Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5463f2e9-c071-45ba-a891-46817c1759f6.roa
File:                     5463f2e9-c071-45ba-a891-46817c1759f6.roa (raw, json)
Hash identifier:          NoNmAK6m9NhQVfdUVdT0VhRMLw/mI4k28AhSibKRQP0=
Subject key identifier:   94:99:80:17:DF:82:19:8F:26:F6:EC:7C:9E:E8:9E:4A:52:49:62:12
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6400EA2394D6D3813C72F9C8C541F448389F10AF
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5463f2e9-c071-45ba-a891-46817c1759f6.roa
Signing time:             Thu 23 Jul 2026 15:00:32 +0000
ROA not before:           Thu 23 Jul 2026 15:00:32 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:611a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:00:ea:23:94:d6:d3:81:3c:72:f9:c8:c5:41:f4:48:38:9f:10:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 23 15:00:32 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=e1e2865fb54208167f0c6824fa6bef2b29cb8bab92c76065eed6be9c7b5e8394, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:29:90:b6:b8:b5:62:7f:53:ec:c3:cc:29:
                    de:60:c9:66:dc:75:86:95:a6:86:a9:a4:87:3b:74:
                    a0:68:c7:ea:ce:b6:80:ac:5a:e5:2b:77:c5:d9:89:
                    49:55:83:1d:1e:f8:61:ed:b0:29:f0:f2:e7:ac:35:
                    0e:02:90:32:64:10:37:5a:a5:7c:df:a9:12:9b:2f:
                    81:3a:40:27:e0:fe:9f:54:5f:68:99:5a:a1:40:0a:
                    c0:0d:95:6f:a9:b7:b8:2b:c2:d2:e3:be:30:a2:d1:
                    56:66:f9:70:2d:3a:97:25:e0:1e:7f:4b:a7:63:f4:
                    fd:63:10:af:5a:f8:ee:5b:d0:c2:bf:0d:dd:45:77:
                    89:87:fc:0f:e6:20:3a:6c:9f:eb:81:53:f0:97:43:
                    a2:62:1e:a1:17:fc:16:b6:0c:a6:95:46:98:e5:f8:
                    48:b3:ed:92:5d:73:d3:69:14:39:59:2f:0d:f1:07:
                    68:13:d3:0f:87:e1:5e:ac:ec:47:4d:3c:da:b1:1f:
                    4a:cb:3a:9f:d1:6b:8f:39:70:8f:2f:56:9b:90:25:
                    72:44:a2:a8:9f:34:8d:8a:e4:c5:06:49:c1:6a:3b:
                    49:46:08:af:cf:20:4a:52:91:b2:a7:59:09:13:e8:
                    67:a2:0a:bf:8a:c8:26:5f:b6:a0:b8:c8:ed:2f:e8:
                    a1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:99:80:17:DF:82:19:8F:26:F6:EC:7C:9E:E8:9E:4A:52:49:62:12
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5463f2e9-c071-45ba-a891-46817c1759f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:611a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:56:18:4b:d8:a6:78:6c:49:4f:d9:1f:1b:94:ca:40:b0:b6:
         a7:2f:8e:37:67:de:af:00:fe:f5:a8:5a:ef:b3:b7:82:91:26:
         fc:f6:e8:6b:d6:3e:37:27:0d:dd:79:c4:d0:ac:56:33:f6:d3:
         7f:a7:4a:d5:ed:56:12:7c:a0:ac:a5:fe:e2:d9:44:bd:f3:c2:
         37:2b:ce:ee:72:31:a6:b6:d5:0e:83:29:fe:c0:be:ef:97:5d:
         8e:79:1c:e7:bd:3a:db:cd:f9:56:ae:06:b7:12:ca:0d:62:05:
         be:36:a7:4f:15:00:43:b3:8e:cd:17:66:9a:ff:b1:08:d5:97:
         8b:c3:51:b6:60:21:5b:c9:e4:50:64:2c:6f:5c:f5:5d:b0:8e:
         2b:62:ac:8d:f1:62:b7:66:08:2a:55:d5:aa:6d:76:98:09:ee:
         2c:b7:08:4b:fd:a1:a4:5f:1e:1c:e4:94:32:2c:74:71:34:15:
         d7:0a:69:83:21:f8:6f:47:fb:a6:84:ea:d8:27:70:c2:0d:56:
         9d:53:35:ca:23:1c:7a:15:0e:8f:e1:33:b1:a6:3c:6f:60:45:
         15:7d:b6:f6:2d:7b:53:ef:b6:36:c7:49:cb:d7:66:02:17:75:
         2a:25:41:9d:42:c5:a9:e7:d3:10:d5:a8:15:19:f9:9e:54:03:
         04:d4:e7:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:02 2026 by rpki-client