Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa
File:                     2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa (raw, json)
Hash identifier:          vzEiyKP8s7rlNJmNKYmzdNh2a4GwMCXoPqR03cnF0w0=
Subject key identifier:   8C:44:37:84:9B:6A:23:57:D9:6B:68:16:B1:8E:32:CA:C7:57:24:BB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       01A894F12B09A68925CFB242A61E82B32BF66CBB
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa
Signing time:             Thu 30 Jul 2026 01:20:03 +0000
ROA not before:           Thu 30 Jul 2026 01:20:03 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f1:80::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a8:94:f1:2b:09:a6:89:25:cf:b2:42:a6:1e:82:b3:2b:f6:6c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 30 01:20:03 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=86906aa8a643ed7e455769f920e004e51542a9f272634c5155a87afb065c7a6a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:16:be:f6:85:96:a8:ed:17:f5:bb:b8:d0:
                    19:10:e5:bb:72:fc:73:d8:08:03:58:1e:a9:f3:af:
                    ef:12:76:c4:3e:e0:3b:74:18:05:dd:4e:15:ee:1c:
                    c7:dc:06:b3:d1:7a:f3:e1:fc:cc:05:eb:eb:36:9b:
                    b9:17:87:53:2e:f9:9a:04:b3:6d:f6:04:c8:43:55:
                    bf:83:59:9c:f3:63:14:69:0c:e2:7b:db:30:1e:83:
                    6b:05:23:f2:a6:32:21:37:6e:a0:fe:21:5e:93:5d:
                    03:54:10:df:03:56:a5:b7:5f:90:53:9b:92:5b:0c:
                    6a:d0:b0:91:8f:5d:5c:4f:2d:fd:fd:17:88:90:05:
                    e1:6b:2b:16:de:24:47:0c:16:27:2b:98:7d:a7:28:
                    e6:55:7a:48:b4:44:24:c3:23:3f:71:99:a6:cf:d7:
                    c0:89:66:59:c0:ff:d6:37:6e:62:7b:4d:b6:d5:7b:
                    33:da:82:2d:cb:fa:4a:d4:7c:24:53:48:00:a6:10:
                    84:42:14:22:51:8a:55:f5:cb:fc:5d:84:ec:8f:30:
                    40:0e:66:45:a3:e6:e0:90:1e:41:69:6b:a0:0e:fb:
                    fb:ad:07:21:8e:77:25:d4:91:5a:30:a9:46:c2:1e:
                    55:65:ee:da:a6:cc:51:2e:92:48:ee:c0:83:9a:88:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:44:37:84:9B:6A:23:57:D9:6B:68:16:B1:8E:32:CA:C7:57:24:BB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:28:71:37:b1:a5:40:a6:6f:7b:3e:e5:2a:6e:a0:e8:76:17:
         6e:de:4a:ba:f6:46:e5:76:9f:37:bb:08:42:76:cc:3b:ea:f3:
         d7:7c:fb:f1:eb:8c:91:f9:4e:8b:98:1d:28:b0:eb:f5:85:92:
         a6:2b:3a:2f:cb:10:df:98:12:c7:00:54:da:1e:a6:49:cc:5e:
         74:98:c1:51:8a:b6:d9:1f:d3:01:26:10:7a:dc:b8:43:38:6e:
         28:67:9c:dd:5c:c4:d5:4d:7b:70:02:4d:7b:77:85:43:9d:d4:
         ba:42:f7:81:4e:ed:84:00:48:dc:b2:83:e5:7a:53:ee:71:ae:
         d3:52:e1:5d:17:87:f8:5b:54:58:9f:27:ca:4f:21:63:d1:eb:
         e8:35:c9:f1:f1:57:34:e3:ee:3f:de:ec:31:38:be:67:2d:da:
         c4:08:45:f4:62:43:22:23:25:5b:c3:e6:38:2c:fa:83:e0:64:
         c2:c2:b6:9d:77:c4:ce:8c:9b:f6:f1:fa:7b:a9:2f:68:3d:46:
         f0:6e:80:e4:dd:38:05:2b:33:2f:09:a6:60:0f:8a:ef:71:df:
         c8:88:36:27:e4:08:c0:9f:9d:5a:f1:a6:6c:33:cd:54:55:67:
         d5:5a:26:43:6e:59:88:8b:56:c8:42:7e:c1:6b:a6:6c:2b:64:
         d6:37:2f:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:14:21 2026 by rpki-client