Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5549fdb0-617d-43e3-951f-9747f0d27829.roa
File:                     5549fdb0-617d-43e3-951f-9747f0d27829.roa (raw, json)
Hash identifier:          zYH/GClp650yeF+MvMaAHNEdWJqpNECj81+5tVmvO0o=
Subject key identifier:   59:95:95:94:8D:0E:83:DB:F2:C9:C4:FB:00:5B:B7:24:6C:FB:18:95
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       508CA24DB7674C56E85447487E2386FED2942A3E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5549fdb0-617d-43e3-951f-9747f0d27829.roa
Signing time:             Thu 16 Jul 2026 00:30:11 +0000
ROA not before:           Thu 16 Jul 2026 00:30:11 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:4140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8c:a2:4d:b7:67:4c:56:e8:54:47:48:7e:23:86:fe:d2:94:2a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 16 00:30:11 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=cc79cd005d901695d51bbd8ac5478ee7018988bc4f762fc7c617c34995644a6d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:64:66:77:ce:64:c0:f4:4a:98:fa:54:60:cd:
                    5c:c0:33:7c:de:20:e5:84:7c:a3:fd:d6:ba:51:bf:
                    4e:c0:83:f2:d5:3f:e9:16:09:42:7f:fc:99:c1:1c:
                    7e:1d:dd:5d:a9:9d:fd:0d:70:46:0a:cc:5e:3b:f5:
                    f8:6b:33:9e:76:03:1e:07:a5:fb:61:01:8e:2b:15:
                    e3:fb:24:0b:f8:db:57:2f:39:e4:ac:2b:30:fb:26:
                    2f:16:20:eb:33:a8:1f:d2:97:1a:d5:ec:11:56:9d:
                    75:e1:c4:5e:ae:7c:06:94:ea:b0:a0:46:df:c0:70:
                    60:f4:88:5b:e7:b9:7c:24:ff:a0:c3:63:d1:b1:9c:
                    8d:e1:64:4c:c1:e9:9f:2d:4a:3a:01:32:f7:4f:11:
                    24:7d:28:85:6a:10:74:f2:8c:5a:7a:4b:06:e9:05:
                    00:b7:7d:07:6f:88:1a:38:31:75:26:7c:0e:ec:01:
                    0b:a9:b6:d8:aa:24:d2:11:51:34:d5:b9:93:5a:32:
                    e4:5e:32:77:01:66:7c:4b:7c:fd:a7:d9:1b:ea:fc:
                    24:68:fe:60:92:57:48:30:c2:46:b2:7e:0b:6c:0d:
                    a4:4e:fd:aa:6f:fd:96:05:e1:35:0e:20:68:0c:64:
                    dc:e2:53:c5:7b:4c:0e:be:0a:75:ae:9d:f2:23:79:
                    fc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:95:94:8D:0E:83:DB:F2:C9:C4:FB:00:5B:B7:24:6C:FB:18:95
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5549fdb0-617d-43e3-951f-9747f0d27829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:4140::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:78:bb:3b:db:0b:12:0c:3d:93:9b:22:57:10:a1:8a:e9:90:
         51:4e:50:d2:0f:c3:7e:b3:b8:72:05:87:2d:14:75:df:99:08:
         03:cb:b0:8b:63:ad:2f:91:75:75:f6:a9:fd:ce:48:fe:b2:99:
         45:8e:5d:f1:5c:22:cf:d9:95:dd:1a:02:c1:f5:c5:27:33:a5:
         51:d0:7e:5e:34:44:d5:ae:e1:60:94:05:65:02:03:38:e5:c7:
         73:43:8f:33:7a:29:39:8d:15:1f:48:37:30:0f:72:01:48:7a:
         39:db:ec:31:c8:38:62:90:a0:76:e9:49:e8:7d:b0:53:76:30:
         bf:84:28:fa:2f:6c:ff:ed:74:2f:71:28:d6:16:53:10:36:d1:
         1d:de:ad:00:fc:8e:41:c0:03:bd:c3:12:9c:c6:41:fa:57:50:
         67:2b:a9:2a:b5:43:84:a1:01:bc:e5:7a:e8:aa:a8:32:04:e7:
         c2:17:f5:47:c4:f2:44:01:84:15:df:aa:aa:9b:d7:fa:13:45:
         5c:22:8f:6e:07:1f:e1:9e:cc:84:16:40:06:73:35:69:55:f2:
         ca:87:22:f2:84:c4:6e:31:f6:e5:2d:07:8d:a7:14:81:b7:1a:
         68:04:40:b7:58:38:ba:0a:c1:74:7a:93:1c:e6:73:0e:68:c9:
         7b:3d:4e:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:36 2026 by rpki-client