Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89338d8b-8f81-4ddb-b184-90f1c5ca54ee.roa
File:                     89338d8b-8f81-4ddb-b184-90f1c5ca54ee.roa (raw, json)
Hash identifier:          RqvJSojbWm86oL5WiRCRlxquB+4q88MC7lc88CU2adI=
Subject key identifier:   10:1D:77:B2:4C:43:FC:75:04:1F:C3:3F:90:AC:51:5F:C9:AC:44:69
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       2445B1B9775E20BC62C63BBA0DEF625C31197B08
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89338d8b-8f81-4ddb-b184-90f1c5ca54ee.roa
Signing time:             Fri 07 Aug 2026 04:00:08 +0000
ROA not before:           Fri 07 Aug 2026 04:00:08 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c24::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:45:b1:b9:77:5e:20:bc:62:c6:3b:ba:0d:ef:62:5c:31:19:7b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug  7 04:00:08 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=d200febef166c6152c9fe1d8cb4deb5c50874fb4e1932516198c994838f22704, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:48:c9:f5:66:15:c1:bb:d6:ff:89:27:05:
                    9d:ac:ad:5f:c4:7f:df:70:9d:8d:1b:ed:e2:51:3d:
                    7d:bf:07:dd:1f:3f:f4:3c:6e:a0:d5:dd:20:ee:42:
                    60:fb:25:83:1a:d6:39:ed:37:37:e7:15:9b:3c:69:
                    09:2f:f5:3b:a7:b9:47:d7:f6:ec:7f:70:de:81:0f:
                    ae:e3:32:c6:ec:0a:c5:b0:03:cd:d4:ec:cb:5f:39:
                    6b:4c:8a:47:3d:ff:71:35:23:a5:bb:3c:6a:bc:c9:
                    5c:50:27:f1:c9:46:6f:f4:5e:e8:b2:87:32:83:80:
                    bf:be:2a:41:d7:4a:4e:8b:5b:41:39:cd:81:8b:05:
                    ed:4a:52:38:25:ed:62:ec:0f:15:58:7b:99:3a:61:
                    31:f8:98:d9:a6:da:d8:72:00:0e:66:a1:37:85:01:
                    66:c6:2f:fb:ae:40:69:5a:b4:4e:57:c4:ca:a8:ce:
                    0f:f8:0e:6f:bb:e4:1c:e2:73:ab:c9:48:6e:2d:2b:
                    19:26:56:b8:ef:cb:11:05:f6:93:ca:41:51:ce:d1:
                    63:5d:b5:2d:26:df:80:41:b2:ea:19:21:c1:39:71:
                    ae:87:8a:1b:8f:da:51:4f:f4:8f:fa:70:73:1f:bc:
                    7c:3e:05:b6:42:0f:65:8a:2b:a3:e7:1c:96:3f:7c:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1D:77:B2:4C:43:FC:75:04:1F:C3:3F:90:AC:51:5F:C9:AC:44:69
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/89338d8b-8f81-4ddb-b184-90f1c5ca54ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c24::/46

    Signature Algorithm: sha256WithRSAEncryption
         02:d6:9b:50:52:36:c0:00:bc:d9:df:18:c6:63:77:54:ef:f5:
         81:2d:0f:c0:83:a4:b2:bb:fc:6a:db:51:88:62:7d:c3:bd:b3:
         e6:70:de:d3:e5:b4:cf:89:91:f5:74:91:20:92:6d:6b:54:c1:
         89:88:e2:40:88:b6:a4:e0:c3:d8:6d:5b:c9:c3:fc:e7:e2:54:
         b4:a9:14:0e:0d:f5:92:e7:0a:30:24:dd:2e:d8:eb:01:7e:ef:
         2a:d4:d5:bd:a6:6a:de:60:d9:3d:cc:b0:22:67:33:7d:b5:51:
         3a:3e:de:3c:d3:72:0c:0e:01:ca:fc:5a:f6:b6:a7:a2:ba:4c:
         61:28:d9:f4:f4:d2:2f:48:e3:ee:8b:c2:cc:3f:3a:fa:9b:54:
         d4:5c:a9:0a:dc:7a:7c:ce:fc:94:f8:0f:1c:54:e6:b2:18:a7:
         12:40:ac:5b:4f:72:9d:df:37:84:aa:ab:37:51:67:ac:92:34:
         79:8e:d4:67:88:9f:96:0a:21:3f:53:75:5b:0d:01:e3:b9:59:
         12:38:40:b1:18:34:bf:cc:a1:27:43:70:81:95:d9:c0:65:57:
         ad:4b:64:ea:ed:1f:e2:8d:d5:56:c9:51:74:3f:42:6c:13:ac:
         d5:ae:95:2a:11:70:52:27:40:f3:0e:ef:7e:be:f3:7d:b9:15:
         59:de:c0:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 7 07:45:19 2026 by rpki-client