Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa
File:                     b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa (raw, json)
Hash identifier:          +yc56PLURKRmQtNRnN0shifEgJXQHQcPRJU+ZdU11hI=
Subject key identifier:   53:39:12:B1:A3:E5:BB:47:72:2F:0C:B8:D0:95:1F:97:4C:09:C6:33
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       44924AC40C9A13EB503532E723493561E83C8D07
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa
Signing time:             Fri 07 Aug 2026 04:00:38 +0000
ROA not before:           Fri 07 Aug 2026 04:00:38 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:385::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:92:4a:c4:0c:9a:13:eb:50:35:32:e7:23:49:35:61:e8:3c:8d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Aug  7 04:00:38 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=194e8202bbe647c5f5371397074f5f000e5694896be2a25c33886b505c80f821, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:5a:d1:fc:91:34:28:47:c9:70:b8:fa:f9:
                    76:59:3e:a5:fc:19:5a:0b:9a:50:4d:50:9e:15:3a:
                    7d:fc:b0:2f:7b:3b:a3:0a:a5:d3:e7:da:1a:59:72:
                    06:b9:14:d2:73:70:ce:66:e6:a3:fb:91:74:6d:8a:
                    b9:ab:ed:27:89:4c:6a:d4:dd:dd:c3:59:ee:eb:f5:
                    17:74:32:e5:47:3e:2f:db:69:fa:dc:55:6b:aa:df:
                    62:e4:60:b7:e1:02:da:22:c3:5d:db:81:89:96:13:
                    ca:73:bf:8f:55:39:ce:e0:22:72:68:44:39:12:86:
                    f2:ac:7e:34:8a:1a:e9:52:79:b6:25:94:04:0a:2b:
                    32:52:b1:b0:43:0b:fb:52:c6:79:61:79:0a:1e:46:
                    5f:bc:7b:30:e7:27:3f:b8:c2:02:3e:c4:f2:c3:e4:
                    ff:fa:90:3f:4d:99:bd:04:5e:7a:d3:3e:76:fd:d3:
                    68:94:ba:1f:c0:be:bb:73:ad:a5:44:96:99:6d:e6:
                    ee:71:1d:23:d1:e2:e3:ff:dd:38:76:22:1a:23:30:
                    f2:14:fc:31:80:13:56:78:30:94:bc:00:52:9c:41:
                    99:69:6d:ff:99:a6:be:aa:cd:a1:e5:98:d7:f1:e3:
                    03:7c:74:b0:13:4f:60:dd:60:e0:50:10:73:8c:c5:
                    f6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:39:12:B1:A3:E5:BB:47:72:2F:0C:B8:D0:95:1F:97:4C:09:C6:33
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b3109e99-f1f4-4c3b-b50d-2d9a93533a10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:385::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:7d:40:96:2f:44:98:af:77:1a:63:12:60:dd:5c:a8:e2:81:
         4a:0a:57:29:d9:1d:c0:37:70:51:e8:bf:57:64:6f:4b:e2:fd:
         29:40:46:d3:1b:8f:b6:5f:0d:3a:32:e1:89:f5:e8:83:31:fe:
         e0:20:73:39:e2:61:ed:5b:44:bb:92:3e:50:43:17:9d:8e:2a:
         33:7d:bf:08:aa:57:48:95:0b:78:0e:bb:10:ea:cd:e3:aa:71:
         3a:05:fc:b4:9e:ab:7a:c1:bc:ed:9d:f5:88:b1:82:1e:24:7f:
         96:20:92:f5:81:a4:bd:4b:2b:74:b4:06:a3:e5:3f:db:e4:46:
         f8:c7:a0:33:08:49:26:cb:4c:27:1a:25:a2:23:32:60:24:c5:
         02:ea:5b:93:2a:27:95:71:ab:fb:18:95:23:17:07:3d:5e:ac:
         77:35:24:ad:44:f2:7c:c4:43:32:5d:6b:f1:5d:d6:08:1a:88:
         96:ac:a9:9c:f1:52:28:cb:54:02:87:ba:38:4d:33:c0:d9:97:
         f8:49:38:d1:62:34:0e:f2:a2:0f:02:e5:61:ab:90:8b:1a:4a:
         8e:9f:20:40:a9:ab:e3:9e:23:7a:a0:7e:70:2f:9b:02:c2:c7:
         f3:7d:2f:c7:e3:80:2e:6c:8c:0b:08:75:d2:66:d3:32:0a:9d:
         21:2b:1d:ec
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIURJJKxAyaE+tQNTLnI0k1Yeg8jQcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYwODA3MDQwMDM4WhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxOTRlODIwMmJiZTY0N2M1ZjUzNzEzOTcwNzRmNWYwMDBl
NTY5NDg5NmJlMmEyNWMzMzg4NmI1MDVjODBmODIxMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqhFrR/JE0KEfJcLj6+XZZPqX8GVoLmlBNUJ4VOn38sC97
O6MKpdPn2hpZcga5FNJzcM5m5qP7kXRtirmr7SeJTGrU3d3DWe7r9Rd0MuVHPi/b
afrcVWuq32LkYLfhAtoiw13bgYmWE8pzv49VOc7gInJoRDkShvKsfjSKGulSebYl
lAQKKzJSsbBDC/tSxnlheQoeRl+8ezDnJz+4wgI+xPLD5P/6kD9Nmb0EXnrTPnb9
02iUuh/AvrtzraVElplt5u5xHSPR4uP/3Th2IhojMPIU/DGAE1Z4MJS8AFKcQZlp
bf+Zpr6qzaHlmNfx4wN8dLATT2DdYOBQEHOMxfYXAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUUzkSsaPlu0dyLwy40JUfl0wJxjMwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2IzMTA5ZTk5LWYxZjQtNGMzYi1iNTBkLTJkOWE5MzUzM2ExMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzAA4UwDQYJKoZIhvcNAQELBQADggEBAH19QJYvRJivdxpjEmDdXKji
gUoKVynZHcA3cFHov1dkb0vi/SlARtMbj7ZfDToy4Yn16IMx/uAgczniYe1bRLuS
PlBDF52OKjN9vwiqV0iVC3gOuxDqzeOqcToF/LSeq3rBvO2d9Yixgh4kf5YgkvWB
pL1LK3S0BqPlP9vkRvjHoDMISSbLTCcaJaIjMmAkxQLqW5MqJ5Vxq/sYlSMXBz1e
rHc1JK1E8nzEQzJda/Fd1ggaiJasqZzxUijLVAKHujhNM8DZl/hJONFiNA7yog8C
5WGrkIsaSo6fIECpq+OeI3qgfnAvmwLCx/N9L8fjgC5sjAsIddJm0zIKnSErHew=
-----END CERTIFICATE-----
Generated at Fri Aug 7 07:46:55 2026 by rpki-client