Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa
File:                     5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa (raw, json)
Hash identifier:          EjnwV6K7ouccyKmGAEbCAIYV2CQq6LSM0MnxZECajOI=
Subject key identifier:   D2:36:24:30:2A:CC:D6:E4:A1:DC:8A:0B:C6:C3:73:EB:9D:7D:64:43
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       175F592374C6310BC05D92630BE55357E5CBD49A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa
Signing time:             Fri 07 Aug 2026 04:10:10 +0000
ROA not before:           Fri 07 Aug 2026 04:10:10 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:551a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5f:59:23:74:c6:31:0b:c0:5d:92:63:0b:e5:53:57:e5:cb:d4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  7 04:10:10 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=e6babfcf499cba3b45d1400ae24ee5a246c8a4771ba200e126c76c392c29a310, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:3d:f3:c1:eb:58:c3:6f:ba:5b:6b:3a:38:
                    80:22:88:5a:d3:a4:3d:bb:58:d5:91:5e:a0:92:16:
                    1a:10:f7:a6:a6:53:6e:46:ee:9b:b3:fa:c5:48:91:
                    a9:5f:ad:ec:16:ba:8c:fb:7c:3a:f6:f0:bf:8b:90:
                    39:7a:9e:72:b8:8a:a5:e7:ec:2a:28:52:2d:f6:27:
                    f5:63:df:21:c6:af:cc:44:26:53:bc:d3:65:d1:38:
                    3e:d0:bc:6a:cb:93:40:d0:81:3b:c2:36:e5:d4:42:
                    b1:cd:1b:3e:18:56:57:64:d1:dc:c1:61:b1:b8:3d:
                    bd:ea:fd:eb:2f:5f:3a:8e:a1:6f:7c:d3:9e:24:ef:
                    58:28:b4:23:40:9c:7a:82:51:86:93:95:e7:de:ae:
                    5d:3e:15:31:f7:c9:83:55:56:b4:ad:5b:86:08:8c:
                    b1:9b:95:9f:30:19:ee:77:9c:bc:e4:0d:8c:bd:93:
                    82:ab:bd:f3:13:bb:8a:5b:1b:91:d6:d5:63:de:4b:
                    89:2f:ce:18:b6:d9:af:6b:63:8e:6d:c5:2d:4e:da:
                    9f:fb:10:36:46:a0:7c:f5:4b:a8:31:32:c1:5a:44:
                    a8:02:1c:d1:4f:ef:68:60:db:34:f9:b9:d5:6c:e2:
                    ea:c5:35:c0:35:74:30:b3:10:d1:22:3d:4b:f7:83:
                    bb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:36:24:30:2A:CC:D6:E4:A1:DC:8A:0B:C6:C3:73:EB:9D:7D:64:43
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5ae357e1-ef95-4f5f-a6c3-8ad4f4fa3014.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:551a::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:89:ba:88:49:e8:af:59:1e:a6:60:27:16:c1:b2:f3:2a:
         65:a1:a3:19:61:e0:90:c3:a6:11:ae:44:ac:09:93:48:00:67:
         b7:6f:7c:e0:b1:c7:68:38:ce:e4:d9:94:94:a8:e5:48:23:8b:
         78:51:55:4e:ab:d1:e1:40:ab:f8:bc:93:38:c0:ba:11:b7:25:
         93:cc:8b:2e:36:80:0d:14:16:e4:45:22:78:ed:04:e7:89:38:
         77:e1:03:22:55:f1:73:9f:d7:fb:a2:b4:1b:ab:9b:a3:40:81:
         f4:20:26:00:62:48:ba:0f:b4:9d:a0:f8:84:13:3c:99:28:33:
         2a:be:6c:20:e3:3a:45:1e:af:52:74:cd:05:02:f5:b6:cf:57:
         60:1b:74:b3:a9:f2:a3:48:7c:03:75:36:4a:fb:f2:2e:36:99:
         4d:ee:37:39:d4:76:73:2b:81:e3:94:e6:af:bf:c6:51:86:a4:
         23:0f:c1:dc:74:5c:e2:90:e0:ae:d0:7b:3d:bd:59:35:ea:77:
         3c:89:a0:b7:38:99:d9:05:03:0d:89:e4:84:cb:c0:e6:21:71:
         e8:e4:39:74:f2:d1:4c:b2:21:e6:e1:85:5d:32:57:ce:60:ba:
         62:25:f6:d0:9a:02:0f:0e:aa:dc:c5:a7:0f:7c:69:63:e6:b9:
         9b:fe:c4:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 9 01:41:55 2026 by rpki-client