Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa
File:                     c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa (raw, json)
Hash identifier:          m6+WUPk2F4EAN4SLG9hnW0meGd+cMIIjoHAH5hqbEc4=
Subject key identifier:   0B:DE:87:A6:A5:10:36:B6:69:8A:7F:97:42:A8:F9:3F:6F:CE:9F:22
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3DF9796547711C7C99795CBEAA08E708CC6C673D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa
Signing time:             Mon 27 Apr 2026 00:30:08 +0000
ROA not before:           Mon 27 Apr 2026 00:30:08 +0000
ROA not after:            Sun 26 Jul 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f0f0:4140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f9:79:65:47:71:1c:7c:99:79:5c:be:aa:08:e7:08:cc:6c:67:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Apr 27 00:30:08 2026 GMT
            Not After : Jul 26 23:59:59 2026 GMT
        Subject: serialNumber=ae0b466fd43e0fc35a02d7c5bf5d4180213e8c980259f4f39033bda4d16babe6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:19:08:6f:ee:c7:bc:b0:4e:f8:ab:05:37:8d:
                    32:99:3a:ed:d2:85:95:77:95:d2:24:b1:05:f4:4b:
                    97:75:5e:96:c8:53:60:8d:61:25:6b:60:4e:51:ad:
                    72:30:75:62:26:e4:4a:61:1a:a8:55:4d:84:45:f2:
                    36:5f:05:57:37:00:87:5b:c4:04:1d:01:3a:3e:95:
                    56:fc:67:99:d2:80:3e:1f:7d:74:59:93:87:e3:7c:
                    87:e3:8b:ac:bc:05:1f:32:79:9e:54:3d:d9:46:a6:
                    eb:55:84:e8:c5:c4:1c:51:3d:2c:63:6e:87:51:a8:
                    a9:30:6c:16:98:d1:1a:dd:8a:c6:22:ca:68:53:6e:
                    73:bd:91:4d:52:a5:d5:82:c9:a0:1b:79:6c:07:0c:
                    89:13:ea:a7:55:01:c2:9b:b1:aa:91:a0:e8:f4:29:
                    ac:ae:db:1d:03:15:27:b7:33:f6:11:4d:00:84:3d:
                    38:c9:26:c5:df:2d:ae:b7:d2:bc:23:2d:b1:8d:b7:
                    b5:54:93:b4:e1:42:21:a7:17:79:f7:e2:d7:de:72:
                    df:30:0b:35:51:7b:40:dc:78:f5:76:62:18:f0:76:
                    32:7f:a5:d9:44:87:ed:e9:df:86:f1:da:a1:44:7a:
                    06:7b:f7:4b:2b:14:b1:ff:52:0d:b7:37:70:4f:24:
                    1c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:DE:87:A6:A5:10:36:B6:69:8A:7F:97:42:A8:F9:3F:6F:CE:9F:22
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c337d1c6-58fc-4ffc-bf4b-303ad08bc9ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:4140::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:f2:62:08:5e:15:3f:ad:c7:22:5f:2e:62:e1:3e:7c:57:48:
         2d:bf:da:7d:3f:bd:78:97:09:ee:de:91:59:72:1d:8b:08:5c:
         8c:58:3d:00:8f:f4:02:d6:af:d5:1d:c2:4b:bf:eb:7c:63:b0:
         b2:80:96:2e:80:f3:1a:62:5b:d3:bf:fa:a1:18:ef:88:f8:31:
         4e:52:63:a8:a2:04:dd:73:26:72:0b:30:d7:a6:d1:b1:d8:54:
         7a:55:3e:68:7f:ed:b8:c1:b3:99:fe:47:3e:45:46:3c:f9:f1:
         fc:66:48:23:35:3b:58:4a:ef:b6:05:76:d3:4f:14:28:39:5e:
         c9:3b:b0:0f:fe:53:06:9e:01:43:65:c9:29:da:ca:57:b2:8d:
         f8:75:85:74:5d:d2:d0:34:c0:05:26:5e:9a:8f:7c:ef:b5:8b:
         80:dd:74:f6:fc:32:b8:97:01:ff:ad:3e:b3:49:bc:1e:f7:69:
         cd:ac:be:92:56:ef:83:45:23:c1:15:cf:cd:50:34:78:b0:29:
         c8:58:42:e5:6f:09:5f:dd:7a:5b:1a:7b:41:5d:fb:c8:9a:55:
         96:52:7c:58:f1:a8:e2:c1:b9:e1:6e:ea:f3:39:9f:2f:df:10:
         c4:fc:8e:51:4a:49:85:00:02:63:c1:3c:90:0f:9d:df:16:f7:
         7b:db:8f:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 23:34:34 2026 by rpki-client