Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa
File:                     37e5da86-98ab-4d9c-889e-6ab6e277d866.roa (raw, json)
Hash identifier:          6nFPfjPKS3IECZKbhGDbASOqMUjksNX3pAdgN1w0T88=
Subject key identifier:   54:0D:01:0F:06:74:4D:BA:77:38:8B:D8:A0:05:B3:26:3D:DD:94:36
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       22FFC7C16E71D4BADA487248A82C3E35DC03753B
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa
Signing time:             Fri 07 Aug 2026 04:10:35 +0000
ROA not before:           Fri 07 Aug 2026 04:10:35 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ff:c7:c1:6e:71:d4:ba:da:48:72:48:a8:2c:3e:35:dc:03:75:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  7 04:10:35 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=027f7a5d59feae276fe57c709290efbffac03dab840115ddfdcb567bcd5c6a18, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:27:40:26:43:cc:66:e6:f7:49:dd:38:8e:
                    06:c7:19:8a:2d:f1:7f:1b:db:7f:01:15:e8:69:12:
                    aa:f3:d2:3b:41:a3:6b:c9:4c:e1:29:cc:83:45:0a:
                    f5:d8:e4:72:8f:1f:8b:58:7b:5f:6b:9d:6e:8f:c0:
                    e2:e4:4e:76:41:2a:f1:93:c4:06:8d:a1:5e:c6:a7:
                    f2:f9:7f:cf:d9:99:2f:59:10:5e:8e:a1:a4:8c:e5:
                    8f:d4:c7:45:2c:0e:80:88:43:22:93:55:7f:4b:36:
                    cb:b0:a2:fe:26:2a:79:a0:83:ad:ef:38:ab:6b:93:
                    c8:43:94:13:e6:42:f9:2b:77:5e:50:fe:a6:1e:bc:
                    be:3f:e6:47:45:97:85:5d:ca:a9:a8:67:d1:f8:cc:
                    61:ff:6a:92:19:8a:ee:af:82:61:ee:64:76:60:f8:
                    22:0c:37:79:83:40:87:58:5a:b4:cc:22:21:c3:74:
                    54:cf:fa:a1:be:3b:30:7e:6c:58:93:c7:b6:85:64:
                    ba:b8:99:d2:b0:8f:7c:43:bb:8f:75:1a:e8:8e:f8:
                    30:61:2d:d4:b4:65:a2:70:fd:3a:d2:23:10:59:10:
                    e7:37:4e:43:e3:43:59:51:98:8b:87:8b:76:b4:30:
                    9d:26:86:55:ed:1f:7f:e2:78:26:ed:bb:b7:1a:f9:
                    19:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0D:01:0F:06:74:4D:BA:77:38:8B:D8:A0:05:B3:26:3D:DD:94:36
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/37e5da86-98ab-4d9c-889e-6ab6e277d866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:cd:ae:0d:bc:91:7c:a5:52:2d:1f:96:4d:e8:42:be:50:1d:
         d4:49:19:6c:76:e3:bf:2f:71:41:64:be:e2:e8:e9:25:df:87:
         d4:66:bc:b9:f8:ee:2d:53:69:af:72:2c:07:09:f2:ae:4a:2b:
         3b:69:f1:4a:05:15:1d:c5:ce:8d:a8:b0:40:a8:c1:1f:4f:9c:
         16:c6:3a:a2:b7:88:f7:47:6a:95:87:16:00:d5:23:b1:99:a0:
         74:5b:39:37:17:28:8a:eb:a4:b8:0c:41:a6:cf:c8:07:b2:01:
         a6:ed:79:3d:41:99:e6:38:d4:36:4f:81:8c:16:be:6e:26:ed:
         59:45:38:21:bc:cc:df:71:94:da:cf:77:69:18:77:d2:41:c2:
         db:4c:b9:b8:f5:f3:27:38:f0:91:8e:23:a6:c7:87:df:23:36:
         37:0a:4b:17:ac:27:8f:4d:4a:86:69:9e:8e:ff:23:44:97:eb:
         ac:df:0a:50:25:38:e0:86:3d:8e:79:51:0c:b3:90:7b:01:0e:
         ce:25:e2:dd:1d:ac:10:e1:0a:2e:d8:9a:26:20:7a:85:ab:64:
         a6:53:71:d9:86:fb:92:0a:41:55:a7:89:93:9a:ad:d1:94:b3:
         43:de:82:74:60:f5:92:b6:a5:e8:b1:fb:f5:fb:ae:28:bd:95:
         3c:50:8c:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 9 01:44:29 2026 by rpki-client