Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6fc3cbe3-6357-4d28-877e-72c4dd85c50e.roa
File:                     6fc3cbe3-6357-4d28-877e-72c4dd85c50e.roa (raw, json)
Hash identifier:          A+Bu6f0VpwXysMDdguT3jPDl+Qn5V/F92XX4gruhKPE=
Subject key identifier:   AD:12:E9:49:A5:64:71:35:62:6A:BF:DD:2A:A6:A4:81:AE:FD:E4:18
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       6BA8DF24860C723EA37C0A3050391C09E4623017
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6fc3cbe3-6357-4d28-877e-72c4dd85c50e.roa
Signing time:             Mon 27 Apr 2026 00:10:06 +0000
ROA not before:           Mon 27 Apr 2026 00:10:06 +0000
ROA not after:            Sun 26 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:3b3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a8:df:24:86:0c:72:3e:a3:7c:0a:30:50:39:1c:09:e4:62:30:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr 27 00:10:06 2026 GMT
            Not After : Jul 26 23:59:59 2026 GMT
        Subject: serialNumber=328dc50f92ff1abc0ba9334278b8cc8f01d97b8a3712cf1dff7c8e021d112558, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:39:0a:43:98:b5:10:fb:62:8f:78:fd:c1:
                    07:2a:03:92:61:1a:be:f1:51:b9:31:3e:16:cd:77:
                    d2:f7:0b:7e:f4:af:cd:d6:51:c1:76:a2:52:2f:6c:
                    6a:e0:ee:95:68:d9:5a:1d:71:d6:50:45:16:79:aa:
                    cb:99:ed:ce:c3:6c:84:c3:89:07:3b:82:75:50:fe:
                    93:3f:bc:80:53:8e:99:43:77:c5:a8:a7:67:09:f0:
                    37:ad:59:4a:8f:4e:ec:ab:f0:39:ca:df:39:f1:7d:
                    4b:87:80:c6:cb:36:2d:6b:cf:69:76:09:2c:40:e8:
                    31:6b:0e:c6:be:5b:e3:3c:8a:1c:36:29:66:c9:80:
                    05:4d:de:e4:c6:f0:a8:dd:58:64:06:f5:89:eb:e6:
                    5c:ee:15:07:03:db:67:4c:d3:9c:40:f9:50:2e:37:
                    fe:ab:67:9c:e3:c3:79:12:e3:a6:0b:cb:d0:ec:9f:
                    f7:88:94:d8:7e:c2:ab:a9:66:e5:9c:0a:29:8d:e9:
                    7f:fe:1f:01:d8:a6:c8:f3:92:f2:a0:03:ec:41:ab:
                    df:33:28:36:53:08:d8:11:d9:5d:c5:c4:ac:fa:ff:
                    ac:47:1b:a6:43:db:68:f7:c9:53:5c:09:2a:c2:e4:
                    de:91:0e:21:a2:8e:88:d9:18:2c:41:f2:b7:a1:24:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:12:E9:49:A5:64:71:35:62:6A:BF:DD:2A:A6:A4:81:AE:FD:E4:18
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/6fc3cbe3-6357-4d28-877e-72c4dd85c50e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:3b3::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:12:fe:68:c1:ab:38:7d:f0:36:4c:fe:a2:33:ed:6f:96:aa:
         58:4a:3f:90:68:84:62:8b:8a:af:24:19:27:63:a6:62:cd:ac:
         38:71:ed:00:54:ee:c8:86:c6:6c:cc:d0:5f:7f:b8:37:2f:5b:
         6f:55:c8:4f:e6:db:85:77:43:ee:7c:33:59:dd:9b:e1:7d:a2:
         a5:7d:cb:e1:77:c3:cc:28:a2:84:68:a0:ec:2c:b3:80:72:5e:
         bd:ca:74:2b:cd:85:2a:74:65:10:4d:bf:20:16:56:ec:62:27:
         58:d3:01:69:77:98:86:df:a3:2b:51:86:d4:cf:6e:d1:df:14:
         de:37:71:e1:b5:88:c3:36:66:21:00:c3:27:29:fc:17:39:c7:
         20:de:8c:4a:9c:78:79:d6:bf:ff:a8:ef:d9:ef:e9:a4:15:02:
         88:ff:d1:f7:79:d1:d5:b5:e9:b8:6c:2c:03:4d:05:cf:e8:81:
         c4:ab:54:5b:77:dd:9c:80:9b:e8:f3:ce:c4:1a:a4:f3:8f:f6:
         36:d2:70:f2:c4:8f:0c:f5:03:4b:31:47:9a:08:65:65:ab:05:
         36:b9:79:61:22:6b:d3:58:fd:3d:e8:6d:bb:f7:c7:de:3b:b4:
         c6:70:b3:06:f9:66:27:c5:d0:03:e8:71:5b:c2:e1:e1:29:4d:
         56:b7:1c:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:11:14 2026 by rpki-client