Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/79812efa-fa09-4882-840d-455ce0b044c3.roa
File:                     79812efa-fa09-4882-840d-455ce0b044c3.roa (raw, json)
Hash identifier:          37KTttNNIzWJbvEOjahwKb7HdyxcMqGfJRua82FLO4M=
Subject key identifier:   82:16:FD:A7:3F:AB:B5:29:38:11:8F:AD:8F:92:ED:F8:F6:4C:A0:F6
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7DD1B2B0184A7F9F3E903200B2C482803968E8C4
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/79812efa-fa09-4882-840d-455ce0b044c3.roa
Signing time:             Mon 04 May 2026 18:02:15 +0000
ROA not before:           Mon 04 May 2026 18:02:15 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f1:16::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d1:b2:b0:18:4a:7f:9f:3e:90:32:00:b2:c4:82:80:39:68:e8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May  4 18:02:15 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=6e643d2f7ff237cb0f5ff1a183eac9dd7cefc06d20c40f3f5c2071307a76df5e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f4:e5:c3:2b:44:f9:6c:be:78:7d:b8:0a:fe:
                    04:a4:94:c4:59:fc:19:b1:e2:98:a8:a1:de:e4:a3:
                    e7:3d:05:e9:3d:1a:10:a6:56:52:87:e5:35:77:a5:
                    05:08:44:5c:ca:50:f0:04:82:7c:8e:bd:79:ed:16:
                    dd:de:d5:e5:5d:96:81:d4:e2:ea:41:a2:23:c1:9e:
                    04:df:8c:d1:98:f9:7a:c7:33:d3:24:32:df:db:75:
                    05:1a:70:c1:e8:d1:6a:fd:3c:f8:bf:2f:8d:9f:ee:
                    6d:13:e5:7d:59:96:b8:be:d0:6c:5b:d1:ce:06:d3:
                    7e:38:21:63:a9:3a:dc:c6:5a:6a:7c:cf:7b:29:57:
                    13:84:34:49:8b:e3:5d:ca:60:0f:41:cf:7c:a9:9f:
                    48:71:77:e5:30:f9:e4:1d:9d:5c:79:dd:fc:e9:68:
                    c7:24:08:a6:4f:81:e4:e7:ba:e0:f6:ff:7f:ad:75:
                    fa:ee:5d:eb:f4:00:9f:48:ca:bc:dc:57:7a:89:b1:
                    65:e0:04:e4:16:e3:f8:32:f3:cd:59:e8:34:b7:ab:
                    b0:27:a8:c1:53:a2:44:a0:8c:f9:5e:4e:66:0c:07:
                    54:fa:46:4f:96:da:01:69:35:9c:dc:36:13:fd:86:
                    49:ac:75:f2:53:08:ce:ed:8a:8f:27:51:4e:ad:b0:
                    fb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:16:FD:A7:3F:AB:B5:29:38:11:8F:AD:8F:92:ED:F8:F6:4C:A0:F6
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/79812efa-fa09-4882-840d-455ce0b044c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:16::/47

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:53:e8:ee:9a:69:2f:52:1c:a4:d5:f1:81:13:2d:e4:3b:
         d2:67:c2:01:3b:86:39:18:6a:24:d4:d5:53:f7:a7:cc:da:52:
         de:0b:a7:2a:e7:c9:3f:f8:71:c0:56:88:bd:f2:28:48:8b:e9:
         79:7f:54:34:a8:19:74:d8:a4:64:1d:64:9b:ba:2d:91:6d:9a:
         e6:cb:16:46:d2:8f:da:f2:13:e7:9c:a6:14:bf:31:29:78:42:
         12:0b:e3:82:0c:49:eb:77:8a:82:0a:1d:d4:8b:f6:8a:7e:a3:
         23:6e:28:3a:85:5d:5d:0c:c2:24:7b:a4:35:dd:82:24:b1:bf:
         51:60:ce:7d:e4:11:e2:64:ea:6d:87:19:a3:a4:3f:66:ef:e5:
         39:20:22:4f:fc:f9:56:5e:2a:81:59:74:b9:61:10:a5:1d:c1:
         fc:8b:6d:75:7b:cb:f1:d1:7f:56:88:8e:41:d9:33:64:ba:86:
         15:28:44:08:82:5a:e6:cd:e6:ba:f3:7e:d6:80:44:56:cb:31:
         cd:3d:cd:56:fc:d9:c5:b4:bc:96:87:4e:70:b5:54:ca:5e:63:
         02:18:60:b7:63:28:c7:8b:76:a5:61:02:9f:a6:f9:55:53:17:
         d8:74:63:ad:1b:3d:7e:b6:7f:f8:5c:aa:5c:f9:9d:ee:c2:37:
         63:e5:b4:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 4 20:51:54 2026 by rpki-client