Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c319ba0a-ea65-46fe-845d-c4e2bb1f097e.roa
File:                     c319ba0a-ea65-46fe-845d-c4e2bb1f097e.roa (raw, json)
Hash identifier:          qYBpWFAaxWRcWNzsftmyFthbQG2Zzzq8lm5NMgME5fA=
Subject key identifier:   25:23:C8:F3:22:7B:6B:1B:58:DC:60:61:99:D3:20:77:C5:3F:ED:96
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       2F3E7A00D27D3166BC90EC56E78AA8271274EB34
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c319ba0a-ea65-46fe-845d-c4e2bb1f097e.roa
Signing time:             Sun 11 Oct 2026 14:50:03 +0000
ROA not before:           Sun 11 Oct 2026 14:50:03 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:648::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3e:7a:00:d2:7d:31:66:bc:90:ec:56:e7:8a:a8:27:12:74:eb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 11 14:50:03 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=f6661363096e6bf769d541a16230d6f698cecfced1c7d76e5f1bbc5022968c33, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:fc:a6:88:48:47:8b:b7:f2:89:15:8d:d5:
                    56:6b:84:5f:b3:e4:b0:52:44:bc:27:01:9e:81:24:
                    53:85:e6:18:29:4e:19:e9:fb:7b:9a:30:8c:bd:f0:
                    42:6b:0f:a0:10:b0:6d:d5:d7:c7:fb:85:2e:cf:30:
                    63:a9:15:03:5d:21:50:32:f4:23:b7:9c:ee:48:80:
                    c2:ae:88:14:07:ec:ca:5d:69:12:92:88:93:cc:a6:
                    c8:55:c1:ff:2c:a3:7b:c3:bc:9c:f8:53:c5:20:f8:
                    cc:bf:c4:2d:41:62:c6:57:89:b1:84:39:13:ec:51:
                    23:5e:83:e9:00:36:22:42:f7:4a:ab:2b:17:77:23:
                    e2:c3:11:94:4f:22:73:82:a4:20:c5:35:86:4c:dd:
                    55:36:5e:fd:20:96:b9:12:dd:08:45:7d:f3:0e:9f:
                    cc:d9:1e:72:7f:a6:02:5b:6f:e9:a9:54:7d:f7:42:
                    50:47:c2:fa:d0:d8:73:a5:b2:bb:4e:ff:c6:68:8a:
                    53:82:eb:5d:db:a0:79:ee:f9:6b:e5:34:9c:9d:dc:
                    ea:96:33:8d:c6:1f:51:ab:32:68:d7:c7:77:d5:dd:
                    40:ae:dd:be:9f:5e:31:ed:b5:78:da:86:39:96:1c:
                    a2:01:5e:bd:d1:38:a2:5c:d6:41:d8:2b:b5:cd:b7:
                    41:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:23:C8:F3:22:7B:6B:1B:58:DC:60:61:99:D3:20:77:C5:3F:ED:96
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c319ba0a-ea65-46fe-845d-c4e2bb1f097e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:648::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:b3:fe:a7:c8:37:07:f5:27:d8:9a:5f:f5:f2:08:6b:bb:de:
         fa:67:19:ed:9a:ab:58:2f:ce:a9:5b:f2:43:f1:0c:e6:bc:b4:
         77:e7:1f:17:d3:c7:e6:6a:2a:26:98:1e:5f:24:ba:91:3d:47:
         af:bd:dd:d0:f8:e7:f4:c0:dc:33:da:27:15:ae:bb:b8:21:de:
         5b:6b:ed:30:9e:c3:1c:b7:06:fb:bd:ba:6d:10:89:8e:e1:97:
         69:b4:f3:5e:69:5c:52:1b:6f:c8:3e:54:cf:d6:a7:b1:6c:e3:
         0c:1f:b2:7a:00:84:6f:22:cd:12:2d:c4:e3:e2:2e:da:b4:2a:
         b2:96:26:11:b3:b0:fd:13:8d:3a:06:8c:31:97:83:cd:0f:8e:
         2f:e3:36:d6:54:5e:55:51:26:68:df:98:6f:51:dc:70:7a:2b:
         5a:ef:c2:d5:13:4a:36:9d:2e:57:b8:d7:8b:57:8c:5f:53:d8:
         e4:9b:0f:25:f5:38:54:5f:b2:70:2a:5e:9d:52:04:7c:e7:90:
         ae:59:33:aa:17:0c:10:b1:52:3b:6c:45:f7:e2:23:95:e5:44:
         b2:c8:61:4c:68:12:29:b9:a5:09:e6:43:67:95:d1:9f:29:40:
         b3:4f:d1:5c:6b:93:3a:66:7d:78:5a:27:d0:db:40:b2:50:4e:
         8f:6f:fe:40
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIULz56ANJ9MWa8kOxW54qoJxJ06zQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw
MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjYxMDExMTQ1MDAzWhcNMjcwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNjY2MTM2MzA5NmU2YmY3NjlkNTQxYTE2MjMwZDZmNjk4
Y2VjZmNlZDFjN2Q3NmU1ZjFiYmM1MDIyOTY4YzMzMS0wKwYDVQQDEyRmNzI0Mzc4
NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCLyfymiEhHi7fyiRWN1VZrhF+z5LBSRLwnAZ6BJFOF5hgp
Thnp+3uaMIy98EJrD6AQsG3V18f7hS7PMGOpFQNdIVAy9CO3nO5IgMKuiBQH7Mpd
aRKSiJPMpshVwf8so3vDvJz4U8Ug+My/xC1BYsZXibGEORPsUSNeg+kANiJC90qr
Kxd3I+LDEZRPInOCpCDFNYZM3VU2Xv0glrkS3QhFffMOn8zZHnJ/pgJbb+mpVH33
QlBHwvrQ2HOlsrtO/8ZoilOC613boHnu+WvlNJyd3OqWM43GH1GrMmjXx3fV3UCu
3b6fXjHttXjahjmWHKIBXr3ROKJc1kHYK7XNt0FhAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUJSPI8yJ7axtY3GBhmdMgd8U/7ZYwHwYDVR0jBBgwFoAUugzhfiM/vHHU
MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m
NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5
YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy
YTEzOWVhOTJiL2MzMTliYTBhLWVhNjUtNDZmZS04NDVkLWM0ZTJiYjFmMDk3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh
LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmBZzABkgwDQYJKoZIhvcNAQELBQADggEBAGqz/qfINwf1J9iaX/XyCGu7
3vpnGe2aq1gvzqlb8kPxDOa8tHfnHxfTx+ZqKiaYHl8kupE9R6+93dD45/TA3DPa
JxWuu7gh3ltr7TCewxy3Bvu9um0QiY7hl2m0815pXFIbb8g+VM/Wp7Fs4wwfsnoA
hG8izRItxOPiLtq0KrKWJhGzsP0TjToGjDGXg80Pji/jNtZUXlVRJmjfmG9R3HB6
K1rvwtUTSjadLle414tXjF9T2OSbDyX1OFRfsnAqXp1SBHznkK5ZM6oXDBCxUjts
RffiI5XlRLLIYUxoEim5pQnmQ2eV0Z8pQLNP0VxrkzpmfXhaJ9DbQLJQTo9v/kA=
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:46:11 2026 by rpki-client