Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa
File:                     06e0a97e-b500-434c-94b4-3eadd34e5d34.roa (raw, json)
Hash identifier:          lMsnLrf0aiYNvDsrGmIGMvksy1rF6zuLOcQfHSt+6bc=
Subject key identifier:   0D:8D:EC:DC:1E:D7:B2:20:9D:3D:AD:0B:4E:21:68:55:DB:4D:DD:71
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       214EA5C8DD0F51CCC1C5B3578E4147719C7089D4
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa
Signing time:             Sat 08 Aug 2026 00:50:26 +0000
ROA not before:           Sat 08 Aug 2026 00:50:26 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:f103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:4e:a5:c8:dd:0f:51:cc:c1:c5:b3:57:8e:41:47:71:9c:70:89:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  8 00:50:26 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=83a214472daf73599a4b8036311a19b5eb889ea2dbbd938343e6ad13700c04dd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:1b:fc:07:cc:db:33:ec:a9:e8:8f:47:65:
                    53:cf:92:27:70:22:f0:86:c3:7d:36:e9:35:11:3f:
                    78:a1:7f:f7:96:8d:c7:90:fe:22:d2:49:76:45:e9:
                    7c:e8:c7:7e:7c:c5:d8:d3:be:4d:69:a5:a1:d3:fe:
                    2a:44:95:11:5e:d8:f0:a4:03:6b:c7:50:cb:ef:3a:
                    e8:db:ef:61:36:07:fe:f9:68:3a:44:b2:30:b5:0b:
                    1e:a8:84:2f:20:6b:65:9a:1d:d5:23:83:cc:c7:71:
                    c2:9b:7a:f8:04:1f:9f:93:1b:c1:56:b4:e8:68:2a:
                    34:b4:08:cf:eb:87:7c:4d:41:36:ce:90:bf:d9:c6:
                    5e:06:c2:1c:91:2a:f6:1d:f3:1b:c3:ce:37:d7:79:
                    48:66:69:f3:13:7e:c8:a2:ec:11:de:d2:83:ee:48:
                    2c:ce:42:f6:df:3e:42:07:13:f1:3f:8a:c4:d7:7c:
                    c3:c6:42:57:ab:83:20:3f:09:fb:6f:2d:fb:77:8e:
                    0e:50:5a:38:70:9a:34:3e:dc:81:20:cb:87:5e:ae:
                    20:cf:3e:3d:da:46:98:8d:e5:b3:07:6a:77:ac:ac:
                    0b:ea:5c:ae:3a:35:e3:ef:28:38:39:25:3a:83:4e:
                    14:2f:60:a0:73:0a:00:a0:4c:a6:81:a4:00:29:73:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8D:EC:DC:1E:D7:B2:20:9D:3D:AD:0B:4E:21:68:55:DB:4D:DD:71
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f103::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:d6:0c:ea:dc:4b:09:ed:c1:9c:39:8a:87:9f:f8:11:7a:df:
         e8:5f:f8:64:58:72:38:53:4a:68:aa:7a:13:2b:a0:c8:ab:89:
         35:06:74:3a:d7:21:91:75:1b:a2:f5:45:11:3a:4d:35:4b:fb:
         7b:8a:5c:2e:0f:ba:68:93:80:99:e1:05:60:bf:7b:8e:93:7b:
         9d:36:75:71:26:ae:4a:1c:e1:67:a5:b2:d1:98:bd:0e:34:04:
         2a:b8:76:54:0c:7e:d5:7e:7f:06:a5:ef:c4:c9:3b:ab:56:50:
         d0:c0:d5:c1:89:9f:c1:9d:dd:46:9d:8b:0c:00:27:05:f0:60:
         6a:ae:83:80:5b:f0:48:e4:1c:8d:82:c6:7c:e6:fd:45:72:3c:
         97:53:cd:86:c1:09:07:c4:f8:44:03:66:35:2b:78:11:ec:3a:
         8b:8f:62:5b:87:17:7a:3e:7c:55:94:aa:c5:98:8c:ff:9b:ca:
         ba:19:8a:c4:7b:7e:ae:53:fe:76:82:64:3e:70:33:2a:62:88:
         6f:2c:06:a7:83:a8:39:ef:f3:7f:cf:c2:ae:3a:85:b0:49:18:
         f6:b0:91:42:1a:f1:c1:b1:c1:19:35:40:e5:62:2f:3e:58:f6:
         05:1c:de:50:f8:4c:1a:4d:4a:1b:00:f7:71:de:ce:68:99:04:
         63:5b:e4:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:16:02 2026 by rpki-client