Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa
File:                     765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa (raw, json)
Hash identifier:          TXy51xFakX029qkwTluArkAtk6j3uL20urMbjBorCnM=
Subject key identifier:   D6:2B:A5:44:B8:00:E6:42:74:27:8A:87:EE:E9:BB:0D:93:7D:71:00
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0100ACDFC6A2217F1C0D939B7D443A575F196A39
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa
Signing time:             Fri 07 Aug 2026 04:20:39 +0000
ROA not before:           Fri 07 Aug 2026 04:20:39 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:00:ac:df:c6:a2:21:7f:1c:0d:93:9b:7d:44:3a:57:5f:19:6a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  7 04:20:39 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=a9960aa84de33e4d67cffa136007228fbb7b28feeeac50e26d8e0215488a677a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:dd:ec:eb:db:ff:02:44:ca:ce:52:20:55:43:
                    8c:bd:17:49:d3:8e:99:c5:d2:96:27:b4:b4:5a:82:
                    5e:72:23:f2:53:83:f7:2e:04:f8:8a:56:ab:28:85:
                    5f:6e:b5:96:08:1f:e5:e5:d5:1c:ea:4f:24:c9:2b:
                    71:6d:d2:73:3f:78:d1:cc:97:91:fa:99:7a:fb:41:
                    e3:cd:9c:8c:c5:fb:6f:77:3d:9d:c7:40:58:1d:4d:
                    d3:82:30:1c:4c:78:77:bd:53:d5:a1:04:f7:be:af:
                    9d:88:2d:39:92:6f:5d:66:58:85:a3:58:c8:56:72:
                    d8:c5:d1:2c:36:94:42:ea:34:b8:4f:e1:d1:bf:07:
                    a0:6d:45:c0:02:39:3c:ab:9b:8b:a2:94:77:28:2f:
                    a5:1b:eb:3b:c4:28:fd:e7:82:6c:61:6d:d8:f7:88:
                    94:94:3b:38:30:30:21:b3:32:1e:3e:06:51:dd:52:
                    ad:1c:c1:b1:5a:2b:5c:50:3e:e8:86:c6:2d:6f:21:
                    ae:7f:2c:df:23:ef:17:69:93:8e:f3:47:c8:b0:ec:
                    4c:93:dc:c3:bc:c7:96:bb:fd:6b:82:af:60:66:83:
                    a3:0b:06:0d:8d:4c:0c:15:30:13:65:4a:2c:96:75:
                    4e:ed:43:04:1c:cf:07:83:3a:0b:33:ad:cf:b5:60:
                    ca:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2B:A5:44:B8:00:E6:42:74:27:8A:87:EE:E9:BB:0D:93:7D:71:00
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:84:cc:59:24:aa:a6:99:14:47:25:22:a7:91:60:c2:80:f9:
         d5:23:9d:a0:4e:63:ea:cd:aa:a3:6c:79:51:a4:92:32:8f:f7:
         83:1a:d2:76:78:ab:98:21:a3:f6:87:30:ae:3b:f5:6c:a8:e5:
         bd:90:5a:2f:0f:41:fc:80:56:76:9f:1f:e4:ef:40:dd:a1:97:
         c4:c8:e7:de:e7:3a:5c:73:9c:d9:d0:39:bc:18:63:b4:be:6e:
         cc:77:97:06:61:66:78:86:bd:be:6f:d7:6e:a7:3b:5c:22:85:
         34:7d:8f:d8:1b:b8:95:83:00:f7:31:39:b0:bd:11:59:d9:34:
         65:8b:80:a2:ac:f5:a0:c0:15:17:6f:9f:5e:cd:da:68:51:40:
         e6:08:98:65:a4:0e:6e:5e:48:80:d9:a3:e6:a5:86:b1:39:31:
         94:bb:9d:0f:42:92:d4:16:90:61:86:50:cd:0a:e2:37:05:7f:
         f6:b4:a2:98:a5:bc:d3:70:3e:9d:97:a9:a7:e9:ba:b2:69:95:
         a9:71:66:54:b3:7a:6e:c5:fb:84:df:00:08:35:c7:dd:31:dd:
         d4:73:0f:8a:d3:df:32:c0:65:24:70:44:a1:d0:22:60:51:26:
         e5:96:9b:02:fc:71:fa:c6:0c:a2:20:b7:77:ba:42:13:5a:07:
         43:49:71:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 9 01:41:11 2026 by rpki-client