Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/34d2989d-a347-4758-b589-d1d15187e581.roa
File:                     34d2989d-a347-4758-b589-d1d15187e581.roa (raw, json)
Hash identifier:          ettUGaCF7XxeWxBwjx4GJVD64/GjuywqqxkktNGWMgw=
Subject key identifier:   E6:43:46:CF:26:0F:43:96:A9:FF:92:98:1D:89:E2:60:5F:70:DB:13
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       595BB181552C922D6513EC724781114C52340416
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/34d2989d-a347-4758-b589-d1d15187e581.roa
Signing time:             Thu 02 Jul 2026 00:00:05 +0000
ROA not before:           Thu 02 Jul 2026 00:00:05 +0000
ROA not after:            Wed 30 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6025::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5b:b1:81:55:2c:92:2d:65:13:ec:72:47:81:11:4c:52:34:04:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul  2 00:00:05 2026 GMT
            Not After : Sep 30 23:59:59 2026 GMT
        Subject: serialNumber=d2236d4d8cbb0235cfcf7ad9b52de218c2f4b9dc21ae5f44f434d1d98fafa691, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:93:4c:d4:49:59:c5:51:38:1a:23:dd:99:d9:
                    e6:b5:90:b1:1e:96:8b:1a:b5:80:4f:f5:da:6a:cf:
                    60:8a:78:b7:7b:f7:5a:bd:37:2e:c6:ab:3a:38:21:
                    2d:53:7f:36:0d:02:98:07:cb:3a:1e:6f:ea:ce:8e:
                    12:10:b5:a2:ef:76:7e:36:aa:aa:38:f4:af:07:c7:
                    8f:96:11:8a:0b:34:e9:4f:9f:3a:65:fd:44:5e:73:
                    10:a8:04:70:a5:10:7a:5a:91:f7:77:a0:0f:20:45:
                    6e:73:49:6b:d3:97:d4:93:c4:d0:a5:17:50:52:07:
                    ea:d8:9d:43:a9:45:5b:93:58:ce:8d:a1:87:c6:1b:
                    2a:82:7c:50:c1:f3:65:5e:3b:93:34:48:70:4b:8d:
                    6a:36:37:55:60:98:5d:56:6f:98:67:f8:5f:e1:75:
                    9a:c1:84:13:58:bb:25:d7:7e:cf:3d:46:8f:23:e4:
                    4d:3c:39:29:c5:a8:1b:28:3f:c1:5b:2e:e2:c9:04:
                    28:86:19:d9:f8:1b:56:ee:46:b8:f1:5b:99:66:3c:
                    d0:9d:46:e6:ab:c8:6a:2d:08:1e:41:6a:10:2b:12:
                    c4:17:f5:39:52:7e:34:5a:0a:8d:16:5f:e0:69:54:
                    10:e5:6d:e0:25:74:0d:33:b2:ce:bd:4b:dd:ec:a5:
                    3d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:43:46:CF:26:0F:43:96:A9:FF:92:98:1D:89:E2:60:5F:70:DB:13
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/34d2989d-a347-4758-b589-d1d15187e581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6025::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:4a:d9:67:b3:1c:1e:9d:14:ba:40:e7:43:82:16:08:0c:25:
         62:57:9b:5c:88:d1:cd:a7:d1:5a:8d:01:06:8e:69:62:66:84:
         1e:75:e5:ea:bb:18:be:15:2f:fd:a8:cc:1a:ce:ac:49:ae:d9:
         9f:01:a3:f1:77:c1:c9:1f:7d:28:bd:d6:a7:95:a6:d3:81:82:
         7d:89:1f:cc:b2:fc:5c:61:83:9f:d1:88:1a:82:bf:8d:8a:ce:
         4a:f3:a5:c0:e4:01:a3:3c:c6:6e:87:e1:d4:e4:11:71:e7:2c:
         8d:9e:99:96:ae:99:ad:72:6f:f7:cc:c1:c1:2a:63:93:75:8c:
         dd:46:30:5c:cb:38:fc:07:f8:7d:3f:4c:ea:31:c5:ae:87:54:
         26:f0:23:d7:1e:10:5e:93:30:aa:de:87:df:53:f9:95:73:cb:
         82:f7:17:0f:3d:ab:34:40:af:4d:ac:e5:47:f9:33:a9:21:50:
         d9:a1:12:2a:52:69:1b:99:39:d8:58:19:27:c0:9f:f7:f0:68:
         d1:db:88:84:db:20:80:58:0a:17:a5:7c:fb:8b:ec:33:c6:f4:
         9e:54:90:f8:e7:1d:f3:9e:65:12:71:df:63:8b:74:0f:2c:e5:
         95:9e:d6:13:95:97:75:f8:04:18:a3:7f:49:0f:89:3a:34:aa:
         49:a6:3b:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 15 18:18:36 2026 by rpki-client