Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/55cf26ad-a6a6-417f-b350-bf73764b3b88.roa
File:                     55cf26ad-a6a6-417f-b350-bf73764b3b88.roa (raw, json)
Hash identifier:          1T/NNynLyHNEo4QbXwxURcqZLeSwio0V6+O+nNN3tGA=
Subject key identifier:   6C:C8:BB:91:5B:23:72:20:93:91:05:5F:E7:E0:EF:A3:69:BC:6A:8D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       35E828B6277E79B592A54D492B856A7FDB4AA8AB
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/55cf26ad-a6a6-417f-b350-bf73764b3b88.roa
Signing time:             Fri 10 Jul 2026 00:00:41 +0000
ROA not before:           Fri 10 Jul 2026 00:00:41 +0000
ROA not after:            Thu 08 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f1:90::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e8:28:b6:27:7e:79:b5:92:a5:4d:49:2b:85:6a:7f:db:4a:a8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 10 00:00:41 2026 GMT
            Not After : Oct  8 23:59:59 2026 GMT
        Subject: serialNumber=04c9915c31dc008cad02a20b3020402585d332765b5ac21d35ab34bacfb78eb6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:17:b6:93:66:ea:39:e5:f5:fb:e9:c1:23:39:
                    be:2f:96:0e:14:63:ee:9b:c2:13:48:ee:69:b4:99:
                    40:1d:1a:d9:17:5a:d8:14:cb:ab:cd:47:60:70:7f:
                    f8:ea:3a:76:05:70:63:35:9a:6e:a5:c4:aa:69:f4:
                    44:10:fb:f6:09:4d:61:14:18:dd:fb:7f:f4:5f:4e:
                    52:d1:7f:de:e8:3d:ec:fe:2c:1c:d0:e2:6f:b6:3b:
                    1d:42:8d:f3:fb:0d:51:09:cf:71:6d:4e:e9:66:30:
                    2f:b9:ca:a8:b6:94:33:8f:f9:5e:8b:0f:98:ee:b1:
                    4a:b8:96:9c:ca:43:28:3f:ff:2d:ad:63:a7:46:6b:
                    dc:be:16:33:bb:8e:e9:c9:33:41:5b:f8:d5:48:c0:
                    af:0b:99:2e:94:0e:5f:e1:d2:78:b8:fb:f5:21:23:
                    e5:a0:8a:03:7d:54:73:ca:9a:f9:99:36:d4:0f:d8:
                    cf:5a:3b:49:c4:5c:1c:37:11:76:4f:15:b9:08:1a:
                    c5:1d:9d:b6:94:d4:85:49:80:af:d8:df:38:2f:85:
                    f3:26:03:2c:4f:24:ce:69:4e:a9:fd:ae:19:57:3e:
                    5f:66:37:9e:30:ed:ee:10:1b:c1:81:bc:d8:79:d4:
                    c3:de:7c:b1:47:4d:79:a7:ea:cb:35:27:5d:e0:9f:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C8:BB:91:5B:23:72:20:93:91:05:5F:E7:E0:EF:A3:69:BC:6A:8D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/55cf26ad-a6a6-417f-b350-bf73764b3b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:90::/44

    Signature Algorithm: sha256WithRSAEncryption
         32:b3:b4:a3:cd:92:e8:aa:5c:b9:81:a4:8a:d2:00:20:a9:4e:
         c6:9e:7f:e3:c8:4d:a2:4b:ac:2b:cb:a5:93:a7:b4:a1:e2:95:
         65:e3:ee:f7:16:d0:cf:76:76:25:16:74:d9:d5:93:ce:d5:7a:
         08:be:ff:df:a1:f8:c2:d9:80:ca:2b:96:b7:2c:83:62:ff:c8:
         7c:f6:85:83:b2:e5:10:67:e7:b5:3f:75:4b:c0:5f:00:88:1b:
         da:42:d9:b0:64:aa:b1:4b:64:51:94:27:6c:b1:b1:9c:1a:e5:
         fa:f7:7c:a2:28:29:d3:df:94:ef:bf:9c:a6:9e:50:38:9a:12:
         5a:10:16:de:26:19:28:68:27:e4:b3:17:8f:7d:a3:6f:8c:bf:
         3c:3b:6d:66:d6:b8:2e:23:7d:d5:3f:79:87:f6:dc:be:0d:ac:
         66:a9:0c:7a:b5:78:98:12:31:5e:9d:7e:71:8b:cf:78:c9:76:
         44:5f:ca:27:67:8b:22:a5:80:79:c8:77:9a:08:9d:e1:c3:21:
         76:d5:2e:73:19:44:62:94:76:2c:93:31:75:4d:c3:ff:77:81:
         aa:f7:e9:e4:ab:73:39:d8:1d:1b:f2:f1:c2:4a:01:25:ed:60:
         30:c3:5b:d7:52:60:49:0a:5f:8e:49:15:9a:52:bf:93:ec:5c:
         75:4b:a7:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:35:25 2026 by rpki-client