Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e5280eeb-f2f8-4857-afde-734a5987207a.roa
File:                     e5280eeb-f2f8-4857-afde-734a5987207a.roa (raw, json)
Hash identifier:          n8Jds3WbA+Yax6jNrKQMrTntnhAM38Jn2mji5Bj6YtE=
Subject key identifier:   6E:A5:E2:E2:CC:2E:B3:66:2D:EB:EE:DB:84:B9:9C:9C:74:EC:42:C9
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       21C75305920D934B1EA0D64F384E4E3310A8BE37
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e5280eeb-f2f8-4857-afde-734a5987207a.roa
Signing time:             Thu 15 Oct 2026 03:10:35 +0000
ROA not before:           Thu 15 Oct 2026 03:10:35 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     21664
IP address blocks:        2605:9cc0:c1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c7:53:05:92:0d:93:4b:1e:a0:d6:4f:38:4e:4e:33:10:a8:be:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Oct 15 03:10:35 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=d37591771d2b4e67c56e06aa618a419cdf733d499c0ef509392b30039e930dc2, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:20:57:fc:c9:60:18:f4:71:b8:45:83:1b:
                    74:e8:90:af:5d:b1:02:39:2b:a0:68:93:3c:56:15:
                    03:ff:8b:ce:f2:da:24:67:1a:9c:d6:82:3d:bd:ee:
                    db:0c:59:cd:e8:4c:fa:b7:7c:3d:9d:6d:9c:dd:70:
                    02:75:cf:42:d9:39:92:9f:9f:42:93:03:90:ad:59:
                    3a:3e:6e:c4:e9:84:95:7f:86:f2:e2:f4:8f:1d:3c:
                    3b:d3:9f:cc:94:af:7a:50:f6:47:f5:39:8b:0b:28:
                    52:5f:6d:22:fb:76:9a:96:f1:2c:35:7e:d6:9f:c2:
                    2d:3d:64:cb:0b:a9:86:b2:f4:35:eb:b7:a5:59:b8:
                    90:74:c7:0b:cd:ac:9e:ff:2b:f1:fb:e3:a0:df:ed:
                    ae:cd:f0:01:38:80:d2:e8:84:ab:a9:d2:60:93:ba:
                    03:88:11:53:ab:e6:51:ba:d2:e1:dc:ef:e6:31:e8:
                    2c:a2:0e:90:46:86:42:ee:2e:ff:68:c3:1c:06:69:
                    62:92:7f:e0:06:ca:c9:15:9c:61:28:04:62:42:49:
                    18:67:a6:fd:21:60:64:0b:f2:08:c3:02:87:7c:36:
                    38:b2:05:2f:3e:c7:8e:17:cd:98:65:29:91:7e:91:
                    29:25:f5:fb:52:3d:62:bc:8a:56:8e:40:3e:2d:8c:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A5:E2:E2:CC:2E:B3:66:2D:EB:EE:DB:84:B9:9C:9C:74:EC:42:C9
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e5280eeb-f2f8-4857-afde-734a5987207a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:42:a8:3f:58:e4:47:1f:52:7a:4b:68:9d:37:b5:e0:00:6f:
         5d:15:12:8e:b8:ce:07:e1:80:c3:0a:8a:80:8f:6b:3d:29:52:
         4a:5f:ef:29:dd:2c:32:05:2d:f2:d9:57:2a:5e:3a:98:8c:31:
         bc:8c:e7:92:1d:9a:a1:55:84:cc:f0:44:f6:d9:3b:da:4f:ba:
         eb:ab:41:b9:24:1b:bd:e5:78:b8:52:7c:8f:16:1d:cd:86:36:
         3e:3b:cc:3b:fa:c4:1f:93:17:59:f6:37:77:ef:63:35:e7:d4:
         ab:34:58:fa:22:e2:67:2a:b5:15:16:cc:63:41:53:d8:f6:b2:
         f5:13:71:c1:14:19:ca:64:90:75:7a:fe:43:5c:5d:a6:de:0e:
         66:aa:1d:be:1a:2a:92:ee:3e:b3:9d:94:8b:1f:67:6f:e3:6d:
         94:26:17:7f:e9:de:49:08:ca:7e:88:9b:25:09:ae:d3:bd:81:
         92:88:9a:72:17:b9:e0:24:ee:ce:24:ba:48:c2:8d:40:12:90:
         69:01:7b:ac:a9:df:57:39:7a:1d:7b:14:94:7b:af:f9:9e:55:
         15:07:0d:27:c3:ee:2c:38:fc:63:b0:98:7e:63:f0:8c:ce:42:
         76:c6:98:eb:ec:12:1e:be:b5:3e:f7:f7:7f:4d:e2:f2:34:b1:
         b9:cc:98:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 00:43:44 2026 by rpki-client