Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c14c44b6-0c28-4093-ae5c-7b5be88653a3.roa
File:                     c14c44b6-0c28-4093-ae5c-7b5be88653a3.roa (raw, json)
Hash identifier:          kedlrKU+qvjTSD+xVjsGEt/CvysFBTHnNql8BM7VmcE=
Subject key identifier:   90:19:37:07:8B:70:F9:B7:4E:73:01:38:CC:72:4C:25:52:AC:BB:44
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       39425A563FDF716507C82625E0552909E7072113
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c14c44b6-0c28-4093-ae5c-7b5be88653a3.roa
Signing time:             Thu 23 Jul 2026 15:10:08 +0000
ROA not before:           Thu 23 Jul 2026 15:10:08 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:610a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:42:5a:56:3f:df:71:65:07:c8:26:25:e0:55:29:09:e7:07:21:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 23 15:10:08 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=ceca1d662dd543e2eb09fcd23c649d42e45e1838a6e0e320f961a7bf157b071f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d7:65:ea:4d:75:94:93:5c:90:58:bd:ab:25:
                    50:ea:08:7a:dc:78:56:0b:36:6e:0a:e9:fa:46:87:
                    d4:c2:de:a9:aa:02:05:a8:57:f6:e6:6c:8a:29:bc:
                    e3:89:3a:82:1e:fa:6f:23:77:f0:ec:5b:2f:a9:f2:
                    fe:a7:0d:d4:d0:a4:3a:60:19:97:e6:8a:6c:f1:c7:
                    ad:06:c7:d1:a6:ba:66:6f:d1:47:49:8b:87:a9:4a:
                    4b:e1:bf:e5:71:65:f7:55:e6:7b:bd:4f:8c:36:dc:
                    7b:36:5b:eb:2a:90:73:a4:cb:7f:fd:84:b7:56:3e:
                    97:6a:d6:e5:49:ec:a2:5a:7f:23:ec:ac:59:29:db:
                    f1:ab:b5:5f:a8:f2:49:45:de:2b:99:7f:f9:b9:a8:
                    93:50:0a:99:55:c0:35:77:0c:af:f9:0a:9b:3d:e6:
                    1a:7c:fd:9c:8f:17:46:4a:ba:8a:c0:80:f2:63:3d:
                    fe:e0:a1:39:dc:0c:78:6a:bb:e4:5f:5a:2f:be:23:
                    05:19:ac:76:1b:c4:91:55:23:d6:0e:28:56:6b:27:
                    58:0d:e1:25:eb:21:f2:60:d2:f7:f0:b2:3f:c8:db:
                    f4:e5:69:4d:96:62:6d:db:79:be:7c:15:87:7f:b1:
                    38:f9:61:5e:29:9f:16:e9:14:eb:fb:4c:0a:ac:1c:
                    41:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:19:37:07:8B:70:F9:B7:4E:73:01:38:CC:72:4C:25:52:AC:BB:44
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c14c44b6-0c28-4093-ae5c-7b5be88653a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:610a::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:2b:98:74:61:31:09:9e:72:5a:0d:b0:7f:cd:0c:a2:3b:c3:
         95:b2:17:e1:a4:f7:b6:fd:3d:f0:f2:d4:02:52:f0:74:4c:3d:
         ab:5c:1c:5c:e8:9d:33:7e:79:92:2c:75:bf:a8:f3:9a:5f:61:
         45:1b:e7:68:51:e2:e4:89:fd:e0:ce:74:3b:b6:f2:51:ac:d8:
         b3:fa:3e:a7:2d:95:8a:12:f3:9d:c3:3a:3f:ff:47:ad:55:bf:
         99:c5:95:22:7f:5a:24:7c:29:13:ef:86:af:2b:81:56:ba:78:
         44:c5:cf:2b:8a:ec:82:6d:9b:25:b9:cb:03:af:64:f8:6e:85:
         ee:02:66:00:b1:af:e8:ef:1e:e3:4e:03:a8:fd:9b:66:39:8c:
         6f:5c:09:4e:7a:77:f3:3f:a5:35:06:24:1d:ed:0e:1e:bf:75:
         cf:47:52:47:6c:fa:95:e6:d2:e2:38:7c:cb:bf:d5:ea:9d:13:
         87:e6:c0:bc:de:8d:04:fc:fc:3b:58:fd:00:de:9e:17:33:d9:
         85:a9:d6:39:9b:93:87:cc:cd:6b:e4:fe:f9:4a:d0:52:2c:3e:
         7d:24:aa:b0:f4:41:34:93:3a:84:d3:e2:d0:fa:90:3b:bf:e0:
         7b:a4:4b:09:04:40:b9:ab:90:8d:83:db:47:83:10:f6:6e:df:
         14:90:a6:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:42 2026 by rpki-client