Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/567362d1-833e-45e0-b9dc-1e63b72d5baf.roa
File:                     567362d1-833e-45e0-b9dc-1e63b72d5baf.roa (raw, json)
Hash identifier:          My97qxW8O/98XJ9M0iJ8HR91JZL492SNQm3lNtQgqWs=
Subject key identifier:   B1:E2:B6:7C:30:C5:47:26:5C:82:C4:95:33:E7:43:AE:9A:B9:26:8B
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7F31A0EDAB94C56C2A03E6D9D243DF0785F2E673
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/567362d1-833e-45e0-b9dc-1e63b72d5baf.roa
Signing time:             Mon 04 May 2026 14:51:06 +0000
ROA not before:           Mon 04 May 2026 14:51:06 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:f001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:31:a0:ed:ab:94:c5:6c:2a:03:e6:d9:d2:43:df:07:85:f2:e6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May  4 14:51:06 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=7f0f680133dfc4a275292135f27edcbd1458169febee726a0bbabaf45ea59c85, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:81:a7:3b:5a:04:53:1f:bf:2b:c8:f7:66:
                    46:28:57:40:e3:30:d6:37:80:3c:54:4e:78:18:b1:
                    a2:04:d5:32:c3:6f:d4:55:ed:b4:cb:17:35:e9:20:
                    45:64:5c:2e:5b:08:b2:73:a0:6b:06:c8:ee:89:a4:
                    cd:6e:ca:71:99:c6:85:4e:50:5f:7a:7a:b7:72:0a:
                    cc:73:61:c3:79:37:8d:52:9e:17:36:2a:c9:47:a7:
                    92:f2:81:45:4c:6d:da:3f:bd:8c:18:cc:da:31:7b:
                    e2:e7:31:2b:ef:b4:8f:ed:ab:56:38:1e:eb:84:bc:
                    e8:36:a3:de:16:83:08:d6:8c:b3:7a:12:d2:36:8f:
                    3d:74:63:6a:fd:6c:eb:e6:31:5d:85:9a:56:07:17:
                    98:84:f8:5c:a9:41:04:18:af:94:da:62:e4:46:04:
                    17:25:35:a2:95:1d:08:e4:65:73:d7:b7:95:34:0f:
                    05:1e:13:01:da:64:99:26:eb:ed:f6:57:70:92:ab:
                    e5:7f:3c:f8:d8:12:10:08:5d:a9:d8:9e:a1:11:2c:
                    93:0c:76:34:bc:9c:68:45:e4:bf:da:59:7b:31:e6:
                    50:c2:89:f9:37:66:4e:f5:a4:87:78:30:11:54:64:
                    4c:50:bd:30:a3:27:21:17:fd:1d:2f:f4:9d:ba:67:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E2:B6:7C:30:C5:47:26:5C:82:C4:95:33:E7:43:AE:9A:B9:26:8B
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/567362d1-833e-45e0-b9dc-1e63b72d5baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:f001::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:3f:27:0e:fe:19:b4:3e:f1:de:82:1e:8a:ab:9a:2e:30:de:
         05:6b:41:99:2d:1c:52:29:3c:a8:4b:18:71:65:f7:a2:25:84:
         b9:72:43:2b:91:b8:9a:e9:d6:d0:01:17:7a:8f:a5:c5:38:1f:
         96:92:78:08:6c:93:80:53:62:d6:13:59:17:b3:e1:8f:5d:fc:
         78:a7:87:d5:35:ca:bf:e6:8d:f4:15:94:90:f4:cf:99:4d:74:
         3a:2b:0d:b5:6b:ac:cf:b1:8e:34:15:49:ff:11:32:b3:ea:86:
         5d:c5:dd:7c:27:63:e7:f0:08:a9:91:5d:5a:6b:a1:ef:51:ed:
         ae:84:18:57:d0:7f:17:b4:7b:b6:0d:18:cd:85:79:63:31:05:
         b5:9a:37:cc:fb:72:78:45:51:60:b4:1c:50:71:15:04:3f:3a:
         b7:67:fc:ac:36:b1:85:51:a2:20:c5:55:30:7f:89:39:6f:9f:
         43:39:99:16:8b:e5:32:90:44:81:70:a9:c2:0e:36:de:2d:26:
         19:01:f3:d1:1c:f3:61:88:d1:b7:c7:bc:9d:09:b5:73:95:44:
         1d:ef:84:23:80:c1:28:21:4c:66:a2:99:be:96:44:6f:d5:39:
         1e:bb:c3:7b:4b:23:62:e5:a0:0c:14:a3:99:65:b1:a7:63:15:
         3c:37:11:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 11 17:42:24 2026 by rpki-client