Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/82a18dd5-00bc-40e3-ba89-8910e171fffd.roa
File:                     82a18dd5-00bc-40e3-ba89-8910e171fffd.roa (raw, json)
Hash identifier:          8DPYi18CDWN6CvU29qJvBpFlDmt5PCrRxiDi2YA0znE=
Subject key identifier:   D2:07:FE:86:77:45:91:DA:17:5E:E8:0B:C1:A1:5D:30:9E:C7:5A:33
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       2A98A6F14FF4FF2789152A8D80E87ECA489A6A92
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/82a18dd5-00bc-40e3-ba89-8910e171fffd.roa
Signing time:             Thu 23 Jul 2026 14:50:05 +0000
ROA not before:           Thu 23 Jul 2026 14:50:05 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:9cc0:c1e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:98:a6:f1:4f:f4:ff:27:89:15:2a:8d:80:e8:7e:ca:48:9a:6a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 23 14:50:05 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=34ffca411b46bc4a2ef30083f936456f3e13af9393bcbe47dd42bcea88ac448b, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:b4:da:7a:25:98:42:d9:c8:86:74:d9:68:
                    66:40:b1:4e:4f:15:dc:aa:bd:c7:3e:f1:8d:33:4e:
                    77:71:18:be:a7:fb:84:2b:4b:29:49:03:7b:5a:16:
                    1c:6f:53:55:3b:b8:44:1a:5f:4d:b2:b4:b3:36:6e:
                    68:56:ec:30:67:6f:8c:d9:d8:d7:7e:56:99:96:f7:
                    e6:3e:9e:b5:9d:bc:bb:91:36:96:20:95:29:e3:23:
                    85:23:44:30:b3:9f:d1:ed:17:3f:7a:79:0b:00:a0:
                    30:4d:76:79:9c:6a:35:54:fb:38:2a:2c:28:c3:fe:
                    81:b1:85:c2:b3:91:ae:c3:3a:59:26:70:c6:18:ff:
                    88:42:54:36:24:d4:6d:33:e6:00:28:8a:32:0a:f1:
                    35:9b:39:e0:25:a1:f9:8e:aa:68:8e:52:7f:72:10:
                    f7:5a:d3:69:da:ec:b8:ce:b6:67:10:8d:80:cc:ce:
                    e3:96:62:62:7b:0c:3a:0c:09:fc:84:2f:0b:fd:4d:
                    df:3f:b8:20:d9:75:c6:c6:1d:6e:0e:0b:58:65:e9:
                    1c:3f:2e:7f:fe:3a:9d:33:04:3b:25:72:93:c5:10:
                    44:4a:f7:63:49:1f:58:84:19:fc:eb:7f:49:bf:c0:
                    69:26:eb:84:fa:5e:dc:1a:bb:29:d3:7c:1e:6f:c9:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:07:FE:86:77:45:91:DA:17:5E:E8:0B:C1:A1:5D:30:9E:C7:5A:33
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/82a18dd5-00bc-40e3-ba89-8910e171fffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:c1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:fd:09:ef:9f:50:5b:b2:db:f7:af:f0:2c:ff:e4:23:30:14:
         4c:3e:b2:14:bd:2f:d5:f0:ea:a2:ab:5c:3b:f7:f1:bd:e4:03:
         79:f3:27:13:c2:cc:44:bd:a5:30:94:8e:ee:c2:1a:d7:fa:b9:
         2f:9c:34:3a:c2:21:68:71:5f:0c:60:39:7a:34:58:b4:9d:8b:
         db:7f:bb:ec:54:44:a6:55:e9:bf:c5:b9:38:8d:24:64:8f:e2:
         e0:c6:39:95:f1:b7:51:dc:5f:1b:ee:c1:a6:52:06:fd:6f:75:
         dc:98:2a:0d:8e:f4:e3:cf:bf:f8:50:05:3e:d2:30:6b:1a:50:
         2b:75:a7:eb:8f:40:a6:0e:4b:32:82:1a:b8:c5:dd:66:b8:9a:
         11:1d:ac:28:d1:e1:1b:aa:86:50:0e:d4:6d:39:07:9a:f9:bd:
         ff:1d:29:25:de:c3:cb:44:85:16:f4:5a:8b:64:94:01:a2:c1:
         ab:4f:61:ea:05:7a:56:0b:b5:4d:d3:f6:68:8f:dd:1c:09:d0:
         93:f0:04:cb:47:ba:65:3a:e9:01:e9:ec:e3:13:ca:c5:c9:c0:
         e9:5e:ec:fe:3e:43:8e:64:e5:d2:61:fb:67:0c:5f:58:f9:54:
         7f:05:39:47:ac:97:ce:a8:be:ce:9d:49:4d:8c:a0:45:1f:7f:
         9c:0a:9c:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:22:03 2026 by rpki-client