Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa
File:                     adb258f2-061e-4e94-b6ee-d4de9405ec61.roa (raw, json)
Hash identifier:          Bm3CYTSXFwXxHYKq6xuiPO0Jzg41yCWZxVdfkz5cS1M=
Subject key identifier:   25:BD:22:30:D2:EF:A3:58:70:31:70:0D:78:AD:35:9B:81:6D:9B:EF
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       44893904DB628CBB438B3CF4F08EEE8F8924460C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa
Signing time:             Fri 07 Aug 2026 04:20:08 +0000
ROA not before:           Fri 07 Aug 2026 04:20:08 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:89:39:04:db:62:8c:bb:43:8b:3c:f4:f0:8e:ee:8f:89:24:46:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  7 04:20:08 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=15edd7df2ad65d5c7261c08d58eec2c983eea4f00f48cfdf5f35a722302aa487, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:9a:d5:f8:f0:7a:01:1b:d3:e1:aa:89:ae:
                    ef:1a:38:74:ac:54:40:2a:ce:02:a7:1a:8a:67:ac:
                    b2:bc:8f:e7:43:da:e1:fa:0d:96:00:fe:f3:84:fa:
                    a4:f3:3a:00:c3:27:3f:7c:77:ba:04:aa:6f:a9:fc:
                    08:3d:97:ee:de:4c:58:ef:89:c8:52:09:80:b1:f3:
                    59:5f:29:87:35:cc:12:03:db:55:84:8d:98:c0:97:
                    fd:dd:25:5b:47:f1:0e:be:9b:d3:4a:6a:d7:f8:ce:
                    4a:1b:f4:f5:59:8d:87:49:97:1f:5b:0e:2c:90:a4:
                    ff:bb:e0:c5:65:d4:7d:9c:f9:af:19:52:48:17:1f:
                    56:24:70:7c:bc:8e:71:99:7a:f4:1f:f6:39:9a:cb:
                    7b:a9:ab:8d:43:0a:32:e1:ef:30:91:c1:ab:e9:88:
                    64:79:9d:03:03:36:17:3b:77:4b:6e:50:31:a9:5e:
                    58:66:e4:7c:c3:09:53:c3:ae:0d:fd:fb:4b:03:a9:
                    10:a4:69:4b:91:73:14:a0:29:98:ff:15:78:cd:d4:
                    11:19:50:44:0b:3d:4a:b4:6c:c3:04:25:6e:9e:bc:
                    aa:92:19:23:be:a3:35:70:79:1a:58:56:a3:ac:22:
                    31:d9:7b:29:f7:e7:fb:ff:b4:30:df:67:f2:d9:87:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BD:22:30:D2:EF:A3:58:70:31:70:0D:78:AD:35:9B:81:6D:9B:EF
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/adb258f2-061e-4e94-b6ee-d4de9405ec61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:3f:ed:62:d8:6e:d0:64:90:1e:4f:3b:b0:0d:0b:22:1b:d7:
         ab:9d:b4:d0:14:9b:2e:25:c0:fa:35:9b:93:0b:da:9a:39:7a:
         85:60:cd:f2:06:c0:e1:6a:60:80:ed:69:72:00:f1:f0:6e:af:
         37:da:df:d6:7d:78:b4:49:7a:42:c9:32:2c:59:3e:00:20:53:
         f2:d0:f0:c6:22:d7:b1:5f:be:4c:fc:00:fe:11:18:fb:f0:0c:
         c0:f2:20:90:7f:14:c7:1a:63:12:56:20:ad:a5:c1:15:58:eb:
         65:d1:b0:f1:4a:2a:ad:8c:00:fd:93:6a:71:31:91:2f:83:d2:
         c7:e7:47:23:ce:7b:ed:2b:4c:6b:3b:c7:71:7a:b0:e3:12:79:
         08:03:e9:45:3a:28:0f:67:14:15:ec:62:a5:ae:1d:a1:72:62:
         37:ba:93:f1:95:17:11:38:84:36:da:27:b8:14:e6:49:41:9b:
         07:1d:3e:fd:2a:9f:59:4c:93:99:e0:6f:2a:ce:c7:18:37:32:
         70:e7:29:67:14:f1:78:6e:36:69:9a:2e:9c:82:13:c5:7a:24:
         c4:a2:2c:00:36:a9:de:89:84:ba:b1:9d:8d:af:13:d7:dc:41:
         69:0c:bb:be:e3:b3:6a:b6:5a:02:db:7f:65:96:6a:0a:a1:99:
         ca:ec:45:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 11 07:36:47 2026 by rpki-client