Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa
File:                     5ab304f6-e1e5-467a-88a2-103320530506.roa (raw, json)
Hash identifier:          /Uv0q8z5dm7cJamEVnajF3FPqRxWuvalp3tJG5xS/VA=
Subject key identifier:   6A:FA:B0:B3:84:BD:7A:FF:5F:F1:4F:F2:23:D2:97:5F:D2:98:D8:FE
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7CF0478AD5BB60E4152F1AC3C37923196F5869EE
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa
Signing time:             Fri 07 Aug 2026 03:40:27 +0000
ROA not before:           Fri 07 Aug 2026 03:40:27 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:627::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f0:47:8a:d5:bb:60:e4:15:2f:1a:c3:c3:79:23:19:6f:58:69:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug  7 03:40:27 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=04e47447f9ad73642b8623178639d5a4f8a6dbe69c3b4626bc02606691b72cc0, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:01:bf:8e:6d:b6:02:0c:a8:9d:64:88:69:
                    c4:a2:30:51:47:c3:b8:5e:fe:fd:27:d0:f3:1d:af:
                    67:62:c1:a0:37:84:66:94:fe:b4:2b:8b:97:78:90:
                    70:f3:12:ef:33:0d:76:50:f8:e6:5e:1d:8b:73:1b:
                    28:36:23:fa:34:81:ad:25:81:7b:f8:0a:03:d2:c8:
                    cf:50:5f:8d:7d:fb:d5:b6:38:8e:82:84:7e:1e:bc:
                    44:b4:73:17:b1:29:1d:4f:79:8f:40:80:73:4e:8e:
                    5c:7f:69:d0:21:e6:89:d7:63:72:60:3d:96:a3:4d:
                    42:97:39:d4:74:de:40:0b:4e:52:af:e9:ce:6e:fd:
                    d6:56:26:02:b8:5c:67:20:cb:04:ef:08:ac:be:b9:
                    21:16:81:44:e9:5e:66:41:33:5a:b4:8c:33:10:51:
                    32:43:bb:93:f2:1f:e9:88:47:93:4b:f8:7a:fe:a6:
                    54:62:b0:af:18:0d:9f:f7:94:9f:24:23:95:6d:6d:
                    22:18:60:82:8f:16:8a:1f:fd:c6:e9:f2:f4:23:04:
                    f4:3c:8a:8d:57:71:93:76:e7:9c:5b:00:92:9d:8f:
                    03:d8:42:20:5d:8e:0b:57:5e:51:a9:b0:43:c3:d0:
                    ac:e0:6f:14:c3:14:48:6d:6b:ea:1b:7b:b8:5c:0a:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FA:B0:B3:84:BD:7A:FF:5F:F1:4F:F2:23:D2:97:5F:D2:98:D8:FE
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/5ab304f6-e1e5-467a-88a2-103320530506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:627::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:19:cf:9b:06:8e:81:40:c2:22:87:73:d7:c8:c2:96:18:fe:
         55:87:c5:6f:66:af:d1:25:31:1e:21:d6:97:1b:bb:c3:d4:fa:
         40:2d:81:fc:5b:d4:8e:90:68:9b:25:e0:e4:71:34:22:b7:20:
         0a:3d:1a:71:2c:8a:51:82:aa:2f:51:7d:2b:94:3e:98:d6:0b:
         2f:cf:b8:cb:1e:54:c1:21:21:b8:73:19:6e:56:32:bd:ec:b8:
         07:8a:e3:33:ff:fe:93:28:40:d3:a4:1d:97:54:72:34:8f:06:
         d3:85:43:32:87:ce:cb:3a:1e:a2:9f:3d:5f:be:02:4d:21:48:
         78:80:67:83:50:23:27:b0:f4:53:50:c4:ec:d2:43:25:cd:19:
         bf:2e:c1:27:31:9b:f1:e1:82:09:a4:41:f3:eb:ff:a0:e4:7d:
         34:95:be:48:61:96:4f:34:c1:d5:c2:fd:ca:6a:2e:96:9e:14:
         78:54:42:69:47:21:37:0d:05:ba:b3:e1:33:ed:63:91:3c:4a:
         9f:78:7f:da:50:b8:68:f5:42:d5:bf:36:b2:d7:43:4e:f6:09:
         ac:3e:e8:e1:c5:f1:b5:ea:e4:d4:45:89:33:ad:6c:ab:50:b1:
         ea:8f:5e:20:9e:fa:c3:1d:52:37:b5:5c:6a:87:09:05:a7:be:
         5d:9d:8b:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 7 07:45:49 2026 by rpki-client