Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc62a4ed-a4bf-4634-b6f3-0c70bedb7068.roa
File:                     fc62a4ed-a4bf-4634-b6f3-0c70bedb7068.roa (raw, json)
Hash identifier:          kMO7hqhjolCUo2hk1ck3AAPU58vDOEgTXpMx1dxi6O4=
Subject key identifier:   75:E5:73:25:80:3A:68:19:28:AA:EB:6F:68:E4:3A:53:7F:50:B7:03
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       20227900997C506F31D6AA29FE0211464A442DB2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc62a4ed-a4bf-4634-b6f3-0c70bedb7068.roa
Signing time:             Mon 11 May 2026 01:30:11 +0000
ROA not before:           Mon 11 May 2026 01:30:11 +0000
ROA not after:            Sun 09 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f000::/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:22:79:00:99:7c:50:6f:31:d6:aa:29:fe:02:11:46:4a:44:2d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 11 01:30:11 2026 GMT
            Not After : Aug  9 23:59:59 2026 GMT
        Subject: serialNumber=a10d69ba681b590e6203475aadb28cafbdee1898e9b31e7cae0a724e4fb6bf4d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:31:8c:ed:71:34:ea:fc:a3:02:ea:06:d2:22:
                    13:03:41:1f:d8:71:e6:ab:e0:64:81:ce:05:96:ca:
                    63:15:00:03:56:84:c8:fc:56:6a:3f:9a:15:bf:28:
                    21:14:b9:c7:4e:ce:c3:e1:12:04:7a:6d:e0:48:0e:
                    7b:9e:60:4d:ee:a1:aa:c7:7e:a7:c0:bc:d0:ec:ba:
                    20:70:3c:49:68:d3:e9:6b:5b:20:1b:62:e8:c9:4b:
                    85:e2:0d:bd:9a:77:5b:fd:d5:58:71:77:70:94:d5:
                    4d:80:a3:bc:37:28:5f:b1:ee:1d:fb:d2:76:3c:0a:
                    65:1b:99:52:ab:f7:c1:7e:00:26:a0:3c:8b:98:b1:
                    40:aa:d2:67:42:bd:eb:19:29:88:c7:7c:87:6f:0c:
                    c7:f2:06:bb:65:4c:b4:7b:15:ea:b7:e4:91:a9:af:
                    86:13:28:5c:a4:d8:44:3b:eb:1c:6a:16:aa:c9:72:
                    ef:91:03:07:9a:07:aa:bd:5f:bc:b9:f3:9e:e1:44:
                    0a:bc:fa:6d:86:50:85:35:49:a3:c9:e7:24:91:0c:
                    50:cc:44:0b:68:10:7f:a1:a0:94:19:39:c7:56:17:
                    c5:bc:09:21:a8:d9:77:4d:6f:b4:fc:d1:ea:bd:1f:
                    38:d9:df:8b:8f:b0:3a:41:b7:fa:24:8b:8e:0f:75:
                    85:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:73:25:80:3A:68:19:28:AA:EB:6F:68:E4:3A:53:7F:50:B7:03
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc62a4ed-a4bf-4634-b6f3-0c70bedb7068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f000::/24

    Signature Algorithm: sha256WithRSAEncryption
         82:25:e7:90:17:f7:28:56:b8:87:10:86:ee:ac:0f:9a:a4:1a:
         59:0a:3a:88:99:19:3d:44:b4:21:3a:14:80:7c:e3:41:a7:99:
         7c:5f:4e:bd:0c:36:cd:c2:4c:01:82:c0:4d:85:80:6f:5f:ab:
         93:bd:13:b8:63:f7:6e:f2:88:9b:68:c5:e8:b6:fb:5d:13:56:
         48:a3:61:b6:e2:8f:f0:46:8a:5e:87:ec:c5:27:79:88:ca:18:
         bd:c4:32:8a:f5:85:f1:bd:aa:09:e8:e0:52:dc:bd:89:39:43:
         12:21:a7:57:10:5e:28:f3:72:69:b9:04:78:c8:86:0b:b7:17:
         7c:21:c7:16:51:20:61:b0:2e:34:70:17:77:f6:fe:9e:66:eb:
         b5:17:c6:c8:c4:6b:27:e9:fe:ea:93:92:4e:cf:a3:c7:56:d0:
         e6:a9:c0:23:9f:1f:a3:96:dc:6d:32:56:3c:ec:4a:e0:a4:bb:
         b4:b9:17:7e:b3:a6:d9:2c:8d:74:38:13:cd:71:1f:dc:b8:d6:
         12:97:cb:e0:05:ac:09:32:a2:9c:26:5e:c7:ce:49:e7:06:52:
         46:42:fd:0f:e9:68:f7:10:34:a5:58:22:87:e6:62:66:ca:ea:
         45:9c:9c:fc:e3:7b:2b:9a:e6:0e:f2:fd:e2:71:ad:36:a3:a5:
         8c:01:51:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:24:32 2026 by rpki-client