Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa
File:                     0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa (raw, json)
Hash identifier:          JAit6sTBAZKJbZXfQVjCUjqnIBkdm8HRzoRqI+dxltA=
Subject key identifier:   2B:EF:AE:11:88:95:77:FB:ED:93:24:7D:71:6F:2C:6F:23:B2:45:94
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       3BFB67454B848042F8C2A3145257C1A482980763
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa
Signing time:             Thu 07 May 2026 00:00:03 +0000
ROA not before:           Thu 07 May 2026 00:00:03 +0000
ROA not after:            Wed 05 Aug 2026 23:59:59 +0000
asID:                     801
IP address blocks:        2631::/24 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fb:67:45:4b:84:80:42:f8:c2:a3:14:52:57:c1:a4:82:98:07:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May  7 00:00:03 2026 GMT
            Not After : Aug  5 23:59:59 2026 GMT
        Subject: serialNumber=7f3d3831aebf10e5c821989592d36698d2308a6ac3cff97b2a99f06654b18a06, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:16:a8:7d:5c:44:ff:fa:44:47:43:b2:cf:
                    f7:3b:b0:ec:b7:6e:c4:cf:13:a3:00:58:f5:a2:91:
                    10:3e:ec:04:b7:97:02:3e:5d:0d:46:d9:77:eb:38:
                    9d:29:2c:45:f5:e5:29:17:89:ac:a8:66:15:ab:a3:
                    75:e3:04:20:e9:17:b7:27:5b:ea:d0:89:9c:67:77:
                    c9:53:8f:0a:02:24:81:06:06:41:66:4d:a8:e0:5e:
                    e0:2a:ab:86:9a:07:df:75:c6:45:95:bd:88:b0:93:
                    a3:12:b8:1f:5b:60:15:72:31:1e:2e:c6:f1:7b:57:
                    09:3e:6a:8e:ef:4b:86:f6:64:b5:d0:95:c2:70:2d:
                    1d:b4:02:39:3c:14:2b:2f:7a:15:31:09:ca:59:68:
                    b1:56:dc:ed:f7:4d:45:d7:af:94:8d:c8:d9:86:1e:
                    ae:06:c6:9a:9e:11:28:81:9f:ed:38:74:1b:9b:0c:
                    b4:e2:26:46:53:0a:b7:16:f4:81:9f:50:82:0e:00:
                    b8:53:af:14:b2:34:7d:b0:f1:5d:8e:9e:0b:35:06:
                    33:2a:24:6d:af:3b:d7:6a:a0:79:c2:eb:1d:8b:c2:
                    d9:fe:30:f4:0d:63:86:78:1a:70:49:11:94:36:90:
                    b4:71:ac:f9:4f:35:61:1c:aa:d4:21:38:a0:c5:f6:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EF:AE:11:88:95:77:FB:ED:93:24:7D:71:6F:2C:6F:23:B2:45:94
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0a8c0f6d-d3df-4586-a874-ee20de7d1e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631::/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:55:a3:65:ee:49:c6:e9:10:50:87:96:6d:ee:aa:0a:76:a5:
         b7:48:9c:93:19:3a:20:6b:86:b9:86:4d:e3:0d:40:f5:3b:d0:
         43:94:ca:fb:58:92:e1:63:3d:51:27:4d:0b:a3:98:8a:32:e7:
         8f:0a:87:bf:2f:ca:1c:e8:60:db:b5:74:42:fd:55:87:61:61:
         75:80:ba:d8:c2:20:a0:cc:d2:83:dd:18:c5:c8:fe:4e:18:00:
         20:86:75:fd:aa:0c:55:1c:09:d2:3b:05:63:c6:b4:dd:54:ec:
         c7:a7:76:69:e1:fe:b4:43:86:c9:f0:a7:b7:e4:84:55:04:04:
         08:bf:0e:8a:c9:a9:ba:30:9f:b1:f4:9e:44:95:64:e4:29:bb:
         0d:e7:41:1d:7c:fd:56:32:67:2e:c2:db:42:a5:ad:e8:63:61:
         cb:d0:72:5a:f7:28:12:f9:b2:ae:f7:51:88:04:7d:e5:40:d6:
         18:29:97:8c:ac:9f:a2:36:5a:d5:18:9b:2e:5c:6c:e8:0c:40:
         c4:c7:c3:c8:dd:96:49:db:56:94:70:5b:a0:c9:11:d2:45:46:
         6c:30:df:e2:44:1b:32:f8:d6:c4:73:5a:f4:f2:80:3f:1f:ad:
         76:8e:10:0a:c8:0c:a9:6d:70:13:36:78:ee:da:85:77:38:c2:
         40:1a:76:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:52 2026 by rpki-client