d6:42:e3:90:28:95:da:17:2d:6c:f2:9a:92:dc:7e:
                    06:43:47:bd:d1:c4:40:df:13:7f:ae:77:23:60:e9:
                    e5:ad:e2:54:63:48:6f:6c:5e:40:18:91:70:ef:73:
                    83:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C7:34:86:BF:2D:33:40:1C:3D:B0:12:FF:A5:1F:19:53:75:C0:41
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/277fb1fb-3655-4c68-80f2-1f4160a003be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:398::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:8a:bf:a3:f4:45:ff:c9:b6:68:56:47:a0:b5:a9:87:e1:c0:
         10:95:78:08:db:b8:0b:82:0d:04:0c:a0:34:fd:72:ee:d5:28:
         7b:d5:ab:de:82:cc:ca:31:86:3a:e7:fc:1b:20:2e:d5:96:f7:
         25:66:07:a4:f2:3c:f5:23:0b:8c:f1:5a:41:32:53:d1:3a:f0:
         40:3e:8d:48:72:d7:f4:2e:2a:91:c0:94:a4:a4:37:7f:c8:d7:
         3a:7b:7f:51:b6:83:ee:08:8e:63:6b:a2:32:82:aa:15:cb:41:
         55:9c:f9:e6:8c:9c:74:29:bb:c0:08:cf:cd:49:84:3b:f4:59:
         8d:4c:33:48:e3:d8:c8:97:ac:d2:2e:77:2b:96:3a:78:47:75:
         7b:00:dd:48:b6:d2:45:a7:7c:e1:d6:25:17:a0:2c:17:3c:14:
         35:a0:80:fb:53:d3:5e:f1:b5:52:40:72:9d:ee:3a:3d:b7:6a:
         61:4e:c0:68:7b:74:7b:51:0c:bc:bf:68:82:f1:f0:4a:77:e1:
         55:88:b8:70:8c:85:44:37:d6:56:60:9a:df:0f:95:19:1d:a2:
         e0:4d:59:1c:1c:82:19:56:78:01:d1:e7:0f:27:44:32:a4:32:
         7f:9f:d6:31:9b:46:f6:7b:25:45:6c:be:52:d8:01:a1:1d:59:
         a4:5f:f0:cd
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDjXdLaQLZoVFV39MvOAATjKRSccwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwODA3MDQwMDQxWhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NzE5MzE3NDU0ZTc4MzYxZmUyMDljNDYyMzgzZGE0OTg0
ZGYzZjVhMzc1NjY5MTFlZTE2MzE4ODhjZTY2YWNlMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5h4Fs2xNvnzYXGxr3w3iwXdhSmznIV591kefYv0zgY2mo
pLrSHm9N1X3OuNJejvy2Rq66r99FUMF7q6AST32ONRl2N4w4AuqeJEb2n46jKz5I
4hlBcK/xaStnC+7eNz+yvgEcfe9s7/QobIZ2bAyV9DsTj3Vu2zrF63P1Q+bJ5v+D
gWSMtMDqXONSil4EZ96cMtm0WZS4/GDpI8GOW7pbK+tQGVhLYXjDsn3FOXunK00U
7JRyi11LxNAt4Pq8tYgnAyvtV//juaS+4KA5aifpNtZC45AoldoXLWzympLcfgZD
R73RxEDfE3+udyNg6eWt4lRjSG9sXkAYkXDvc4MDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUGcc0hr8tM0AcPbAS/6UfGVN1wEEwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzI3N2ZiMWZiLTM2NTUtNGM2OC04MGYyLTFmNDE2MGEwMDNiZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzAA5gwDQYJKoZIhvcNAQELBQADggEBAICKv6P0Rf/JtmhWR6C1qYfh
wBCVeAjbuAuCDQQMoDT9cu7VKHvVq96CzMoxhjrn/BsgLtWW9yVmB6TyPPUjC4zx
WkEyU9E68EA+jUhy1/QuKpHAlKSkN3/I1zp7f1G2g+4IjmNrojKCqhXLQVWc+eaM
nHQpu8AIz81JhDv0WY1MM0jj2MiXrNIudyuWOnhHdXsA3Ui20kWnfOHWJRegLBc8
FDWggPtT017xtVJAcp3uOj23amFOwGh7dHtRDLy/aILx8Ep34VWIuHCMhUQ31lZg
mt8PlRkdouBNWRwcghlWeAHR5w8nRDKkMn+f1jGbRvZ7JUVsvlLYAaEdWaRf8M0=
-----END CERTIFICATE-----
Generated at Fri Aug 7 07:45:58 2026 by rpki-client