Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/462f61ba-5748-496a-8795-61c32daf9775.roa
File:                     462f61ba-5748-496a-8795-61c32daf9775.roa (raw, json)
Hash identifier:          VuE3E35wKc7FsTsQe8LquHPuEiA/w55Pd2Fo9xlT/6g=
Subject key identifier:   23:FB:35:69:48:DB:41:AA:7E:CC:8A:57:7E:6D:5A:C0:2D:40:A0:61
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       303B1462C6059141BF35368D39E31F79F756543F
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/462f61ba-5748-496a-8795-61c32daf9775.roa
Signing time:             Mon 04 May 2026 14:50:07 +0000
ROA not before:           Mon 04 May 2026 14:50:07 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c17::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3b:14:62:c6:05:91:41:bf:35:36:8d:39:e3:1f:79:f7:56:54:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May  4 14:50:07 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=b8420d464a698c674dff821c0bf8acab0b1653aa8cd5ff377391e12d7ab5711e, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:64:aa:51:61:9a:8a:44:9d:01:c5:f3:74:
                    64:b5:b4:bf:7e:92:db:0f:79:02:ff:b1:85:b6:e0:
                    77:5a:da:5b:6b:1e:bf:f6:3b:a3:8f:f4:5f:14:60:
                    3d:4e:62:3b:eb:9c:c5:01:ca:9f:1f:c5:7c:82:7b:
                    ff:40:1f:02:48:58:41:7e:3f:6a:65:7e:d4:de:87:
                    e7:86:98:cc:dd:af:e9:de:57:4a:0a:1c:3f:ed:d0:
                    00:a3:f4:93:af:5f:06:d5:0f:ac:de:eb:01:f4:13:
                    4f:2d:7f:f5:01:4e:90:17:5f:87:1d:50:d4:5e:ba:
                    fa:e5:6f:38:36:b1:b8:92:c5:95:d9:29:89:9b:e7:
                    28:d7:b3:ac:e5:bd:65:dc:9f:9c:c1:7c:49:a0:75:
                    12:cb:83:82:fb:2f:3b:12:be:39:4d:e7:b0:97:00:
                    1e:f7:d5:be:14:be:5f:b4:fe:36:10:81:d5:1b:f0:
                    be:aa:2c:e7:cd:da:08:44:d4:7e:53:5b:ae:1e:5a:
                    11:25:82:5b:71:97:fa:f4:76:c3:ab:c3:22:b4:41:
                    a0:c9:a6:94:1d:cc:0b:61:2f:7e:24:c1:be:68:2d:
                    91:8c:d3:23:1a:01:31:eb:9e:f7:26:44:d3:23:5b:
                    db:1a:24:28:b4:e7:4f:5d:34:59:8d:cc:6a:31:fd:
                    54:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FB:35:69:48:DB:41:AA:7E:CC:8A:57:7E:6D:5A:C0:2D:40:A0:61
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/462f61ba-5748-496a-8795-61c32daf9775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c17::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:fd:16:9a:58:e7:ef:e9:3f:fa:44:90:cc:96:d3:ee:a7:9a:
         51:aa:a9:d0:a2:38:d7:37:eb:5b:a5:a8:ac:5a:e4:59:01:fe:
         f3:c3:43:9f:02:db:11:79:f4:33:8b:f8:81:3a:6f:41:14:6a:
         09:42:e6:15:05:1a:5c:1f:cd:35:be:dd:2b:5e:95:4e:f1:45:
         e9:b8:1a:8b:7b:15:81:70:67:76:01:5c:29:02:33:50:94:2a:
         16:2c:16:a7:14:ca:a7:5a:15:16:42:cf:6a:7d:10:3b:48:24:
         49:58:81:43:f7:67:20:3c:2c:2d:76:99:82:71:d1:2d:bf:22:
         06:1c:ba:88:f1:b5:1d:78:14:b4:49:95:92:0e:79:e1:29:6a:
         c3:45:5e:f7:3c:fc:19:3f:e0:6e:e6:94:b7:5e:83:dd:35:f7:
         b1:fa:00:6c:17:86:04:b6:2d:13:6e:51:a3:e4:55:c9:98:1d:
         cf:13:52:23:9f:28:c9:13:4f:ed:13:34:4c:56:29:df:0f:d8:
         83:a6:26:96:fe:9a:4e:4b:ac:d1:6b:ca:32:f8:f8:89:84:9f:
         1f:e8:ca:42:8e:a4:ea:62:5d:32:34:13:e4:ec:d8:1e:f3:f0:
         60:41:34:a8:62:9d:a0:1a:2d:82:86:4e:65:64:28:bb:54:29:
         d7:25:4e:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 23:13:49 2026 by rpki-client