Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/08636c0c-a8ea-4a39-8ce7-39bd020af74f.roa
File:                     08636c0c-a8ea-4a39-8ce7-39bd020af74f.roa (raw, json)
Hash identifier:          v/g0du+oZT0EBfkrtGGt77lu12HKqPPxB5zRCbNX8LU=
Subject key identifier:   8F:1E:BF:86:1A:3A:FA:8A:C4:A5:E3:27:44:48:C3:6B:79:13:C2:7F
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       49968F3F14BD128B5365903CC79ED8B1EC76991A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/08636c0c-a8ea-4a39-8ce7-39bd020af74f.roa
Signing time:             Thu 14 May 2026 01:40:06 +0000
ROA not before:           Thu 14 May 2026 01:40:06 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:5506::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:96:8f:3f:14:bd:12:8b:53:65:90:3c:c7:9e:d8:b1:ec:76:99:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 14 01:40:06 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=f7a09b1575f9371c4de789b3a962c3116ae3567742030d3405dccc271874eca2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:9d:c2:53:01:19:0d:1d:bf:f4:2b:a4:ff:
                    37:12:82:2d:aa:a9:62:bd:89:56:bf:e0:80:a6:9d:
                    1e:02:8c:22:a8:80:57:9c:0b:78:9f:6a:c7:bd:eb:
                    80:f8:a7:0e:1d:71:ca:9a:d2:86:ff:fd:c7:b5:ae:
                    29:f5:20:32:f1:2b:10:cc:d4:c2:27:8e:60:1b:f0:
                    96:c9:7d:a3:eb:b0:27:07:37:1e:7a:fd:fe:29:7f:
                    c9:0f:9b:76:e5:15:64:84:6c:d3:20:4e:30:d7:97:
                    5b:34:65:bc:e2:bd:84:53:6d:bc:da:09:64:61:e5:
                    ca:68:b9:e8:2e:c7:f1:14:66:5b:78:0c:98:96:38:
                    07:e1:37:5e:3b:4f:c8:5a:6c:57:a0:66:aa:92:b8:
                    98:94:5a:2f:36:6f:4e:3d:02:49:c8:79:75:5c:4f:
                    7b:06:05:f1:2b:df:88:95:5c:a8:d6:34:2d:a7:04:
                    36:fa:d9:9d:be:ee:26:e5:48:d6:41:17:22:60:fb:
                    5d:ef:be:42:4d:36:6f:11:68:e0:d3:95:f9:37:13:
                    a0:8c:72:4a:7a:ce:3c:f1:32:b5:08:d2:8e:41:b8:
                    3a:30:e2:d8:0c:ef:0f:ec:a2:5d:87:c7:bc:e0:a8:
                    e6:a6:d3:c7:97:57:62:4c:e9:ae:60:a9:7a:c1:ae:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1E:BF:86:1A:3A:FA:8A:C4:A5:E3:27:44:48:C3:6B:79:13:C2:7F
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/08636c0c-a8ea-4a39-8ce7-39bd020af74f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5506::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:e4:8b:fe:ec:88:3b:e6:0f:3b:52:2d:fe:e7:b6:1e:19:04:
         a5:c5:66:22:34:62:b7:aa:ed:6e:00:cf:b1:1d:34:4b:d2:d5:
         d6:5c:02:21:41:80:c0:f1:a5:20:ab:e9:6d:2d:49:5e:30:f3:
         04:89:8e:c0:7c:f8:f1:10:8f:ed:25:58:3c:fd:bc:61:ca:a0:
         47:da:6c:4e:f9:9e:af:2d:aa:31:9a:eb:85:9b:35:41:65:ad:
         f4:84:3b:38:a4:bd:7f:77:fd:60:be:09:bb:6e:b0:af:30:58:
         1c:f5:e1:1c:c5:59:9a:17:b9:36:d6:16:f7:8d:fb:1b:a7:cb:
         a2:a2:79:f0:0d:86:6e:32:3e:56:e0:9f:6d:d8:25:db:2b:34:
         1a:2a:63:72:11:87:84:ed:47:ce:d8:d9:a4:c7:8a:2d:1b:32:
         4a:e1:3d:ff:fe:8e:7c:2a:b7:dc:24:f4:7a:48:dd:5b:ed:e0:
         62:75:04:b2:1e:17:8a:75:cb:1d:8c:e3:8e:b2:1d:a0:d5:0d:
         6c:e8:3c:4d:45:11:03:96:0d:a1:0f:cc:85:5f:a5:33:12:f8:
         a6:20:df:09:c1:ed:ca:ff:3d:6d:3a:5a:47:0e:78:17:e8:2b:
         85:ec:69:8d:03:95:73:c5:21:ab:a5:03:97:ab:c8:38:5c:24:
         a0:5d:6c:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:50:41 2026 by rpki-client