Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/834cec14-31c8-42fb-ab06-5c07ee79d6d1.roa
File:                     834cec14-31c8-42fb-ab06-5c07ee79d6d1.roa (raw, json)
Hash identifier:          ibTYNGyhChFv/6prTA9FELIc5RSVpn14Ktw9dSmOKrk=
Subject key identifier:   3F:6E:00:82:E6:05:FA:56:54:82:05:6E:72:68:73:2A:F6:58:5D:97
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       2DEE1C0B814D546253115337FBE45700DAEAA6CF
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/834cec14-31c8-42fb-ab06-5c07ee79d6d1.roa
Signing time:             Mon 04 May 2026 14:50:12 +0000
ROA not before:           Mon 04 May 2026 14:50:12 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:647::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ee:1c:0b:81:4d:54:62:53:11:53:37:fb:e4:57:00:da:ea:a6:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May  4 14:50:12 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=9fdfb1e0551c5f2d8d462a084328843aea00c9652225c815c058782b124135e2, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:5a:65:45:0f:de:c3:0a:8b:ab:dd:0f:5b:
                    f1:d1:af:6c:c8:b2:a8:4c:c1:77:9a:64:49:f1:8c:
                    1e:90:13:f9:9f:3c:ab:9f:0b:c1:ce:74:bc:1e:7f:
                    60:c4:21:08:80:d9:ca:eb:76:1d:23:96:38:59:5a:
                    f2:1b:00:4d:ab:d6:3b:51:13:f8:47:f6:db:5c:80:
                    0f:60:47:b2:08:05:97:f9:ea:1d:1f:e4:31:95:f6:
                    7e:d7:44:52:0e:28:b0:d6:54:72:72:8c:bb:b8:7a:
                    cf:9b:b7:09:5f:3b:4c:58:96:38:b1:79:31:8b:a1:
                    02:e0:d0:a5:96:3d:79:e2:d4:b0:ce:a0:30:fc:71:
                    4f:2e:b9:42:06:31:1f:75:d5:51:56:28:ef:75:4f:
                    70:2b:cd:ed:11:3a:13:c7:c0:4b:d1:58:e3:fa:9b:
                    34:dd:2f:be:1b:ea:1e:55:5c:e3:6d:b7:1b:c5:fb:
                    4c:05:eb:9f:57:7c:6c:32:ea:18:65:27:b2:b3:32:
                    a1:70:6e:e7:20:12:08:75:40:43:ca:f1:32:1c:b6:
                    7e:62:1a:40:f3:14:78:22:6e:b8:47:b9:3a:78:d7:
                    e7:ae:67:01:e5:26:b3:c2:b6:ff:17:29:76:d0:b2:
                    2b:f7:9f:18:9b:5a:97:e8:b1:26:95:ea:e2:4c:15:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6E:00:82:E6:05:FA:56:54:82:05:6E:72:68:73:2A:F6:58:5D:97
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/834cec14-31c8-42fb-ab06-5c07ee79d6d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:647::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:b2:37:29:fa:5f:9f:b1:6e:9e:00:f0:f4:04:d7:8e:a7:53:
         40:40:0d:6d:20:b0:22:c5:a6:37:ea:c7:a8:11:bf:74:b9:fd:
         ff:b5:ed:32:ee:05:8c:8f:71:30:5e:2c:0d:ae:06:4e:38:50:
         b9:3d:e5:28:50:23:48:6e:b7:01:b4:c1:65:a3:47:fd:82:3e:
         c4:18:0d:68:fe:48:3f:b4:35:d3:60:a0:e0:3b:e7:31:59:33:
         91:ec:f8:10:12:13:f8:2b:da:1a:f1:55:60:97:b9:8f:b2:3e:
         ef:2d:3d:46:58:d8:5c:42:1b:99:cb:8e:c4:8f:fe:06:19:ae:
         f7:4a:bf:86:7a:5c:45:19:f4:f4:a1:b5:0a:a1:3d:16:24:be:
         42:8b:26:6e:5e:80:4a:d6:6c:17:b3:d9:18:14:3a:cb:8d:45:
         37:27:f1:5d:be:b2:ca:c2:f2:24:43:60:aa:a0:44:a3:b2:4f:
         fa:32:36:b9:ec:d2:d5:ad:ac:0b:4c:aa:f1:52:fa:c3:82:d6:
         95:6d:ce:7b:31:68:d2:2f:56:9b:d1:3c:00:c7:d8:c1:ea:27:
         0b:07:0f:bd:49:f1:4c:c5:b6:74:0a:ee:d5:9e:d5:b6:8b:c1:
         79:6c:b9:34:fd:d9:a2:cb:d6:24:7f:51:f0:82:c9:3b:91:51:
         ba:e6:ec:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 4 23:14:41 2026 by rpki-client