Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/59d06962-7aa4-4507-aeb0-a842d588bc31.roa
File:                     59d06962-7aa4-4507-aeb0-a842d588bc31.roa (raw, json)
Hash identifier:          YmMF7MfJTeF91YaDuK5B3jVvP5u9fdQxCpOrRPBFXrY=
Subject key identifier:   56:04:63:0B:84:86:80:4E:50:CD:D8:B9:62:F1:AE:9D:A4:2E:E8:51
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       67E69FE693AEC7A2D835612CC7CCED05551375BB
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/59d06962-7aa4-4507-aeb0-a842d588bc31.roa
Signing time:             Tue 19 May 2026 03:40:53 +0000
ROA not before:           Tue 19 May 2026 03:40:53 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:549::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e6:9f:e6:93:ae:c7:a2:d8:35:61:2c:c7:cc:ed:05:55:13:75:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 19 03:40:53 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=a96254ec1be3c74ea0082f91014daef741012eba0c883e83ce62a3f8d8767a29, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:07:2d:ff:25:9b:f5:c9:46:6c:03:89:6b:
                    76:05:ce:9a:68:a6:bf:c9:bd:f6:da:40:c4:e2:62:
                    14:3d:f5:62:0c:43:d6:37:ca:50:99:d4:99:c7:ee:
                    59:ca:cb:f2:d0:a6:c3:83:05:17:8c:89:07:4f:81:
                    02:4f:16:68:1b:c9:ca:fb:a0:70:3d:5c:bb:10:c5:
                    43:40:5a:77:8c:09:f8:a0:1a:b7:7f:6d:dc:a9:4a:
                    23:34:16:97:31:0b:2d:97:07:9d:0d:9d:a0:62:f1:
                    76:4f:a7:79:de:b2:64:d3:f9:bf:59:bb:a9:8d:64:
                    57:c1:95:32:e8:77:ac:7c:28:3f:0d:11:fb:89:25:
                    cf:13:d4:fa:b1:2c:03:f4:58:08:79:7a:13:f1:ad:
                    07:16:2d:d6:1c:1b:9d:ec:d7:9f:4b:ed:15:25:4f:
                    1a:f0:0d:bb:f0:26:74:6a:af:92:95:5d:6a:48:5d:
                    eb:16:9b:6a:f0:b1:cb:d1:96:c3:29:91:eb:ef:57:
                    c9:4b:af:7f:3e:e2:44:2d:a1:5b:b8:40:b5:5b:04:
                    0c:7e:cc:f1:7d:a6:3a:d6:58:52:be:05:49:0c:b6:
                    61:de:d5:f3:d0:4b:61:00:11:e5:81:24:7f:eb:71:
                    0c:e3:95:7a:ce:74:bb:01:fc:5e:f4:36:ea:8f:c7:
                    9b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:04:63:0B:84:86:80:4E:50:CD:D8:B9:62:F1:AE:9D:A4:2E:E8:51
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/59d06962-7aa4-4507-aeb0-a842d588bc31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:549::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:13:b9:f3:44:f4:ed:95:e3:c3:42:ff:98:b3:e3:9d:97:d0:
         f0:97:b3:8e:ea:8e:b3:61:de:e9:2c:c2:08:18:7b:a5:46:84:
         41:61:1e:ab:6a:3e:bd:d7:33:95:68:86:70:05:45:e1:19:b1:
         87:11:65:a4:d9:b3:12:05:3d:dc:4a:81:72:cf:0e:e7:81:61:
         99:4b:65:38:1b:8e:1d:97:2b:e8:af:db:c0:d0:85:72:5f:20:
         6f:ef:39:63:ce:45:fa:dd:49:db:9e:72:4f:38:01:d5:a0:a5:
         20:3a:4a:b5:19:05:97:33:b1:dc:46:6a:9e:9a:75:36:fb:c6:
         97:76:24:17:72:0e:96:31:64:bb:52:c3:aa:61:f4:8f:b4:83:
         bf:24:33:41:8a:f9:ec:69:e9:d1:fd:3c:e7:be:f5:5d:83:69:
         0a:b1:1a:49:c9:a1:f2:66:38:5b:29:f7:ac:9b:99:a5:42:b9:
         7b:df:e8:27:67:91:c0:64:83:54:5f:5d:0c:80:d8:f1:e5:f8:
         a3:a9:d8:16:fa:b0:0c:cf:ef:96:b3:a4:ac:fa:72:91:89:81:
         ea:07:7f:d8:1f:d6:27:97:27:1a:27:94:1c:a7:5c:ba:f1:c8:
         30:4d:1a:ce:3a:d0:3d:19:6a:7b:ce:f5:bd:ed:84:20:b1:65:
         04:ce:13:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:34:50 2026 by rpki-client