Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a5ad0a6c-878f-42f8-8a48-37426a6ee1ca.roa
File:                     a5ad0a6c-878f-42f8-8a48-37426a6ee1ca.roa (raw, json)
Hash identifier:          quLFfdAuCjVyLY9F/GYSQ/lNl4XXT/7Qvr5pYE061w0=
Subject key identifier:   AF:1B:AE:2A:1F:0A:D8:BA:60:B8:FE:78:9E:82:E2:CD:8F:4B:DC:BD
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0B1A372D5D3E31D8E5934E217B1FC401BB6F4F34
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a5ad0a6c-878f-42f8-8a48-37426a6ee1ca.roa
Signing time:             Mon 20 Jul 2026 00:50:11 +0000
ROA not before:           Mon 20 Jul 2026 00:50:11 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:1a:37:2d:5d:3e:31:d8:e5:93:4e:21:7b:1f:c4:01:bb:6f:4f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 20 00:50:11 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=416dd9206ab8974c16ccf8587928980bc055204c0c67831a0979fe8ec769ec31, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ba:39:ec:b2:e3:6b:68:af:31:02:e6:16:b7:
                    94:2f:99:2e:6b:9a:78:79:5f:8d:81:7e:0f:cc:bc:
                    8a:e7:ed:0d:2a:85:a8:6a:8e:4b:60:74:07:81:97:
                    30:6b:dd:d3:c4:a1:aa:03:34:f5:6c:35:98:e6:2c:
                    f6:4f:aa:88:54:63:ff:25:22:fc:44:a1:62:6f:b2:
                    1c:82:67:8c:ad:af:72:93:6d:29:82:3d:23:b3:48:
                    f5:16:58:c3:dd:ed:be:92:3a:bf:20:2b:d5:27:60:
                    06:85:30:69:30:c0:50:22:fe:7e:1e:87:4c:2e:79:
                    f2:39:18:09:e5:88:69:92:b1:9b:4b:dc:4f:e3:c4:
                    38:96:15:46:20:65:27:92:b0:4c:55:94:1d:fe:d5:
                    f9:bb:de:ec:c2:c4:1d:1e:43:36:b2:82:1a:ff:8f:
                    64:c2:c5:03:34:48:e9:3f:5a:5e:43:fa:81:6c:3e:
                    b9:d8:1c:2e:e6:49:58:da:7c:bd:7e:7a:a0:cb:de:
                    f0:58:c8:91:55:68:87:4f:d8:98:b8:c5:08:87:96:
                    b8:bd:e2:ba:b2:bd:4a:79:74:19:26:91:e1:f3:64:
                    b5:39:64:dd:98:8a:8b:29:e1:26:f6:e8:cd:a7:25:
                    e0:f0:09:b0:dc:3c:9e:a1:a3:ea:d6:45:2d:0c:93:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1B:AE:2A:1F:0A:D8:BA:60:B8:FE:78:9E:82:E2:CD:8F:4B:DC:BD
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a5ad0a6c-878f-42f8-8a48-37426a6ee1ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6102::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:5f:3e:76:74:ec:7b:a6:03:a4:e9:ab:1d:09:27:bb:64:c1:
         19:18:23:3a:63:6c:f4:73:34:16:55:49:89:35:14:aa:3e:44:
         52:40:22:5e:0c:16:0b:8b:a1:ea:b6:00:34:3f:a7:e9:94:97:
         88:39:64:4f:e8:00:6d:2e:4c:bb:35:cb:c8:b9:f1:3b:6e:68:
         30:66:e8:74:6d:5c:6e:3a:30:21:2a:2e:23:ab:96:86:f7:32:
         2a:0d:ac:48:17:58:f2:aa:65:5f:67:36:7c:3f:d0:f1:61:b7:
         b5:b3:53:3a:2b:4b:52:50:5d:02:64:12:98:f1:17:82:fd:5f:
         a3:7f:2b:e2:a6:1d:85:3a:31:9f:30:5f:fa:db:5e:51:f8:ec:
         31:04:1d:a7:a1:60:a3:42:20:1e:ba:a3:98:bd:60:7f:e4:8f:
         06:6c:0b:c9:40:9e:1b:28:1c:d9:5a:86:50:99:27:16:d1:a5:
         a6:f2:eb:7d:42:45:7b:fd:f5:b1:c2:74:53:16:83:af:5e:d3:
         56:75:ef:67:d6:71:af:da:d9:d0:63:c4:4b:99:4e:73:22:90:
         5f:7b:91:7c:c7:3e:47:0a:41:8d:d2:3d:ab:34:fb:ae:f7:89:
         28:7b:46:2e:4b:99:56:16:66:f5:e6:75:a0:07:49:bf:a1:8b:
         e7:77:71:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:24 2026 by rpki-client