Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4eb3716-8fa5-4dd5-90d2-e8f5f6fbe6c4.roa
File:                     c4eb3716-8fa5-4dd5-90d2-e8f5f6fbe6c4.roa (raw, json)
Hash identifier:          7Pwgo9WmOSNyxOktyUaVdIyZ9iCFbOjsBVCvUyz5Zqk=
Subject key identifier:   BC:C3:B9:22:A1:72:EA:A0:C8:FE:5F:9A:92:D8:92:AB:57:20:C7:11
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4626DF0654BE65902CA19DD380EC97CE9528A4D6
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4eb3716-8fa5-4dd5-90d2-e8f5f6fbe6c4.roa
Signing time:             Mon 20 Jul 2026 00:50:10 +0000
ROA not before:           Mon 20 Jul 2026 00:50:10 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:26:df:06:54:be:65:90:2c:a1:9d:d3:80:ec:97:ce:95:28:a4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 20 00:50:10 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=887dc03891257022945dfd0513ea72a227773c48b95bd367d52334296f2095a1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:6f:fe:77:36:6a:76:a7:d5:a5:5d:7c:f8:
                    df:ff:82:6e:8f:ec:e3:a5:10:75:71:ab:2b:37:29:
                    54:1c:e7:19:39:bb:b7:ce:c1:46:d5:4e:c7:71:2e:
                    a7:b5:d8:2b:c2:c0:3d:96:28:52:1e:07:a9:91:d3:
                    d7:7e:69:c6:2f:34:c2:d7:a0:e8:50:84:d9:1e:dc:
                    9c:45:33:59:7c:4a:72:b9:36:7a:fc:38:ed:ba:70:
                    1e:dd:a3:26:b7:0e:87:4c:4d:19:c9:fe:cd:ed:90:
                    9a:19:ae:d1:75:13:da:c1:59:73:17:43:4d:d5:6e:
                    2f:05:f7:b7:5b:93:f0:69:22:07:e4:7b:20:89:f0:
                    52:23:d9:e4:d9:95:f9:c5:65:8c:62:85:ea:7b:26:
                    53:a0:8a:3c:27:e2:a0:40:40:19:17:d3:1a:ac:22:
                    06:92:58:cf:f5:1d:77:9b:ad:c8:0e:a6:78:45:0b:
                    a9:e2:bc:c8:90:86:47:a8:b6:80:ea:df:25:3f:36:
                    fe:ff:09:fa:16:65:86:04:42:ef:6b:bd:a3:98:5b:
                    1a:da:6b:0f:d2:5a:b9:96:5d:9e:1f:86:82:a8:7a:
                    1d:77:90:f2:39:fc:e0:e6:75:47:53:86:bd:70:87:
                    a4:c5:1a:8c:c4:82:59:3b:83:c7:74:b0:db:26:8c:
                    42:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C3:B9:22:A1:72:EA:A0:C8:FE:5F:9A:92:D8:92:AB:57:20:C7:11
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c4eb3716-8fa5-4dd5-90d2-e8f5f6fbe6c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6100::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:25:03:41:6e:80:6c:a6:f9:8b:80:a6:8e:6b:25:61:43:ab:
         ed:09:71:a7:c4:bb:33:7d:ac:1d:c7:60:96:a6:6a:54:f8:83:
         22:cf:0b:25:48:6a:f6:bf:26:20:0e:a1:90:64:07:35:c4:b2:
         4a:a1:2c:5c:18:bd:cb:4b:58:ad:b7:00:43:74:9e:cf:23:da:
         c4:df:c9:c4:2c:b9:6e:fd:bd:f9:b1:59:66:f1:ee:7c:12:95:
         0c:25:dd:1f:a0:4c:2c:da:12:44:51:ac:3c:a9:27:4a:0d:8a:
         39:d8:29:54:16:13:26:82:0d:80:58:40:65:4d:ed:e8:86:77:
         6d:0f:37:3e:48:f0:a5:a2:05:ac:3e:37:8d:0e:bc:1e:80:ad:
         77:84:4b:80:bd:e5:2c:aa:32:34:d9:77:93:d5:8b:fa:d3:dc:
         28:f3:b3:d0:dc:fe:4d:db:5f:c7:64:5e:33:57:28:8b:f0:f0:
         ba:5a:3e:66:01:cd:19:91:be:7f:ba:c3:3c:c2:c2:e5:4a:9b:
         9d:e9:25:b9:d2:70:bd:ea:81:3a:f2:83:6c:c3:09:b7:59:c1:
         ff:ce:0d:e7:87:23:9b:42:c3:9f:d9:db:b6:91:38:de:c5:66:
         de:8f:8a:25:d6:24:63:d3:be:9b:13:40:f2:35:d6:c2:43:ba:
         2f:22:24:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:54:44 2026 by rpki-client