Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa
File:                     0b456d9a-b78d-45ba-9949-b00a9581f118.roa (raw, json)
Hash identifier:          xA4fTQc/R1187gXEFO9pwpJeWPWfHkovkyVctB1ELcA=
Subject key identifier:   EE:0C:85:B3:1B:75:7C:B1:A4:65:78:FC:B2:FD:DF:C7:90:38:BA:DD
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2FA14425D30E533C8B45E32B03FEECA6081016E7
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa
Signing time:             Tue 19 May 2026 04:10:36 +0000
ROA not before:           Tue 19 May 2026 04:10:36 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:ec00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a1:44:25:d3:0e:53:3c:8b:45:e3:2b:03:fe:ec:a6:08:10:16:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 19 04:10:36 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=972071d35b33127091a070af793e42f0787cbaed8340f14df090799ef6a1ec99, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b9:43:28:10:ab:44:ef:f3:0b:1f:63:d8:07:
                    61:fd:75:03:20:f7:1b:9a:91:4c:46:f6:c0:f8:cd:
                    ef:7a:a7:76:10:4f:e5:44:83:d8:89:ba:e9:ea:43:
                    a0:b2:c8:97:6e:10:48:dd:75:8c:27:88:73:57:15:
                    16:17:97:78:56:96:f1:ab:b9:37:ee:59:74:13:b9:
                    49:81:54:5d:91:93:44:36:b0:86:bb:3f:97:b9:d0:
                    5c:71:79:48:0f:a1:51:c8:2a:b4:19:18:cc:d4:57:
                    e2:75:30:74:8d:91:88:59:fc:3a:fa:34:d8:9b:5e:
                    26:12:a0:93:da:8e:ba:99:35:a3:2f:5a:2c:78:b6:
                    53:51:38:54:0a:93:74:d4:0e:ca:da:3d:f4:95:e2:
                    61:76:d7:bb:f4:49:a3:94:2e:5b:09:f4:5e:3b:75:
                    a9:34:a3:9a:67:06:7e:3e:a1:97:da:fc:3b:1c:d7:
                    fb:48:49:42:cf:72:78:b7:86:f0:4a:8d:c9:2a:dc:
                    f6:dd:e5:4c:2a:9d:d5:63:17:d4:63:9b:a3:89:b7:
                    97:ed:60:5f:1a:f9:78:96:f8:1e:ec:14:93:be:b8:
                    c5:c0:49:18:e5:80:5f:20:f3:00:ff:28:56:81:4e:
                    87:b5:aa:a4:5a:0e:0f:5b:c1:41:3e:c5:24:9b:3e:
                    47:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0C:85:B3:1B:75:7C:B1:A4:65:78:FC:B2:FD:DF:C7:90:38:BA:DD
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0b456d9a-b78d-45ba-9949-b00a9581f118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ec00::/42

    Signature Algorithm: sha256WithRSAEncryption
         87:b5:0c:83:1b:56:6f:c5:0f:9f:7d:a5:e7:6a:d7:a1:2c:54:
         40:6a:38:7f:9e:06:9a:fb:6c:bb:6c:0c:d2:5f:42:77:f2:9d:
         b3:1f:bf:f5:eb:68:45:37:b2:56:c7:dd:34:f9:07:84:05:cb:
         5b:5a:47:5d:20:d7:22:36:5e:2c:61:68:b2:ce:3a:f7:3b:bc:
         ed:c2:00:ad:2e:7a:0a:85:52:89:a7:1c:32:63:35:21:22:e9:
         b9:71:e9:da:98:64:38:21:05:f0:d5:19:98:0b:68:05:9b:31:
         65:44:7f:63:97:ba:f3:98:ab:de:4f:51:2a:8a:da:38:0c:46:
         1d:2e:53:02:21:00:3f:76:f3:ee:39:06:86:9e:f1:11:22:96:
         d1:ab:a3:64:00:46:ea:93:7b:80:34:bf:5e:15:33:08:34:0f:
         6d:fc:bc:ae:b8:a4:b7:df:7f:34:33:ef:d6:0c:94:7c:19:c6:
         b4:ab:d8:56:2c:98:61:46:24:e9:51:b7:cb:92:53:a7:05:73:
         5b:ae:04:d7:b8:7c:94:d4:3e:bb:61:1c:20:c9:e2:2d:6a:37:
         54:48:8c:73:1e:df:26:3e:8b:5c:44:21:08:2e:4f:ea:1e:43:
         ea:77:fb:bd:4e:c4:18:e7:78:03:3d:52:d4:7c:44:c6:73:89:
         c2:76:a8:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:50:16 2026 by rpki-client