Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa
File:                     2b654b1b-1b20-4e58-b50d-f23964f25963.roa (raw, json)
Hash identifier:          JDjlIaaloDu1aFOZFKn0wzKQ23il9SirI79QhXUIDIE=
Subject key identifier:   A7:6F:ED:EF:71:2D:53:4A:48:9D:B2:94:E1:85:8E:C4:56:2B:4C:4A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       51AE62789BA4DBFD0FC51BD4020D1BEACAC9E84C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa
Signing time:             Mon 04 May 2026 15:20:03 +0000
ROA not before:           Mon 04 May 2026 15:20:03 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6115::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ae:62:78:9b:a4:db:fd:0f:c5:1b:d4:02:0d:1b:ea:ca:c9:e8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May  4 15:20:03 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=35bf7d0794c70a092305bfbe201a80dbe452407f5f216c7ba99c3fcbdbb72089, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8b:5b:8d:a5:88:d1:f5:c6:60:7a:b6:38:b3:
                    38:93:d1:fd:7f:59:67:68:9c:1d:e6:34:eb:e9:c5:
                    b6:74:fe:1e:72:1b:fa:52:2b:d1:14:16:f6:c6:48:
                    91:24:a9:36:68:5a:cc:f0:48:f4:66:e4:c8:aa:c1:
                    fb:5a:d6:cf:25:3f:4e:cf:8d:52:2b:b3:4a:3e:3b:
                    a3:be:c2:65:bd:e3:4d:99:5f:84:5f:2e:e5:47:79:
                    13:7e:dd:86:95:44:54:95:75:4c:0d:5d:26:c7:be:
                    97:49:e3:81:c3:b7:59:96:d5:f7:c4:10:51:9e:7c:
                    5e:0b:9f:36:bc:d4:51:3f:d8:4f:45:ec:f4:ed:02:
                    20:7c:3c:49:7f:29:91:b8:cb:b8:08:06:82:e2:e1:
                    c6:38:a5:c3:fc:fe:77:ff:98:e2:51:60:af:93:51:
                    52:74:f7:26:ff:74:4b:a3:d5:d9:60:b2:10:57:b7:
                    65:c4:af:e8:85:d7:01:50:b6:d9:29:be:2a:e1:d7:
                    02:47:e9:b6:a5:11:78:bd:28:12:f3:e5:3b:5c:bb:
                    b1:d1:17:e1:9c:1d:03:68:21:d7:07:41:fc:ef:7e:
                    f5:6b:bd:1c:30:41:e7:32:42:01:e0:e1:aa:f4:f3:
                    21:e5:23:3d:d2:9f:d0:54:b1:55:ec:1c:32:eb:9c:
                    d0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6F:ED:EF:71:2D:53:4A:48:9D:B2:94:E1:85:8E:C4:56:2B:4C:4A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b654b1b-1b20-4e58-b50d-f23964f25963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6115::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:be:1c:a1:bb:96:34:19:a5:17:34:2e:85:57:70:86:6b:b8:
         5e:78:1b:29:ba:55:72:0e:5a:c7:87:9d:e8:61:e5:e8:d2:a5:
         d0:3d:b4:5c:0a:1c:38:84:14:3a:3d:6e:44:a7:66:a5:8f:29:
         5e:6e:7e:ee:e0:95:bd:61:d7:6a:db:21:07:e1:81:1f:b2:c3:
         be:d5:94:73:26:c3:b7:ca:c5:28:94:e7:62:60:65:6d:52:02:
         5e:21:70:f7:2e:11:6c:23:f0:f6:23:a2:93:ed:07:39:5b:96:
         fd:96:3e:4d:96:41:e2:a6:3e:bd:52:db:2f:69:f1:a3:0d:17:
         b5:3f:da:9c:97:99:cf:6d:58:ed:20:99:b4:f1:08:2c:64:88:
         4e:1b:4b:3f:5a:ad:21:78:3a:62:a5:cc:51:5a:7c:f5:df:79:
         8a:cf:a3:59:f8:68:11:72:d4:d5:c3:2b:40:35:a9:7c:d7:e3:
         67:59:fa:04:d4:b0:04:36:8a:ca:11:eb:6c:e5:a8:3d:12:3c:
         4c:6c:80:83:00:d7:9e:89:56:4e:a3:15:c9:7c:f3:f0:76:36:
         25:e0:ed:03:2b:dc:98:ba:2e:69:a8:5a:bf:ba:83:6d:ac:d8:
         1f:07:e8:48:a8:88:6c:e6:02:2b:74:74:82:7e:db:e1:d5:63:
         1c:ac:e5:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:22:31 2026 by rpki-client