Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4261d1d3-853c-44a1-bd0f-9a9a673c6e8c.roa
File:                     4261d1d3-853c-44a1-bd0f-9a9a673c6e8c.roa (raw, json)
Hash identifier:          1QcsGmbVfe909Lbu29XHf9rRViudpvanBh3K778UpQc=
Subject key identifier:   67:2E:D8:0B:9B:AB:35:0F:4F:91:6C:A3:31:3C:C6:E1:C9:D6:6F:73
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2BBBEC42795A5B0328A943F9CC8606CA3409C6E3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4261d1d3-853c-44a1-bd0f-9a9a673c6e8c.roa
Signing time:             Sun 10 May 2026 00:00:07 +0000
ROA not before:           Sun 10 May 2026 00:00:07 +0000
ROA not after:            Sat 08 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bb:ec:42:79:5a:5b:03:28:a9:43:f9:cc:86:06:ca:34:09:c6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 10 00:00:07 2026 GMT
            Not After : Aug  8 23:59:59 2026 GMT
        Subject: serialNumber=6bc9b7b78cef58d7b52d5d9486af19e5ea08c128973c27977bc87c08ea24e9c5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:e1:a7:cd:c2:71:11:da:97:a2:dd:ca:f1:
                    15:45:99:d9:88:96:6f:94:35:ac:ee:53:67:93:eb:
                    04:4f:d6:ba:43:2e:62:c7:f7:98:c0:30:19:1f:59:
                    10:9f:2e:1e:7c:1c:c5:c9:5b:15:e7:a0:2a:40:f5:
                    ea:3b:d7:f2:56:b4:00:92:e2:53:a6:09:cd:eb:3f:
                    93:21:f9:f6:36:3d:ee:a3:57:b5:0c:e7:fe:ec:6c:
                    cd:26:66:28:e2:fe:a1:c3:14:21:7a:40:29:c2:fa:
                    b7:1d:47:11:90:de:0d:10:bc:d8:35:15:de:c8:42:
                    5a:26:2a:a9:5a:2d:82:c8:88:e0:97:74:9f:be:19:
                    82:45:f2:8f:e1:48:28:7c:0e:af:99:3a:e5:96:57:
                    15:b6:6e:d2:cc:e6:3d:a7:bd:1b:e8:8f:04:4f:14:
                    8b:5e:8c:c5:2a:93:20:16:72:c1:37:aa:0f:6e:f0:
                    a8:48:79:22:0d:78:71:3e:ca:fd:a3:fe:3f:c2:6e:
                    e6:8d:77:c4:31:08:29:f1:5b:34:31:33:c7:50:bf:
                    9f:dd:77:b9:26:37:a2:dc:7c:78:c3:85:2d:2b:96:
                    a0:dd:63:54:2e:92:63:c2:b8:1d:d7:c3:da:db:1e:
                    1e:78:fc:1b:2e:7a:38:bf:46:b9:d9:d9:81:a4:16:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2E:D8:0B:9B:AB:35:0F:4F:91:6C:A3:31:3C:C6:E1:C9:D6:6F:73
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4261d1d3-853c-44a1-bd0f-9a9a673c6e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f000::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:dc:78:db:c2:f8:0f:c7:7c:a4:4b:37:48:5f:3a:95:3a:c5:
         b2:4e:17:37:52:0d:d2:9f:74:3b:c9:fa:ee:89:54:59:3b:e6:
         17:21:4e:5b:16:46:02:d5:72:fa:c8:fa:03:89:e7:42:b0:63:
         cf:f3:af:21:28:1b:96:96:aa:3d:6c:b0:a9:12:2a:c2:6b:54:
         46:7a:14:50:01:0b:f5:87:de:a5:60:85:91:f7:05:1e:98:0d:
         50:9f:71:3a:be:85:c9:15:bb:5a:ae:46:74:75:c6:58:81:46:
         51:f3:29:e0:78:e3:09:8c:db:b4:8b:f9:6a:52:1d:18:6d:52:
         60:41:1a:ac:af:cd:4d:bf:3b:c8:27:bf:36:19:a0:83:0a:5c:
         37:14:c6:14:18:0d:0f:d8:28:f7:df:7b:c3:b7:d6:0e:88:11:
         47:86:f6:6b:17:3a:b9:1d:95:7f:12:35:3c:90:79:a7:ad:9f:
         2a:41:26:ed:c5:8f:3b:da:7b:94:20:f4:90:5c:d8:7a:7f:c6:
         d3:fd:2c:06:5a:3b:6c:71:2d:b4:93:fa:2c:92:f9:6b:98:4c:
         a8:47:de:f3:48:cc:31:6e:ab:1f:d6:4b:28:69:dc:c6:36:af:
         33:c7:db:24:2f:91:2e:f8:fb:0b:84:01:28:3f:a5:23:60:2f:
         7e:2d:cb:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 00:02:32 2026 by rpki-client