Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa
File:                     f5b1d1bf-721f-4a57-a400-f549c190180c.roa (raw, json)
Hash identifier:          p8SLb8StQrZLPdLSSDBavZCTs0rnDrqVmIA17VFg61E=
Subject key identifier:   3B:7D:06:92:29:5A:AF:23:A7:B3:47:5C:33:75:60:F0:9A:17:83:4C
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       39C2321973C77BB227EABA06388604CDC093A951
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa
Signing time:             Thu 23 Jul 2026 15:00:21 +0000
ROA not before:           Thu 23 Jul 2026 15:00:21 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2606:8140:400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c2:32:19:73:c7:7b:b2:27:ea:ba:06:38:86:04:cd:c0:93:a9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jul 23 15:00:21 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=e1e858ded22ca058a80c0b072e1f7362e51a01d1ebaa7226f8312565a4e44e0d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c7:19:2a:38:c2:c2:26:a2:70:9c:08:c6:6d:
                    80:c5:01:50:0b:b5:41:53:18:4e:b2:d9:06:8b:8e:
                    d8:b1:9e:e1:b6:71:10:fb:7d:d6:43:0c:e0:f7:c2:
                    23:3e:e6:a5:35:59:e4:1d:3a:bf:16:af:14:24:5c:
                    69:68:5f:b1:a2:0c:38:09:5e:bb:bd:89:b8:9d:61:
                    b5:00:7c:6a:5c:33:2d:46:b9:e3:98:4e:f2:97:a5:
                    7d:6e:cf:b7:c0:62:b8:27:9e:70:46:ab:ec:19:8f:
                    5e:07:df:7b:6b:de:f1:8f:fc:d5:17:93:7e:ad:81:
                    4f:b9:f0:d8:a3:91:ed:2d:09:c7:99:3c:84:23:f1:
                    7e:4f:20:ac:a3:58:03:de:c6:dc:01:11:1f:6f:6c:
                    16:7d:c1:44:f7:37:e3:98:16:f7:eb:87:c8:b2:da:
                    24:2e:ae:94:0b:87:82:fe:7b:9d:19:4f:8f:bc:af:
                    de:e6:d6:fe:af:ea:33:b3:d7:c0:bb:39:54:10:82:
                    34:ca:da:cb:ec:4a:cd:f6:6a:49:0b:28:dc:6f:c8:
                    81:12:52:e2:e2:83:29:3f:d9:e4:66:07:9c:cc:8c:
                    2c:44:b1:0a:69:5e:6f:15:79:3f:3e:f6:85:f7:e5:
                    80:70:7a:7a:bc:2c:8a:2f:d1:ec:f7:21:90:89:72:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7D:06:92:29:5A:AF:23:A7:B3:47:5C:33:75:60:F0:9A:17:83:4C
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:8140:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:c5:f0:d5:9f:1d:e7:cc:c8:db:4f:7e:bf:47:da:33:96:d8:
         20:3a:1a:60:e8:b8:24:d0:53:f2:d7:aa:67:96:a3:13:f0:b9:
         23:32:05:fd:43:52:bf:36:21:7a:bd:c9:79:85:1f:84:6d:b3:
         40:f9:a4:63:b3:51:7a:b3:da:23:03:78:e0:fe:79:00:08:2c:
         43:1a:55:c8:f4:1f:4f:a6:0f:23:29:2e:3e:2b:82:b5:7e:f2:
         69:a7:1f:e3:77:ae:c3:08:e9:e9:8f:23:21:cd:87:cc:a9:5d:
         32:5f:31:28:94:b9:5f:60:ce:b7:a2:4b:88:72:d7:90:d6:e5:
         c2:a6:bd:c3:6d:ed:40:51:96:0d:1f:90:03:61:31:39:74:f3:
         14:58:ec:71:59:ac:53:b4:49:e4:65:da:85:73:27:b8:20:af:
         49:f7:e1:c7:70:91:81:0d:1e:a3:3e:fe:93:99:26:ca:97:7f:
         35:ec:fb:8e:93:10:cf:08:6b:26:f3:bb:0a:98:86:f7:ca:6a:
         51:20:38:59:3d:0b:b4:7a:8d:a3:71:fc:17:b0:ef:eb:71:f5:
         c7:e8:a2:d9:2d:df:27:e7:86:e1:e7:ec:33:67:24:5d:40:e1:
         52:24:7c:68:a0:c9:e0:5c:4d:99:b3:0a:79:be:e0:5a:14:b1:
         07:17:94:c3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:41:27 2026 by rpki-client