Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/77071dba-3d71-409d-bec3-e6ee4d8fc9dc.roa
File:                     77071dba-3d71-409d-bec3-e6ee4d8fc9dc.roa (raw, json)
Hash identifier:          e4PClzZuxFF7193IEZcwFq8gFse4PO7ZPbgkkljM0rw=
Subject key identifier:   F5:44:C0:BC:EF:01:B1:4E:9D:78:16:EE:78:23:EC:3E:AB:16:7A:D5
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5C257019596FE6E0A98D3703F37989DF34DA2DD2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/77071dba-3d71-409d-bec3-e6ee4d8fc9dc.roa
Signing time:             Fri 07 Aug 2026 04:10:38 +0000
ROA not before:           Fri 07 Aug 2026 04:10:38 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e800::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:25:70:19:59:6f:e6:e0:a9:8d:37:03:f3:79:89:df:34:da:2d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  7 04:10:38 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=35fd6f625ae3488e0c1e3ea292f43f144d2581e02e496754999472c1f87ed848, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:80:db:71:63:b0:8d:e4:e6:4e:50:e7:7e:4e:
                    e1:3a:90:ab:81:f8:71:07:91:13:a3:92:c8:9f:76:
                    9d:ed:3b:35:a2:b4:ee:b5:02:46:98:21:77:6b:c6:
                    81:4e:b0:2e:0d:85:9e:41:49:89:50:c4:3e:6b:6e:
                    22:ce:d3:6c:b5:75:b2:8b:88:ea:bf:19:3b:84:3c:
                    94:23:f7:2e:6c:27:00:28:d6:97:c3:19:33:da:cd:
                    44:cc:bc:6f:b8:eb:56:89:64:43:64:4e:b7:65:17:
                    60:a7:75:8d:56:b4:b7:b2:61:08:32:c2:cf:5d:b4:
                    73:da:6b:79:ed:69:e7:49:b9:44:36:3c:7b:11:64:
                    0d:06:d8:1c:94:d4:c0:48:b4:8b:65:c2:82:67:55:
                    18:9f:f4:8a:be:06:1b:7b:92:b3:b0:35:7e:56:52:
                    51:5a:a2:87:06:a3:b7:d8:ce:67:00:ef:93:9b:c9:
                    b3:e8:be:7e:cb:7a:4a:39:30:43:35:65:ee:ae:77:
                    a3:cc:df:5a:01:b0:b7:11:0e:86:00:6a:28:97:04:
                    3d:a5:52:89:e7:4e:18:c5:b8:f6:b7:4c:c4:e0:cb:
                    9f:00:bf:67:6d:4f:11:73:45:d8:5d:89:2d:1a:81:
                    9d:19:40:5a:7b:bf:10:5c:38:31:84:7d:f7:9f:93:
                    61:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:44:C0:BC:EF:01:B1:4E:9D:78:16:EE:78:23:EC:3E:AB:16:7A:D5
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/77071dba-3d71-409d-bec3-e6ee4d8fc9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e800::/42

    Signature Algorithm: sha256WithRSAEncryption
         a7:f6:6e:aa:6d:46:fc:95:91:70:bc:ed:f9:08:78:d5:7b:8d:
         96:14:9f:de:f8:5f:d9:e2:10:19:c5:74:97:fc:30:1e:5c:5b:
         49:8e:18:08:48:eb:0a:c4:b1:61:35:4e:68:14:3a:17:8d:40:
         b4:00:71:de:4d:f8:f5:08:48:80:e5:f0:01:56:9b:2a:85:d8:
         a9:d5:6f:15:11:98:45:21:91:07:05:87:d2:de:34:e9:c0:f3:
         14:5f:58:dc:3b:fd:fb:03:f5:9b:ec:49:bc:79:f8:33:89:2b:
         92:af:2f:cd:b8:f9:8f:89:1b:1c:ac:c2:7f:6c:0b:fd:ba:9e:
         ec:e4:30:d1:ef:91:b3:f3:09:ef:92:f2:5e:4d:79:46:2b:bc:
         b8:1a:39:39:43:b7:e5:9e:3f:08:d5:d6:d8:c0:53:d5:fd:7a:
         9c:36:52:a8:58:5f:8a:d4:25:0b:ca:b9:84:e7:b6:b9:de:64:
         69:c7:c9:02:c1:f7:2c:00:d0:0e:52:4e:93:5f:ac:7f:77:08:
         42:1b:17:af:a9:8c:96:6f:39:43:a2:23:25:bc:97:2b:81:bd:
         a4:b8:99:fe:65:21:f1:c3:a4:24:db:44:c3:b2:65:72:96:e5:
         58:b5:0b:77:12:74:5b:43:a0:9f:1e:bd:d4:33:e2:88:1a:ea:
         0f:9b:8f:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 07:36:36 2026 by rpki-client