Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9dcfab8d-23d5-4ce2-bcc7-d85ec1e40912.roa
File:                     9dcfab8d-23d5-4ce2-bcc7-d85ec1e40912.roa (raw, json)
Hash identifier:          aptpkl4Qq0GZlbBcp6GwuoH+oCCnpQhGVxcXOY1yRaU=
Subject key identifier:   87:05:90:8C:16:A3:B9:6F:93:2A:B9:80:0F:A3:D8:F9:B3:5A:D8:D1
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       528B41648B3C9BA2E76D7794842C13EBA16463C3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9dcfab8d-23d5-4ce2-bcc7-d85ec1e40912.roa
Signing time:             Thu 30 Jul 2026 01:20:07 +0000
ROA not before:           Thu 30 Jul 2026 01:20:07 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f2:7011::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8b:41:64:8b:3c:9b:a2:e7:6d:77:94:84:2c:13:eb:a1:64:63:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 30 01:20:07 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=f4ae0eff5342e38a90f65cb40f7919f48cfbd6a475b5e5e45df62c86cf4e3abb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:10:c6:de:c1:12:e5:82:8c:f5:fb:53:f0:
                    c7:30:1d:ed:db:e4:22:02:b1:d1:ef:09:06:1f:de:
                    f9:f5:80:3a:69:f3:7a:b3:c6:5f:3b:cf:9d:c9:96:
                    fb:eb:11:87:60:03:f9:79:1c:11:73:17:95:98:d7:
                    b1:a0:2a:0a:58:d4:58:39:da:66:6c:54:5f:aa:d8:
                    61:42:8b:2d:34:3a:79:48:93:e5:ec:ab:47:47:41:
                    58:18:1d:70:a9:7a:18:03:b4:f8:2a:2c:f8:d4:30:
                    21:e9:52:74:8e:3f:c8:f9:f2:54:e5:9c:3f:5b:a3:
                    b6:2c:97:50:63:17:c7:96:a0:e6:85:42:4c:94:8d:
                    81:e9:09:a8:93:65:49:8a:c7:2d:91:34:d9:ce:3e:
                    cf:71:91:a7:9b:83:32:ea:ab:a4:c7:bc:94:51:0c:
                    51:15:54:ac:a0:82:9f:13:cc:45:de:ee:d3:ba:80:
                    f1:1f:6e:11:8f:20:41:83:e7:90:1f:b4:63:88:26:
                    08:2f:62:2f:19:dc:4d:97:5c:19:90:bd:40:7d:8f:
                    79:5e:fe:c1:a5:d3:40:77:60:d5:db:25:e5:65:96:
                    22:4f:da:65:c5:65:b6:4e:c5:f6:89:d3:e3:1f:cc:
                    8a:b3:c5:07:32:17:02:ca:16:d0:47:5b:ce:8a:4a:
                    cd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:05:90:8C:16:A3:B9:6F:93:2A:B9:80:0F:A3:D8:F9:B3:5A:D8:D1
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9dcfab8d-23d5-4ce2-bcc7-d85ec1e40912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7011::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:8e:db:34:fd:a3:0d:19:34:9b:3e:53:3b:18:a5:13:59:ea:
         f6:29:c9:94:dc:40:a4:b3:80:b4:b0:3b:b5:80:82:9a:1e:a4:
         23:59:a1:01:99:48:16:12:c5:bf:59:12:60:cb:43:83:d4:15:
         6c:06:82:50:a4:62:57:ee:7a:0b:2e:6d:2a:48:a6:25:3f:fe:
         90:bf:c0:7a:37:8e:9a:e3:64:38:bb:69:f4:77:5b:86:ce:0a:
         1d:ae:f3:24:61:d5:58:7f:f2:b9:6b:80:99:b8:3b:1a:3d:b7:
         ac:4d:2f:4d:0e:b5:dc:e7:91:cd:67:7b:26:01:cf:02:41:ce:
         93:c0:26:e1:3b:70:c1:73:db:36:23:77:37:ba:18:9b:b7:89:
         50:d2:b5:92:56:4d:06:85:fb:9f:5a:02:3b:8b:6d:a8:55:66:
         9e:8b:45:d2:df:2f:b9:f4:b7:dc:61:e5:2b:79:4b:10:a8:63:
         77:c5:c7:ee:59:7e:de:c3:52:bd:f9:59:b7:20:18:b0:1b:d8:
         6d:17:3b:a1:9e:8e:ae:7a:c0:11:27:a6:0e:04:c2:5d:21:3b:
         5d:6c:41:8a:eb:9e:e9:a4:e9:09:12:b5:20:87:00:f3:51:5c:
         d4:19:2b:7d:90:64:64:3e:73:67:d0:01:0d:d1:83:66:e1:27:
         68:1d:2a:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 07:36:41 2026 by rpki-client