Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/613deecc-4241-45f6-938d-6f225ca83bd7.roa
File:                     613deecc-4241-45f6-938d-6f225ca83bd7.roa (raw, json)
Hash identifier:          3Jr3hnWzDMCC9uNh+Ujwn9DxsZgLCypJxDvs+N5306w=
Subject key identifier:   54:8E:C9:65:F4:10:83:D6:7B:3A:58:71:57:F6:B1:89:BD:E7:77:83
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7C695DC158DD2DA8ACD266B19B969C088E89B261
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/613deecc-4241-45f6-938d-6f225ca83bd7.roa
Signing time:             Mon 04 May 2026 15:10:03 +0000
ROA not before:           Mon 04 May 2026 15:10:03 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:610a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:69:5d:c1:58:dd:2d:a8:ac:d2:66:b1:9b:96:9c:08:8e:89:b2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May  4 15:10:03 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=3aece4171b2cbd8f7ee9aa5d87da3e88f4ea2bfe34c5838161c4478f13daaad3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1e:ed:c6:19:ae:44:42:7d:0d:a2:9a:e2:a0:
                    ca:ae:8e:a0:4b:14:10:16:67:d1:fe:38:18:11:3c:
                    70:6a:53:38:16:f8:2e:78:37:e5:ca:2c:ee:41:a2:
                    be:8c:d3:31:c1:d2:aa:23:04:22:31:30:d8:81:6c:
                    4a:50:a0:80:5f:4e:01:a1:c5:7a:a6:6e:af:39:be:
                    01:f6:75:db:08:69:d7:5f:ec:4d:3e:42:5f:3a:ab:
                    fe:16:02:f3:c6:30:05:66:87:2e:16:66:c7:57:df:
                    d6:57:93:53:d9:b6:dd:2a:2b:ce:bb:4c:d2:45:d7:
                    39:1f:35:1a:bf:13:1a:66:bf:20:66:79:87:ab:f6:
                    ab:bd:4d:aa:9d:88:6d:4e:90:8a:3d:a8:b3:b0:2e:
                    3f:bc:89:d7:98:5f:33:9d:d8:ad:3c:ba:7b:9d:eb:
                    e1:61:f7:b0:79:9b:53:60:cb:cb:1d:d2:a5:06:4e:
                    89:c8:2d:0e:74:4e:f2:37:98:37:58:a3:7c:9d:6c:
                    d8:6e:59:e2:40:a1:b8:73:02:29:63:84:81:c3:b8:
                    e0:db:36:ad:01:d7:42:97:df:dc:58:15:f2:8a:0e:
                    8e:b6:0f:d2:f4:e3:17:fc:13:19:e0:af:4c:05:9b:
                    a1:6e:91:22:20:6f:86:d7:81:b7:bf:bd:db:b2:12:
                    cc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8E:C9:65:F4:10:83:D6:7B:3A:58:71:57:F6:B1:89:BD:E7:77:83
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/613deecc-4241-45f6-938d-6f225ca83bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:610a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:88:07:18:13:d4:90:db:08:81:64:4e:7e:0a:11:d3:fe:d9:
         4e:a4:80:0a:7c:d9:f7:9f:59:f6:4c:09:70:9b:88:c3:50:f6:
         37:9f:31:8c:31:b6:6e:2c:16:d9:d0:b2:2b:ca:a0:38:ec:f0:
         63:89:44:f3:67:67:bf:4e:8b:2a:ed:35:91:b9:aa:fd:4f:ca:
         7e:7f:86:7b:71:48:d3:89:bb:a0:e5:21:e7:77:18:b2:af:5f:
         54:b5:06:d4:67:f8:3f:5d:4f:47:34:95:f3:60:6e:43:48:13:
         57:49:e0:c8:f6:ac:4f:4b:03:67:68:ea:c1:51:ed:00:95:8c:
         f6:ce:7a:80:d2:a3:86:f2:12:73:9a:cc:1e:4e:02:84:1e:39:
         ed:df:36:71:d8:01:3b:64:3d:35:7d:46:d6:09:a3:85:97:aa:
         33:00:a2:c6:c1:d7:1a:31:e1:8f:8b:34:45:97:22:a7:3d:30:
         2a:e3:98:d2:5c:f6:e9:03:53:b8:3a:90:a3:b2:b4:49:f2:42:
         7f:30:63:22:52:69:89:89:75:94:a9:6d:f4:1f:ac:59:d6:66:
         77:b6:b5:d1:ef:30:2c:59:a5:35:bc:7b:ac:54:ae:c0:11:6f:
         c5:77:39:94:c3:dc:58:0d:8f:3e:d3:53:17:51:d8:31:e8:67:
         30:7f:eb:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:25:13 2026 by rpki-client