Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2a9a7e7a-f836-49c4-b98d-bc4e85459b54.roa
File:                     2a9a7e7a-f836-49c4-b98d-bc4e85459b54.roa (raw, json)
Hash identifier:          TuqfTmJ7bnKXyAJ/rWoiucLNUea702+B7pw0vT9dLzU=
Subject key identifier:   2B:55:62:3E:8A:1C:E5:CF:6E:2A:C3:88:76:4F:37:BB:79:38:B2:AA
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7BB108ECA5EA94EE5AD1CF578E372152800FC942
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2a9a7e7a-f836-49c4-b98d-bc4e85459b54.roa
Signing time:             Thu 14 May 2026 00:10:13 +0000
ROA not before:           Thu 14 May 2026 00:10:13 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:3b40::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b1:08:ec:a5:ea:94:ee:5a:d1:cf:57:8e:37:21:52:80:0f:c9:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 14 00:10:13 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=cd7b935828864403865a60129e6830d4e268dfe9790cb4c8f3f3d8d6c3410c76, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:7d:82:f6:17:15:c5:77:81:2a:82:c7:2a:
                    9d:d8:06:82:b1:0a:3e:6b:5d:e0:ab:f1:6e:6f:9b:
                    b4:be:38:31:1b:54:68:52:15:72:87:c3:e8:c9:a4:
                    80:8a:9c:84:e3:b4:67:b8:63:08:d6:94:96:bd:a1:
                    08:cc:48:b4:8e:e2:2e:a9:28:99:68:11:a8:a1:40:
                    af:48:45:87:40:39:0a:59:75:34:f1:8f:54:94:0f:
                    e8:0c:1c:ac:d6:38:bb:7e:1f:33:0c:54:42:dc:53:
                    c6:01:38:ed:99:c7:e2:14:fb:72:7d:c4:b4:f8:ec:
                    ae:1f:02:15:3d:fb:8a:88:24:2d:85:89:d7:b4:f6:
                    64:8f:21:ca:af:ff:e5:04:49:61:5e:23:3b:e6:59:
                    80:33:68:b2:ee:9e:15:1d:65:2c:2d:82:ff:b3:4b:
                    ab:ab:74:db:5d:c9:09:53:b2:e6:4a:5a:0b:bd:66:
                    87:0b:be:30:a6:da:b5:60:8c:8f:7e:c4:5c:07:f8:
                    08:ca:58:d8:a6:2a:b2:c5:db:d1:21:c5:ba:4c:ac:
                    28:32:9b:f9:fd:15:f0:8d:ee:46:82:34:3f:ac:45:
                    f7:38:ea:e2:c1:56:4c:1a:c4:61:b2:e4:b3:8e:bd:
                    99:c9:c0:b6:29:6a:7e:e1:2e:75:d6:9d:d6:a1:de:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:55:62:3E:8A:1C:E5:CF:6E:2A:C3:88:76:4F:37:BB:79:38:B2:AA
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2a9a7e7a-f836-49c4-b98d-bc4e85459b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:3b40::/46

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:88:93:e1:54:dd:7f:9a:50:f1:f5:fd:67:e9:c9:3b:a0:
         59:42:e1:d6:5e:2c:27:d8:42:cc:12:b0:04:e7:f9:25:45:e5:
         53:9c:b2:87:53:0b:04:c8:44:cd:9c:d2:8c:c9:b9:52:d5:46:
         62:3d:93:3f:b9:1e:17:4b:92:92:4d:ec:67:0f:4d:84:df:df:
         f0:65:e4:21:28:27:81:91:41:15:8e:76:44:c4:a1:23:78:42:
         2e:26:44:97:b4:51:ff:3e:aa:ea:bb:c2:e6:d1:12:be:66:a0:
         cb:bf:f6:c4:d7:93:91:ec:6b:da:29:37:43:62:eb:e6:c9:9d:
         99:90:da:c1:1f:3b:ed:93:44:20:34:7d:fd:28:7d:45:34:9b:
         76:65:87:9d:05:1b:4f:c5:72:ed:78:e4:da:74:a9:10:99:fc:
         c3:3b:5a:65:cf:6b:3a:63:d6:42:4a:21:9c:a6:60:53:35:d5:
         9a:b5:1b:c1:b7:28:8c:d7:5d:52:68:87:d5:b9:00:ff:28:b9:
         be:50:47:48:d4:37:6b:a3:7b:97:fd:c5:06:6f:f3:4b:46:6b:
         50:be:5b:13:c1:ae:25:9d:7a:28:71:7f:01:e2:e1:bf:8c:c1:
         ef:e7:8e:77:55:27:79:c0:79:67:60:bd:fb:c3:cc:b0:89:ab:
         b9:60:c1:e5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUe7EI7KXqlO5a0c9XjjchUoAPyUIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwNTE0MDAxMDEzWhcNMjYwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZDdiOTM1ODI4ODY0NDAzODY1YTYwMTI5ZTY4MzBkNGUy
NjhkZmU5NzkwY2I0YzhmM2YzZDhkNmMzNDEwYzc2MS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCla32C9hcVxXeBKoLHKp3YBoKxCj5rXeCr8W5vm7S+ODEb
VGhSFXKHw+jJpICKnITjtGe4YwjWlJa9oQjMSLSO4i6pKJloEaihQK9IRYdAOQpZ
dTTxj1SUD+gMHKzWOLt+HzMMVELcU8YBOO2Zx+IU+3J9xLT47K4fAhU9+4qIJC2F
ide09mSPIcqv/+UESWFeIzvmWYAzaLLunhUdZSwtgv+zS6urdNtdyQlTsuZKWgu9
ZocLvjCm2rVgjI9+xFwH+AjKWNimKrLF29EhxbpMrCgym/n9FfCN7kaCND+sRfc4
6uLBVkwaxGGy5LOOvZnJwLYpan7hLnXWndah3szLAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUK1ViPooc5c9uKsOIdk83u3k4sqowHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzJhOWE3ZTdhLWY4MzYtNDljNC1iOThkLWJjNGU4NTQ1OWI1NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImBZzAO0AwDQYJKoZIhvcNAQELBQADggEBAAHyiJPhVN1/mlDx9f1n6ck7
oFlC4dZeLCfYQswSsATn+SVF5VOcsodTCwTIRM2c0ozJuVLVRmI9kz+5HhdLkpJN
7GcPTYTf3/Bl5CEoJ4GRQRWOdkTEoSN4Qi4mRJe0Uf8+quq7wubREr5moMu/9sTX
k5Hsa9opN0Ni6+bJnZmQ2sEfO+2TRCA0ff0ofUU0m3Zlh50FG0/Fcu145Np0qRCZ
/MM7WmXPazpj1kJKIZymYFM11Zq1G8G3KIzXXVJoh9W5AP8oub5QR0jUN2uje5f9
xQZv80tGa1C+WxPBriWdeihxfwHi4b+Mwe/njndVJ3nAeWdgvfvDzLCJq7lgweU=
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:47:33 2026 by rpki-client