Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c9cb2756-d36d-471b-ae4b-001e9e0a9dca.roa
File:                     c9cb2756-d36d-471b-ae4b-001e9e0a9dca.roa (raw, json)
Hash identifier:          2Dsn5GZNTxddIaT6/YpWK/xA7p7pfzu18f+getvfLO4=
Subject key identifier:   13:E8:43:F8:16:7B:E0:AE:D3:71:5B:98:4E:2F:25:93:82:74:56:AC
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       0B918C5A9EBC7ACB9C75018CF80ECB09F7650DAF
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c9cb2756-d36d-471b-ae4b-001e9e0a9dca.roa
Signing time:             Wed 01 Apr 2026 20:21:38 +0000
ROA not before:           Wed 01 Apr 2026 20:21:38 +0000
ROA not after:            Tue 30 Jun 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2605:9cc0:41a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:91:8c:5a:9e:bc:7a:cb:9c:75:01:8c:f8:0e:cb:09:f7:65:0d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Apr  1 20:21:38 2026 GMT
            Not After : Jun 30 23:59:59 2026 GMT
        Subject: serialNumber=aff9f749c55c07fd061fc3caac15b6e5c87758f995b45bec9d5a33e22e1db4d9, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:0d:30:28:27:70:c3:e3:e3:ce:d3:63:ad:
                    65:4b:ca:71:a8:71:7f:c2:6e:a1:8b:fc:d1:e6:91:
                    95:18:d4:85:00:af:07:d6:40:dd:25:95:e0:54:50:
                    77:cb:9a:d6:d8:9b:bf:c6:42:65:75:c6:6a:2b:80:
                    ef:d4:38:af:8b:42:42:d0:11:24:d5:80:fd:b7:75:
                    1d:7c:cb:c2:48:45:c5:2e:89:53:c4:8a:26:73:1e:
                    29:5b:0f:b2:a0:4f:bd:d9:50:e4:94:36:73:4e:c2:
                    81:de:7b:82:ed:c3:8a:91:55:35:6e:9c:2e:9b:4b:
                    f6:10:6a:77:f0:2d:51:87:bf:fd:33:5e:b8:12:01:
                    e2:22:f4:90:26:90:77:05:5b:32:10:b8:29:14:62:
                    c0:73:62:d9:c2:8d:6e:0a:df:01:c1:91:be:02:1f:
                    f3:40:4d:68:39:fd:cc:e3:3e:6f:05:f4:8d:7a:de:
                    e8:6d:3c:fa:a4:a8:c3:9b:35:fe:69:fd:3a:cd:8d:
                    49:01:25:82:d0:df:6d:4e:7c:ce:2e:cc:29:eb:b0:
                    b8:b6:21:df:45:fe:ff:50:48:c5:2f:09:ee:08:96:
                    38:5c:f0:90:86:f3:94:84:e8:ed:a4:28:f5:4c:34:
                    21:e3:8e:dd:3f:d9:da:54:b3:3c:9b:cb:33:cd:73:
                    d2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E8:43:F8:16:7B:E0:AE:D3:71:5B:98:4E:2F:25:93:82:74:56:AC
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c9cb2756-d36d-471b-ae4b-001e9e0a9dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:41a::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:5a:fe:5d:2e:ed:ab:c8:e1:e6:7b:c7:a3:15:74:d0:28:8b:
         5d:b2:40:e6:41:8d:b7:eb:00:b6:be:85:8d:f8:dc:e3:8a:75:
         43:f9:ca:ff:9a:4f:1d:5c:13:5a:bf:ee:0f:43:77:b6:5e:4e:
         40:dc:1f:a4:55:b3:d8:a9:86:29:56:69:75:34:3f:51:0e:08:
         b3:33:4d:ac:1b:5e:8e:d9:38:ae:e3:54:42:c4:06:db:b7:92:
         9d:21:76:c6:43:82:0b:46:3b:9c:12:b3:cf:af:71:fe:03:86:
         d0:36:8f:d8:f2:a6:90:7a:3f:83:0f:64:b8:74:10:10:1d:b1:
         17:30:08:95:52:cd:5c:e0:63:4f:a3:03:75:e4:67:32:5e:fd:
         9f:7d:78:2f:b1:65:30:6c:3c:70:1a:3d:08:16:2c:62:d7:af:
         35:60:87:05:3a:56:d4:a4:9c:e9:38:20:31:18:d7:19:7d:f5:
         55:62:db:ea:c8:15:34:21:6b:76:d0:96:be:80:4f:47:9a:c2:
         14:ec:8e:13:cd:c3:7d:2a:86:b0:d2:50:da:e5:46:37:4c:a3:
         c9:85:f0:0c:38:76:d7:82:e2:e3:44:6f:56:a6:70:66:bc:73:
         71:07:c1:5b:bb:82:c0:ea:cb:10:93:19:af:3f:3b:0d:5e:bf:
         ff:ba:72:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 4 12:11:18 2026 by rpki-client