Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71593b3e-c097-4475-95c0-8a064df47fc0.roa
File:                     71593b3e-c097-4475-95c0-8a064df47fc0.roa (raw, json)
Hash identifier:          fUrD1kv8CS5zC1UNHkXcSJ3mW7ScksxBKXMra79S2Vo=
Subject key identifier:   FC:82:B1:59:9B:E0:74:66:7B:A5:46:14:EE:D9:19:B7:3E:CE:E1:3E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2C04106D462BBFD4A6BE9B4D9786ED94CFC9A20C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71593b3e-c097-4475-95c0-8a064df47fc0.roa
Signing time:             Thu 23 Jul 2026 15:00:32 +0000
ROA not before:           Thu 23 Jul 2026 15:00:32 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:04:10:6d:46:2b:bf:d4:a6:be:9b:4d:97:86:ed:94:cf:c9:a2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 23 15:00:32 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=07fe3bc48f5579365d517df4682f779bfd9e9c0b1b877efc38a9b40e990d32ad, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b8:cf:ac:b0:18:5c:55:05:56:60:c5:d1:0a:
                    d2:ff:1c:4f:0f:bc:4c:c2:f3:7c:34:dc:33:c3:06:
                    e5:89:f6:6f:eb:f3:46:a6:d1:05:89:b1:04:76:a2:
                    cd:f5:e4:f2:fb:1f:1a:e6:ee:2a:27:26:bc:b1:92:
                    ef:80:ee:ab:41:36:57:6e:d7:80:15:73:9f:3e:df:
                    ed:c8:b8:49:24:dd:72:95:5a:e3:47:d6:0a:84:7e:
                    26:9f:f7:17:8a:4d:51:f6:8b:a6:70:ac:df:79:8d:
                    55:46:f1:ca:34:03:fd:2d:27:63:96:be:5d:a8:7e:
                    d8:0a:93:40:5b:c0:cb:ad:22:a9:80:9c:2e:93:09:
                    4a:ab:ca:b7:04:bf:db:1f:ed:c4:d0:af:d4:3c:31:
                    3c:11:b9:5c:8d:5a:3f:7a:3d:20:e6:b8:7a:39:a3:
                    c5:b9:8d:05:26:b9:92:6e:9d:29:db:7f:a6:fc:8c:
                    0b:88:63:03:18:5b:cc:42:dc:82:87:6d:7f:94:2e:
                    df:70:7a:bc:35:df:b2:ae:ef:78:8f:13:cf:50:97:
                    68:c2:10:85:b2:49:64:f0:58:fc:fe:ad:75:00:d6:
                    c9:67:fa:ab:4b:63:e3:0b:32:63:47:da:41:e5:bf:
                    7f:cb:61:77:25:b0:88:d8:0a:75:a4:5b:55:d0:ec:
                    a4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:82:B1:59:9B:E0:74:66:7B:A5:46:14:EE:D9:19:B7:3E:CE:E1:3E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71593b3e-c097-4475-95c0-8a064df47fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6110::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:9b:75:cc:3e:95:a7:df:eb:f7:0b:d9:88:58:00:fe:af:28:
         fd:d1:9b:ad:8e:01:1d:f9:b3:5a:13:a0:16:ea:3a:1d:7c:0d:
         d4:0c:18:69:ad:10:54:cf:9c:db:7e:0f:99:21:b2:66:0f:fd:
         f3:22:64:a8:ba:86:4a:6d:88:eb:54:5c:ea:bb:fe:74:20:83:
         66:0d:83:b1:28:a4:12:64:a5:b5:62:e0:d9:dc:54:5a:71:25:
         ef:47:c3:ae:c6:4f:dc:18:6b:94:46:35:c1:47:85:02:77:3a:
         39:6c:32:1b:1e:ee:ec:04:7a:1e:eb:e7:40:bd:3f:18:42:a5:
         39:cd:36:7c:e4:cc:4c:dc:27:2f:40:c0:46:22:20:13:82:25:
         83:d2:41:91:e4:9b:c0:de:99:82:ed:ae:78:63:73:f8:bb:34:
         b2:7d:e7:19:c0:f3:ca:d5:cb:df:54:70:19:d2:a5:97:b7:ba:
         d6:4d:f7:6c:61:40:f9:58:12:3b:a3:42:3f:f4:01:81:09:f1:
         ff:11:01:52:09:9e:5c:92:ce:ea:c3:ac:57:32:e1:10:5f:a7:
         81:bb:21:e7:ed:66:f9:a8:54:d8:60:ef:0f:ca:68:ad:54:99:
         0e:33:f9:11:42:56:a2:8f:2c:2c:77:d0:04:40:49:08:a8:40:
         26:1d:ea:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:05:10 2026 by rpki-client