Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/618a2d75-6760-4f1d-a870-248c840a7522.roa
File:                     618a2d75-6760-4f1d-a870-248c840a7522.roa (raw, json)
Hash identifier:          eksanGkVFvzScDeo0ZQ7ZBSp6/s4TBTf0LQ1naJVWd0=
Subject key identifier:   A6:CD:E4:14:20:DE:85:22:1E:DF:FF:2D:F3:B4:12:70:AB:18:79:29
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       08E5EACC42B21329DF12FE9EEABA226049FC2B16
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/618a2d75-6760-4f1d-a870-248c840a7522.roa
Signing time:             Tue 04 Aug 2026 00:10:12 +0000
ROA not before:           Tue 04 Aug 2026 00:10:12 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:d80::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e5:ea:cc:42:b2:13:29:df:12:fe:9e:ea:ba:22:60:49:fc:2b:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug  4 00:10:12 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=2868937d5b7d80f6da35f439be9e7163c3fdfd3dee524a56e30b9b4785e9ad4e, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ef:33:d0:25:ef:49:88:73:51:2b:33:d0:fa:
                    40:f1:2e:26:f2:1f:5b:d6:b4:69:a5:bc:8c:86:f2:
                    79:dc:16:e8:71:34:f6:81:1e:ed:73:4c:d5:37:24:
                    33:e9:1e:85:a7:e5:44:6d:36:b4:4e:c6:5c:d5:c8:
                    6f:28:33:88:c4:47:ae:c0:5e:63:8d:35:fd:35:d0:
                    d4:25:c3:3a:cb:8a:07:47:36:86:f1:c5:5a:35:d1:
                    33:06:ad:7a:80:ed:76:29:22:6f:ae:a1:d9:33:93:
                    fe:87:3d:c8:b0:7d:f5:14:51:19:ad:1b:ac:fc:70:
                    c3:10:47:51:e6:a9:28:7c:58:7e:eb:3f:01:0a:5a:
                    f5:e6:be:45:f5:f2:eb:2c:08:af:59:47:79:db:62:
                    0f:b0:95:49:cd:ba:77:11:28:04:b1:c0:a4:1f:bd:
                    37:26:2e:4a:43:53:ed:1f:27:89:92:ef:53:81:8b:
                    f8:8c:84:50:92:12:f6:b8:d6:c0:c2:32:da:33:f2:
                    72:aa:a7:89:40:37:1b:36:13:6b:2c:61:a2:9c:cb:
                    27:3b:9b:20:5e:c9:83:6d:c0:bb:89:78:9a:49:49:
                    e1:fe:cc:87:db:59:79:ca:3d:c0:1e:8d:3f:d9:d1:
                    e3:46:ff:ea:d6:fc:5e:48:45:56:a5:40:f9:a7:67:
                    25:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CD:E4:14:20:DE:85:22:1E:DF:FF:2D:F3:B4:12:70:AB:18:79:29
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/618a2d75-6760-4f1d-a870-248c840a7522.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:d80::/43

    Signature Algorithm: sha256WithRSAEncryption
         8b:2c:53:ab:53:e4:9c:3f:69:67:37:f4:be:2d:f7:a1:58:8d:
         1f:a2:df:5b:40:38:b5:ca:4f:4b:c8:d1:21:2e:3c:d7:80:af:
         1a:59:73:98:d6:f6:df:49:cd:5c:4a:33:19:ad:6d:9b:55:b7:
         ee:a3:5c:2f:e7:da:47:46:05:e4:fc:53:03:f1:9e:3a:a2:60:
         7a:1d:d3:e0:bb:78:cb:f1:53:7f:4e:68:b7:ef:2d:32:e7:43:
         6c:42:2e:d5:79:ba:78:1e:cd:f7:43:c5:7f:74:cd:c7:ca:de:
         cb:ab:32:a0:7b:4e:cd:dd:99:a0:57:d1:91:b5:35:fd:1c:3d:
         f5:9c:f3:05:68:54:84:e3:e6:55:96:b2:50:8b:57:0d:f1:8b:
         8b:57:f0:b4:77:2a:24:7f:c5:01:b3:aa:64:a3:d9:90:13:9c:
         49:98:7d:8e:df:80:fe:5c:d4:9c:f5:81:60:45:f2:5a:32:ac:
         09:89:01:59:7a:c8:15:76:90:27:0a:7b:a4:68:8f:e8:fd:9b:
         bd:f9:ea:7a:ba:d6:90:fb:49:d9:40:50:14:de:a2:25:f9:48:
         35:a9:3f:0f:eb:40:69:7d:2f:41:04:36:23:7c:76:54:4c:9b:
         ea:24:66:a6:79:f3:5c:dd:38:3f:c8:73:79:0e:a5:2c:8e:48:
         7e:49:a8:cd
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUCOXqzEKyEynfEv6e6roiYEn8KxYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwODA0MDAxMDEyWhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyODY4OTM3ZDViN2Q4MGY2ZGEzNWY0MzliZTllNzE2M2Mz
ZmRmZDNkZWU1MjRhNTZlMzBiOWI0Nzg1ZTlhZDRlMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDW7zPQJe9JiHNRKzPQ+kDxLibyH1vWtGmlvIyG8nncFuhx
NPaBHu1zTNU3JDPpHoWn5URtNrROxlzVyG8oM4jER67AXmONNf010NQlwzrLigdH
NobxxVo10TMGrXqA7XYpIm+uodkzk/6HPciwffUUURmtG6z8cMMQR1HmqSh8WH7r
PwEKWvXmvkX18ussCK9ZR3nbYg+wlUnNuncRKASxwKQfvTcmLkpDU+0fJ4mS71OB
i/iMhFCSEva41sDCMtoz8nKqp4lANxs2E2ssYaKcyyc7myBeyYNtwLuJeJpJSeH+
zIfbWXnKPcAejT/Z0eNG/+rW/F5IRValQPmnZyWdAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUps3kFCDehSIe3/8t87QScKsYeSkwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiLzYxOGEyZDc1LTY3NjAtNGYxZC1hODcwLTI0OGM4NDBhNzUyMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwUmBZzADYAwDQYJKoZIhvcNAQELBQADggEBAIssU6tT5Jw/aWc39L4t96FY
jR+i31tAOLXKT0vI0SEuPNeArxpZc5jW9t9JzVxKMxmtbZtVt+6jXC/n2kdGBeT8
UwPxnjqiYHod0+C7eMvxU39OaLfvLTLnQ2xCLtV5ungezfdDxX90zcfK3surMqB7
Ts3dmaBX0ZG1Nf0cPfWc8wVoVITj5lWWslCLVw3xi4tX8LR3KiR/xQGzqmSj2ZAT
nEmYfY7fgP5c1Jz1gWBF8loyrAmJAVl6yBV2kCcKe6Roj+j9m7356nq61pD7SdlA
UBTeoiX5SDWpPw/rQGl9L0EENiN8dlRMm+okZqZ581zdOD/Ic3kOpSyOSH5JqM0=
-----END CERTIFICATE-----
Generated at Fri Aug 14 07:50:45 2026 by rpki-client