Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b2fd38c-e5ed-4d75-8053-4eb0318268ec.roa
File:                     2b2fd38c-e5ed-4d75-8053-4eb0318268ec.roa (raw, json)
Hash identifier:          7zl2gVAaLwq7X5u5EcIPJSh5WxR0do+ore/lRZlBgvA=
Subject key identifier:   1F:E2:1E:CC:8B:0D:0E:5A:71:88:4A:E3:1F:62:66:6C:79:0D:4E:FD
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       57B70C43717FEDF5771A3B8FD009874576457470
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b2fd38c-e5ed-4d75-8053-4eb0318268ec.roa
Signing time:             Fri 08 May 2026 16:47:15 +0000
ROA not before:           Fri 08 May 2026 16:47:15 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f0f0:700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b7:0c:43:71:7f:ed:f5:77:1a:3b:8f:d0:09:87:45:76:45:74:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May  8 16:47:15 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=0431fd07e0cdfb0a8fccf9626855fe11144bec59735252731124379bddd0d7b5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:ea:60:cd:54:41:ea:91:57:e4:81:06:3a:
                    f5:d2:1f:72:0b:6e:8f:2a:ab:ad:86:f9:fe:c3:fa:
                    58:42:30:e7:75:88:a4:15:38:c2:3a:7d:9e:eb:75:
                    b1:81:df:83:7a:29:73:b7:e3:07:01:59:e9:e8:29:
                    8c:0b:06:8b:93:8b:7c:77:d4:de:07:1d:cf:1d:ee:
                    1a:e0:68:1b:d4:80:d9:e3:e3:8c:92:3d:5e:42:e9:
                    9b:bc:d3:4a:1c:6b:8f:cf:ee:0e:a9:95:83:c3:85:
                    13:75:7d:3a:c5:e2:99:af:bd:40:0c:81:9b:c9:56:
                    b4:14:a6:97:5a:f2:09:fe:77:06:53:0d:1d:7b:6c:
                    72:d1:d7:dc:50:ef:4b:bb:3a:95:fa:a6:fe:b5:e6:
                    96:12:37:7f:4a:c8:cb:0f:fc:a7:0c:bb:cb:cc:3d:
                    03:92:bb:b9:20:53:fd:7d:60:fb:7a:06:a3:72:41:
                    45:28:b1:ef:92:bb:f6:c4:0c:26:db:5b:af:48:95:
                    13:48:23:7b:21:c3:d7:b5:a9:53:dc:e9:fe:5b:0f:
                    36:28:58:26:44:c1:32:76:3a:80:d5:5d:31:2f:7b:
                    f2:27:2b:f4:66:b6:46:ac:74:5e:0b:8b:12:de:bf:
                    b8:25:ac:03:a5:0c:88:dc:9c:a5:33:c0:f4:15:9f:
                    f0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E2:1E:CC:8B:0D:0E:5A:71:88:4A:E3:1F:62:66:6C:79:0D:4E:FD
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b2fd38c-e5ed-4d75-8053-4eb0318268ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:9c:91:30:e8:bc:42:18:76:4a:a5:c7:74:a2:a2:9a:d6:6f:
         68:2d:ef:e9:d9:c6:0c:e8:74:eb:33:ea:fe:51:35:c4:94:9f:
         24:e0:90:58:2e:a9:25:c0:36:c9:c9:b1:e3:3b:c4:83:12:45:
         3c:1e:06:b6:6d:4a:1f:b4:26:e0:f4:bc:ee:2b:71:7a:6d:1f:
         ea:73:4c:37:b5:11:3b:5b:3e:7c:cd:85:e1:7c:bb:11:17:eb:
         03:ae:ff:49:09:e7:d0:2f:17:c2:02:e8:29:b8:37:5f:a2:ec:
         ec:fb:b0:da:84:57:d0:40:d5:dd:32:0f:84:66:d7:c3:04:f2:
         45:2d:01:ea:0f:d1:f3:c4:f5:de:b0:b8:ae:d1:ee:71:65:53:
         68:3d:02:b4:ad:ef:db:1e:0b:92:f6:ae:29:e8:8f:19:c9:ba:
         3b:97:34:a9:d8:a4:b9:ba:ad:c1:a2:3b:4a:20:95:9c:cb:a8:
         b7:46:31:71:f0:da:6d:eb:55:80:0c:68:30:91:eb:0c:aa:0f:
         a1:de:a9:51:3a:9b:ef:51:9c:75:6e:1b:73:39:19:9a:0e:0e:
         1b:81:28:06:cb:db:a4:fc:48:cf:ec:4a:78:c1:d8:4b:60:a1:
         8b:82:1e:1b:52:41:1c:0f:63:c3:26:7e:88:9f:1b:cd:01:4a:
         3d:19:8a:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 10 11:26:34 2026 by rpki-client