Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e0ccd54-23cc-4939-b5be-1cf1c8ab6154.roa
File:                     1e0ccd54-23cc-4939-b5be-1cf1c8ab6154.roa (raw, json)
Hash identifier:          fgmInzuBRK9aoqluuZX2X4gtpJuFFljHB1XOb4357ik=
Subject key identifier:   13:D6:6A:0F:55:2A:CE:EA:09:06:00:4A:5C:99:93:D0:EB:8E:F5:4B
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5DAB92DC7E1B7924690455D9554C96B5EFA4C481
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e0ccd54-23cc-4939-b5be-1cf1c8ab6154.roa
Signing time:             Mon 20 Jul 2026 00:50:10 +0000
ROA not before:           Mon 20 Jul 2026 00:50:10 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ab:92:dc:7e:1b:79:24:69:04:55:d9:55:4c:96:b5:ef:a4:c4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 20 00:50:10 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=c80756425ffe2a82e83dc3cf3af43d72f4ccbbf1cc249d134755bde1023a54e5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:b2:e7:32:2b:c6:1c:c6:ed:0a:10:17:73:
                    c3:a0:8d:fc:49:e0:75:08:6c:3b:53:c1:71:e4:07:
                    6b:10:f4:d3:a0:67:1e:f0:24:0e:27:63:e3:72:ba:
                    11:e9:e8:22:7a:fe:73:52:bf:32:69:1f:df:63:6f:
                    17:2f:0d:de:af:2e:20:0e:31:d1:36:66:98:a0:55:
                    43:d1:43:3a:85:5b:f5:33:22:f1:df:4a:3d:d2:02:
                    92:25:c2:9c:21:78:66:0b:58:31:15:91:03:1b:cb:
                    ce:66:57:05:88:1b:59:5d:a3:f2:92:4a:8e:ca:d4:
                    6f:f7:d1:21:13:aa:e5:1d:0e:94:19:d5:9f:1c:c8:
                    01:b1:f1:22:92:d2:6e:0f:83:52:ce:57:c2:2b:93:
                    d9:39:cc:b1:f3:1d:51:e3:d0:04:f3:53:23:1b:b7:
                    7f:05:94:72:76:12:43:f9:97:6b:ed:62:b9:6e:29:
                    85:53:7b:f3:0b:8d:6c:19:60:c6:e7:1e:c6:14:ff:
                    0c:a2:2f:7b:05:92:9f:52:f8:8a:e5:56:fb:b6:5f:
                    fd:9d:ad:e3:9c:6d:d5:95:7e:90:3e:36:35:bc:a7:
                    b0:1d:cf:05:fc:e1:55:3a:32:12:a3:15:8a:d4:9a:
                    63:74:70:d8:3b:bb:92:d7:65:71:40:82:34:08:aa:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D6:6A:0F:55:2A:CE:EA:09:06:00:4A:5C:99:93:D0:EB:8E:F5:4B
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e0ccd54-23cc-4939-b5be-1cf1c8ab6154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6102::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:5a:13:46:be:4b:2c:ff:0c:9d:42:67:98:ec:5a:c8:70:e3:
         b1:e9:d6:68:67:1b:5d:cf:74:13:65:5c:16:d7:fb:c6:54:20:
         a4:f4:5d:2d:a8:e2:00:93:3e:f6:f5:98:45:5b:29:1e:93:7c:
         b0:b6:45:af:8b:c0:a5:59:04:6e:96:91:cd:a8:4f:fd:dd:b2:
         80:d6:51:63:8a:cf:79:13:f7:2d:71:47:e1:a3:59:c5:b3:3d:
         81:eb:4d:cf:c6:25:78:e8:57:8d:79:ac:28:1c:00:9f:7e:a2:
         0b:03:77:45:b5:5e:e4:c3:4c:b8:fe:57:35:a9:88:32:a4:37:
         bd:a1:a9:3d:b6:61:dc:fe:4c:5e:29:d9:78:c0:24:02:60:8b:
         3b:76:80:5c:51:96:93:f2:92:13:0b:cf:9f:14:33:97:7f:cd:
         7f:d1:2c:a6:50:2c:d5:7e:55:1a:af:c9:d5:e2:78:c4:13:1d:
         67:fb:2e:2a:32:ad:0f:fe:14:aa:7b:2e:e3:2e:05:4b:4c:74:
         9e:c6:a1:7e:db:62:78:cf:23:1a:97:a3:14:88:11:11:3f:51:
         b8:05:97:73:de:29:7d:88:a2:75:dd:4f:48:2c:75:e9:58:92:
         14:a2:1d:ca:a1:cc:e6:ab:40:2a:a1:98:85:60:b6:9e:bf:d4:
         31:46:3e:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:53:00 2026 by rpki-client