Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/701f72a5-fb27-49ca-b3ad-3a60c7c30376.roa
File:                     701f72a5-fb27-49ca-b3ad-3a60c7c30376.roa (raw, json)
Hash identifier:          YwxoJJBBerhcV7Tu/PVN/8JW88jhQ/SjNRJxJFENM6k=
Subject key identifier:   41:09:AC:FC:70:AA:7E:0F:F6:E3:7E:6D:E2:91:D7:D1:D0:6B:FD:22
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2E8A04408B4183304A8ECC2A98FBA83BF91145B4
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/701f72a5-fb27-49ca-b3ad-3a60c7c30376.roa
Signing time:             Mon 11 May 2026 01:30:12 +0000
ROA not before:           Mon 11 May 2026 01:30:12 +0000
ROA not after:            Sun 09 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f2:7010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8a:04:40:8b:41:83:30:4a:8e:cc:2a:98:fb:a8:3b:f9:11:45:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 11 01:30:12 2026 GMT
            Not After : Aug  9 23:59:59 2026 GMT
        Subject: serialNumber=ade9ae88d2cbf83d1c6df8d0defb1771e27345324a883e663adb4e6bb5ec1919, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:6c:74:38:d2:2b:38:81:21:4c:41:66:1f:
                    83:1b:c1:a3:02:75:ec:0c:f3:10:ca:95:ac:c3:8f:
                    dd:d8:e0:2a:67:e6:0d:95:33:b3:a9:eb:a4:c5:03:
                    49:30:82:f0:42:67:8c:04:34:ee:44:69:2d:40:f9:
                    30:a2:e6:37:49:82:a4:9f:e5:4e:aa:9c:aa:1d:c9:
                    7a:f7:63:50:80:9e:99:3d:41:d9:4a:a1:65:15:12:
                    a4:3a:cc:99:43:bd:a4:74:4f:b1:83:92:f7:33:03:
                    28:89:21:d0:45:32:fd:80:58:b9:b2:44:1b:6a:b5:
                    07:66:68:ab:7b:36:97:d3:4e:3d:f7:52:a4:c9:f7:
                    7c:6b:98:5d:48:6a:54:4b:91:82:94:02:5c:11:90:
                    4c:f0:7e:1d:f3:47:5c:69:60:41:34:0f:87:7c:30:
                    b1:6a:16:73:7d:16:a4:b1:92:4e:0d:75:47:34:e3:
                    2d:86:94:38:ca:82:4c:32:d6:1f:e4:3e:54:05:7c:
                    20:cb:ee:d2:f2:4d:b2:6b:4d:6d:e1:e0:e6:25:f4:
                    68:d3:f3:f6:41:31:8f:cf:70:6b:2b:aa:1f:6c:d8:
                    19:82:b5:b6:60:82:4e:d7:84:f7:a2:69:d6:50:18:
                    93:d9:c0:9a:b0:a9:2c:5e:4f:b7:e7:89:84:0a:77:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:09:AC:FC:70:AA:7E:0F:F6:E3:7E:6D:E2:91:D7:D1:D0:6B:FD:22
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/701f72a5-fb27-49ca-b3ad-3a60c7c30376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7010::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:bf:ed:f9:9b:fe:36:76:b6:9f:2b:ea:21:fb:ad:fe:41:f5:
         31:3a:a7:ad:6f:35:8d:6c:5e:11:21:1d:bc:b8:61:e8:87:f6:
         14:4e:50:79:f2:2a:fa:94:7a:9b:eb:62:f1:5c:19:e4:8b:21:
         a4:2d:45:51:2c:ee:ec:55:49:6c:e6:ef:ec:6a:c6:34:ea:54:
         66:d2:7f:59:f7:ea:b0:12:b8:87:c2:b7:1c:6e:52:15:4b:7e:
         e2:83:19:1a:03:8b:16:8f:02:72:07:3f:ec:73:af:02:b3:69:
         1a:c8:fd:c1:46:49:09:3a:2d:dd:27:16:aa:ee:4e:92:cc:0a:
         ab:fd:b8:c3:a6:50:ee:65:c1:e8:f6:1c:dc:57:2d:4e:dd:60:
         4f:6e:32:8f:79:1b:b4:23:b6:bb:71:1c:07:29:ca:d6:e5:9c:
         91:b4:fc:16:c7:0f:5e:fc:a2:d1:a3:45:da:fe:e5:17:87:37:
         54:89:10:10:d4:70:60:61:c6:f6:1e:e6:14:2e:71:9c:e8:ea:
         b1:c8:08:0a:11:7f:88:fb:47:19:ea:76:96:37:42:78:30:6b:
         f4:7d:a8:99:16:78:21:91:e3:37:07:19:a9:03:7c:ad:5d:21:
         9d:83:74:6a:9e:b1:3e:14:21:c5:de:60:e1:e0:af:3b:3e:13:
         69:94:69:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:43 2026 by rpki-client