Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5457865c-05cc-496e-9344-9ec7d5266e2c.roa
File:                     5457865c-05cc-496e-9344-9ec7d5266e2c.roa (raw, json)
Hash identifier:          nZl3ZT5tB82UmzaN+4TWSoSIG7dzCR+kKEOijJgTtRk=
Subject key identifier:   58:50:1F:1A:95:60:BE:75:85:9A:C4:20:94:C4:43:22:C0:A0:56:60
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       789B84A52D82500515E3BA6EE318C09B84928465
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5457865c-05cc-496e-9344-9ec7d5266e2c.roa
Signing time:             Sat 08 Aug 2026 00:50:37 +0000
ROA not before:           Sat 08 Aug 2026 00:50:37 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:f100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:9b:84:a5:2d:82:50:05:15:e3:ba:6e:e3:18:c0:9b:84:92:84:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  8 00:50:37 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=ac7ab535c1722a9ec2ee89d3315560dc416e8caa8b989702cca2547306038662, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0b:df:69:2b:67:2b:b1:20:b1:eb:19:44:de:
                    b8:40:6e:91:76:60:1c:d9:66:d1:1a:27:ee:d3:15:
                    cc:81:02:fe:c4:07:a1:07:48:8a:2f:ec:4a:0d:1c:
                    27:ef:f3:98:d8:b6:96:ab:32:2b:c9:b0:88:1d:5b:
                    23:6c:2d:30:7b:42:97:62:9f:8b:3b:f3:1d:e6:b1:
                    8b:01:bf:53:49:dd:5a:91:26:a5:2f:3e:9e:e3:b6:
                    a5:74:54:f2:f5:5b:44:6c:48:44:29:f6:e5:d5:d1:
                    5d:8c:f5:bd:78:cb:f9:b8:46:b1:38:d6:ad:da:c3:
                    90:61:0f:98:bb:c2:ff:f6:6b:8b:b6:03:98:ca:b3:
                    89:64:11:c9:4a:28:69:19:d4:a7:31:08:2e:9f:72:
                    db:3f:0e:6f:ac:f2:6b:9b:7b:19:79:d9:c2:a9:b6:
                    ce:0e:c6:f9:f2:e1:73:31:cf:95:a9:fd:9f:1b:aa:
                    26:d2:54:72:5a:97:62:51:c0:ff:2d:99:4e:de:9a:
                    05:d3:a1:d6:65:c4:63:43:04:44:d4:4b:39:f9:85:
                    b9:72:c4:8f:30:f5:8b:39:c9:d7:7c:e3:0a:62:38:
                    92:85:fe:58:38:2d:d1:e9:3b:41:53:cf:3b:9a:da:
                    4e:ec:22:9e:68:96:ef:ef:49:65:6c:fe:e1:fa:09:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:50:1F:1A:95:60:BE:75:85:9A:C4:20:94:C4:43:22:C0:A0:56:60
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5457865c-05cc-496e-9344-9ec7d5266e2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f100::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:00:b3:0d:f4:cd:37:f9:af:3f:5c:17:de:25:8a:74:76:90:
         ae:40:7a:a3:7c:68:03:bd:bb:8a:38:a9:32:f3:da:4e:29:a6:
         b1:30:18:41:79:d4:ec:41:2c:e6:dc:e7:a8:bc:fa:14:4b:0f:
         f3:2d:9a:e4:e1:13:c2:50:96:57:56:80:e8:a6:9c:5e:0e:0c:
         82:d8:57:44:99:af:43:38:59:6b:b9:15:c5:b1:8d:21:26:ee:
         fb:ff:a5:89:32:eb:2a:ff:e3:a4:2e:f8:84:7a:e9:f3:64:13:
         3e:8f:3f:87:21:9f:9f:4a:ba:55:a7:f1:49:c1:65:bd:aa:89:
         73:e5:c0:f8:80:cd:ce:82:eb:5f:82:4e:8c:0e:5c:b2:c3:0b:
         b6:5a:f1:e2:2b:11:77:e5:f4:2a:cf:48:79:89:8b:27:e3:a2:
         15:05:af:07:f7:c4:0d:bb:12:02:db:f5:9b:96:b6:bf:84:0e:
         07:3a:c7:21:7e:ca:9d:1e:53:6a:2a:01:5c:3f:1a:f9:6c:07:
         79:c1:bb:e8:e6:ce:0c:35:f7:10:4e:6b:ce:22:41:88:1e:7c:
         fc:fe:ea:49:01:83:08:ef:03:80:e5:9d:37:c3:5f:bb:a9:c1:
         8e:80:bf:f7:a7:94:fb:9b:06:79:3a:c6:aa:8e:da:3a:bc:f2:
         7e:c4:f5:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:16:51 2026 by rpki-client