Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5443f26e-949a-460a-b187-e26290bfcf24.roa
File:                     5443f26e-949a-460a-b187-e26290bfcf24.roa (raw, json)
Hash identifier:          zUwj1lYN5BxJ+r93ze2J05/abFS6C62PD0Qh/o6rYno=
Subject key identifier:   8B:F5:1D:80:8C:B1:0A:E2:01:D7:62:19:39:85:3B:B1:43:27:EA:33
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2BA6DC87C9A58CD5724D945D0F675F92054ED348
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5443f26e-949a-460a-b187-e26290bfcf24.roa
Signing time:             Sat 08 Aug 2026 00:50:58 +0000
ROA not before:           Sat 08 Aug 2026 00:50:58 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:4000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a6:dc:87:c9:a5:8c:d5:72:4d:94:5d:0f:67:5f:92:05:4e:d3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  8 00:50:58 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=f685b95310f653ebd04dfac77008f7dfcc6f5ef32b3f35f9918c48a77d4cefbc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:37:6a:cc:12:06:5b:b7:fe:dc:97:77:2f:
                    41:29:92:dc:9e:a9:86:4c:03:1d:ba:b7:2c:69:6f:
                    60:60:33:4e:80:48:2e:28:2d:be:f0:92:b5:41:ab:
                    7a:0c:c5:7f:17:b8:ef:2d:5e:2f:5e:68:fd:bc:74:
                    e0:ad:53:8f:fe:ee:65:4b:3a:74:95:79:1a:4f:7c:
                    e0:96:94:f8:f1:10:a1:3f:30:6a:62:84:3a:36:5b:
                    69:b3:26:bd:ae:99:41:e5:d6:96:8e:07:4e:c0:1d:
                    70:38:e8:92:c6:e7:4c:1c:33:2f:d9:b2:dd:31:b6:
                    26:2e:95:63:26:40:19:14:56:ba:03:01:cf:3e:d9:
                    0c:ab:38:ab:a0:6a:60:0e:73:42:7f:9e:94:ec:ed:
                    37:31:6b:8e:e9:8c:ef:ff:b6:26:00:07:7a:9c:34:
                    d3:50:b2:8f:0d:59:8d:43:4a:ea:0a:4c:23:a2:f1:
                    9d:4a:9c:76:46:52:b2:c8:8b:98:e6:3c:4e:75:df:
                    33:4f:d3:d7:03:bd:c7:c4:5d:e1:04:51:d6:8e:66:
                    57:1a:ef:c5:1a:da:82:75:76:e0:d8:6f:c3:8d:22:
                    76:46:c3:05:5d:75:89:be:97:c5:6b:40:68:c1:22:
                    d7:01:fb:8d:40:5a:ba:3a:6c:b5:2a:36:5e:1d:a4:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F5:1D:80:8C:B1:0A:E2:01:D7:62:19:39:85:3B:B1:43:27:EA:33
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5443f26e-949a-460a-b187-e26290bfcf24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:4000::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:19:be:cb:e5:eb:8b:2a:1b:db:3f:bb:97:60:82:89:4d:cb:
         74:b6:72:7f:f1:e6:9e:73:d3:99:9a:c6:1d:69:93:dc:4e:c4:
         31:1c:da:b8:46:8c:19:d9:9e:97:1f:27:d3:81:46:2e:c0:4f:
         b8:82:da:b6:74:6b:3c:78:4d:6a:b8:1a:56:ea:c5:bf:5e:0b:
         05:e0:0f:f0:29:0f:f0:72:80:a9:4b:19:16:07:a9:98:fa:d3:
         c9:2f:12:5d:40:63:21:28:83:89:05:31:16:41:ee:3d:89:64:
         17:7f:62:36:a6:ab:e4:cc:5c:82:ce:8f:dd:52:dd:9a:f3:29:
         dc:27:07:0b:44:10:f5:06:96:27:ca:fa:89:80:ff:8a:db:4c:
         1c:9c:e9:e0:fc:ed:ee:d1:9c:18:10:40:e5:41:ae:31:6a:f8:
         d2:43:95:ba:32:6f:de:b5:17:37:1b:35:c0:3c:94:29:d5:d6:
         19:36:dd:52:67:e3:02:95:78:e8:60:7f:a1:90:bd:fe:86:77:
         a6:d5:08:b6:06:4a:d8:38:5d:90:01:37:9f:64:75:df:13:52:
         9f:83:12:7a:f9:03:9e:25:d4:36:4f:b0:55:da:4f:90:7d:0c:
         9a:5b:72:c3:36:48:e0:ca:b9:19:39:2b:26:09:11:d5:12:d3:
         21:99:2c:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 07:37:05 2026 by rpki-client