Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6f67fbaf-c6eb-4dfb-8d5f-c2b661fe2773.roa
File:                     6f67fbaf-c6eb-4dfb-8d5f-c2b661fe2773.roa (raw, json)
Hash identifier:          o5twOEo+j/s/TLr3MKcYWv4/3yWx3dkGvjZXpPBs43A=
Subject key identifier:   09:3E:38:11:5F:62:AC:C0:F9:D3:57:FC:E8:BA:89:05:F5:74:46:2E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1ED0C0001A44D58ED8DC280CFC9826B545945FA6
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6f67fbaf-c6eb-4dfb-8d5f-c2b661fe2773.roa
Signing time:             Thu 09 Jul 2026 00:00:09 +0000
ROA not before:           Thu 09 Jul 2026 00:00:09 +0000
ROA not after:            Wed 07 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f1:8a00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d0:c0:00:1a:44:d5:8e:d8:dc:28:0c:fc:98:26:b5:45:94:5f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul  9 00:00:09 2026 GMT
            Not After : Oct  7 23:59:59 2026 GMT
        Subject: serialNumber=7ef6911367c882f265848aeee15bc1085269bd805b432ac9d045c2d0ba315e54, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2f:f4:c2:3f:82:dd:f3:6e:57:a8:19:d3:81:
                    54:98:35:02:93:d5:23:58:31:ca:a7:b3:92:05:e9:
                    e6:f6:17:d6:22:af:df:2d:30:d7:0e:8f:0a:03:86:
                    0b:21:0d:0e:58:6d:b6:72:50:66:a0:4e:75:f1:1b:
                    a9:53:b8:5f:bf:2e:e7:2f:14:58:9b:af:32:98:34:
                    96:08:1f:ab:58:f3:cc:1f:8e:ce:d1:ca:23:bd:1b:
                    f4:f7:c8:1d:4f:cb:87:fa:0a:17:49:08:9c:c5:31:
                    ef:86:14:45:44:a3:fe:5f:88:c8:5b:51:95:f8:f3:
                    eb:33:4b:a6:e6:17:27:91:83:96:d1:5b:94:2d:39:
                    02:cf:44:41:04:03:2e:cb:90:2e:ed:10:76:92:ac:
                    01:a6:40:d3:fc:36:e0:5b:1a:70:3c:ff:3a:ca:d0:
                    a7:64:67:8c:77:96:0e:00:79:99:01:8f:60:95:69:
                    2d:36:ea:c9:47:90:b8:4e:5e:fd:d5:67:1c:8a:6c:
                    8b:92:39:7f:e5:c2:c3:bd:f1:2e:89:1b:79:f2:5b:
                    45:9d:fc:e6:be:46:74:67:85:dd:aa:09:b8:9f:3c:
                    a6:7f:f1:cb:27:bf:7a:f9:80:4e:8d:ce:6a:26:67:
                    0b:7c:6e:a2:23:97:f1:9c:45:fd:38:e9:8e:65:32:
                    32:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3E:38:11:5F:62:AC:C0:F9:D3:57:FC:E8:BA:89:05:F5:74:46:2E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6f67fbaf-c6eb-4dfb-8d5f-c2b661fe2773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:8a00::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:ac:8a:f0:ec:74:1e:c4:13:e8:2c:c0:32:f6:25:cc:cf:23:
         3a:d9:1a:6f:ef:1b:27:07:2a:3d:14:a7:b0:58:60:81:bc:f4:
         73:11:86:9c:94:42:87:66:07:e5:c4:81:71:b5:5a:85:96:85:
         bd:5d:0d:e2:5f:95:f1:e8:26:d8:0b:8d:40:3d:ce:b9:a6:b7:
         8e:68:ae:d4:a1:f2:bb:d5:ff:f1:5c:82:f6:1c:0c:9b:ad:ec:
         e1:7a:5f:2a:12:d2:3f:39:59:da:30:6a:fa:80:3b:f3:aa:b2:
         f7:4e:0f:3a:1e:7e:65:ee:26:12:be:f7:79:96:2a:45:12:aa:
         51:d1:1b:73:6c:95:f6:89:3e:72:b9:a9:33:f2:a7:32:ed:80:
         52:a3:27:79:25:a3:9d:1d:b0:6c:ad:a8:f7:8b:a4:fe:86:a1:
         60:18:f3:01:99:1a:ca:88:b5:f9:25:01:c7:79:11:85:e8:94:
         bf:5c:e4:7d:0e:3e:94:ff:bc:72:d3:2e:ca:0c:61:b8:e8:65:
         41:72:ce:02:52:2b:9d:66:0a:e1:d7:42:c4:6d:df:54:fc:7a:
         3b:4f:42:f0:09:45:b2:82:dd:2b:37:c4:0d:80:93:25:8c:63:
         08:44:32:4f:e1:20:29:43:07:50:8d:ff:00:92:e9:61:32:47:
         03:c6:dc:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:03 2026 by rpki-client