Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1083a01-360a-4b23-a3a3-630df82536fc.roa
File:                     a1083a01-360a-4b23-a3a3-630df82536fc.roa (raw, json)
Hash identifier:          wJf2Fxkel0Z3GeMwge4AEtc6QcaIB4WbsvflRGYzzac=
Subject key identifier:   9F:7A:0A:42:C0:74:49:0A:A6:00:C0:A9:7C:69:7B:0C:C3:3E:1C:1C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3F7539EA1E6DC4BB32BC699675DD60BEF23128FB
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1083a01-360a-4b23-a3a3-630df82536fc.roa
Signing time:             Fri 07 Aug 2026 04:10:27 +0000
ROA not before:           Fri 07 Aug 2026 04:10:27 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:75:39:ea:1e:6d:c4:bb:32:bc:69:96:75:dd:60:be:f2:31:28:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  7 04:10:27 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=ea43ddf4bac47c4eaf534464ae0ed52dbd1653e93e3d5503188d87e765f1e8b0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ba:d6:de:b8:ef:7f:c1:94:f9:f0:86:1d:09:
                    34:7e:2f:23:69:29:eb:60:41:79:12:5e:d6:e1:90:
                    36:77:b3:3a:fd:a7:dd:e8:81:fa:09:cc:29:41:0a:
                    5a:3d:b0:c6:74:12:5b:b8:af:62:af:fe:d6:5a:f2:
                    91:e4:34:cc:54:97:ab:13:c3:f6:d0:34:a7:9a:87:
                    5e:9b:b1:86:90:bf:32:da:45:6c:22:30:cd:ab:38:
                    e3:f6:ad:33:de:a9:e0:8e:de:a6:ee:46:7d:fa:0f:
                    14:6a:14:a9:e7:7d:23:6e:1f:a3:fd:3e:6a:d0:82:
                    86:c0:4b:7f:2b:6f:fb:71:96:9a:e4:ba:14:34:78:
                    d6:44:98:3d:cd:25:38:db:22:77:b6:eb:d3:56:0c:
                    1f:4f:1e:79:2d:63:76:16:63:fc:0f:24:3a:17:c0:
                    ad:e8:e9:b8:02:83:93:e8:ac:c5:36:a3:87:c8:2f:
                    a1:ce:ac:71:a2:f3:4c:7e:e3:fe:19:3f:ef:30:17:
                    f5:e0:30:4e:43:ff:46:49:56:05:99:b4:9d:87:93:
                    ed:7c:b3:84:67:88:5f:9f:5a:3b:06:cb:3a:90:f6:
                    8d:ce:6f:d8:fe:66:e3:82:82:09:7c:dc:4a:32:f3:
                    04:3d:9b:58:f2:46:b6:45:42:4b:88:a0:72:9c:04:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7A:0A:42:C0:74:49:0A:A6:00:C0:A9:7C:69:7B:0C:C3:3E:1C:1C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1083a01-360a-4b23-a3a3-630df82536fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:98:2f:cd:0f:3d:a4:a2:6a:32:a9:ac:8e:ee:49:92:06:43:
         d6:eb:54:ec:24:21:90:f3:6f:a7:54:3c:7d:88:ef:cb:b7:b9:
         5a:d4:51:4f:cb:71:5e:98:78:3c:87:d9:07:f3:31:c8:9e:0e:
         f7:d8:56:08:f8:a1:86:dd:58:27:f8:75:ed:eb:98:d8:f9:ec:
         63:5a:e8:72:e2:61:f7:8e:cf:30:22:92:72:ee:4e:05:62:5c:
         4b:1b:65:e7:2b:6f:ce:ac:cb:77:a5:61:88:31:37:58:83:97:
         fc:5d:43:fe:84:59:de:22:3f:cd:a4:50:d1:5b:4e:ab:cb:53:
         bc:ac:38:c1:f1:e9:b3:0f:38:75:3c:5a:4b:77:d0:99:b6:9e:
         9a:78:c6:c1:66:87:7b:57:a5:60:59:78:d2:fa:b1:b7:54:63:
         38:8f:45:ca:b4:d6:9e:db:d0:14:11:42:3e:50:6b:75:6f:2f:
         1b:70:8f:45:2e:45:81:00:98:39:81:88:95:4b:cf:56:53:52:
         31:5b:cf:e9:b5:3a:d0:7b:89:31:e7:3c:ef:95:26:2f:80:dd:
         c5:50:34:b9:80:d9:33:94:93:62:b2:e1:de:eb:a7:84:64:39:
         9b:90:dd:fd:00:55:c2:84:44:b7:aa:68:02:67:61:cb:fd:a8:
         a2:79:e1:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 9 01:44:30 2026 by rpki-client