Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e44f32b3-ff36-487e-b814-9b622650bde3.roa
File:                     e44f32b3-ff36-487e-b814-9b622650bde3.roa (raw, json)
Hash identifier:          qoIc7fKXHP0OaxpMZXMM8KAz4oO06mWb3zKd5GvolYI=
Subject key identifier:   B3:21:42:E6:1E:43:2C:A5:F8:C6:33:13:B6:23:F8:84:B9:26:44:DF
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7D6663CFFF2CC7D82141E200BD307DEEEE4473E7
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e44f32b3-ff36-487e-b814-9b622650bde3.roa
Signing time:             Fri 08 May 2026 03:10:41 +0000
ROA not before:           Fri 08 May 2026 03:10:41 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:1100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:66:63:cf:ff:2c:c7:d8:21:41:e2:00:bd:30:7d:ee:ee:44:73:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May  8 03:10:41 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=6a662e19720109b9446e6c7f666a97eda8ab6dccd6275cd019ee98912fe5b4a0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:08:19:e0:df:d0:78:bd:d2:c6:ac:af:47:
                    d0:99:de:ea:60:fa:65:62:c2:78:6d:5b:cb:52:e4:
                    ac:3b:eb:7c:f7:35:c0:4c:13:09:7e:7c:70:eb:7a:
                    62:d7:7e:d2:83:b8:18:f6:bd:94:bb:e1:30:32:61:
                    12:63:a4:8e:bb:5e:0e:45:b6:1f:de:af:c3:63:8f:
                    7d:24:0b:88:5d:99:19:db:b3:89:99:20:62:c2:45:
                    8f:e5:df:e2:e0:f6:14:77:d3:51:9e:19:54:6a:6c:
                    b3:6f:8d:72:ae:0e:fd:2d:f0:53:78:b1:04:c4:0a:
                    55:78:84:9d:6c:dc:de:a6:90:bc:d6:14:d8:2b:95:
                    cc:db:6f:eb:3d:94:85:be:9c:8e:69:a9:0e:b2:eb:
                    91:76:a4:9a:98:b1:c2:c8:58:f8:77:83:c8:b7:c1:
                    bf:34:6f:4a:78:f5:33:4f:0f:a4:31:88:bb:87:b4:
                    00:d8:98:af:37:82:d8:b0:03:d6:e8:45:0c:ec:bf:
                    4c:85:76:80:ca:0e:f4:ad:33:07:f9:36:df:2b:e8:
                    1a:46:83:0e:dd:77:eb:ad:27:6f:ca:03:6b:98:50:
                    55:f8:4e:dd:48:a0:b4:39:ae:30:50:ed:f8:cf:9d:
                    2f:72:70:14:67:48:b0:c0:2d:b3:eb:9a:ca:ee:8e:
                    50:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:21:42:E6:1E:43:2C:A5:F8:C6:33:13:B6:23:F8:84:B9:26:44:DF
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e44f32b3-ff36-487e-b814-9b622650bde3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:d7:49:d4:51:fc:a7:ef:6f:1a:63:a1:e0:e7:85:41:dc:a4:
         52:fc:bd:78:ee:b1:24:07:b3:a3:06:c4:fd:cb:e9:db:af:05:
         70:ea:fb:51:31:78:78:95:50:6b:6a:5c:82:ca:0b:35:38:e5:
         1e:a6:d0:b8:2b:b4:e2:74:33:61:7a:c6:3a:bc:18:62:e6:67:
         97:1a:0b:c9:fa:77:5a:ef:1b:cb:fd:9d:cd:48:d4:60:b4:fc:
         0a:c2:33:84:f7:ae:24:02:0f:10:6a:40:55:77:99:a5:48:ed:
         4f:f5:f1:d2:04:40:77:46:06:5a:5d:ee:b4:7a:98:08:0e:ee:
         a4:4d:14:6f:52:fb:9d:98:29:bd:fc:a5:4a:36:c7:43:5f:43:
         ee:e5:ed:23:5f:99:f8:de:8a:d1:36:0c:10:76:74:ec:5b:8b:
         6f:d4:28:6e:d6:7a:37:57:73:47:42:19:8f:64:ef:e7:18:96:
         83:f4:b8:34:0a:92:58:ca:59:5a:0b:9e:48:58:14:be:7c:70:
         46:31:c8:b7:80:58:f6:a6:a2:39:b2:14:6f:83:b7:1c:a4:97:
         d7:59:9a:a4:13:f0:28:01:4d:29:68:df:51:64:30:1f:6c:14:
         46:e3:48:53:d1:53:b7:05:3b:31:3d:76:6b:9b:34:dc:67:40:
         98:9e:0f:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 01:25:26 2026 by rpki-client