Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c92a8c24-62b8-4009-a51c-8908d7373850.roa
File:                     c92a8c24-62b8-4009-a51c-8908d7373850.roa (raw, json)
Hash identifier:          uyhemynOOG46fde2+imKqjsr4Ug9D6iKQsMT4qjfC7k=
Subject key identifier:   AC:7F:43:81:2E:06:DE:B8:2D:52:7D:3A:14:2C:19:31:52:A2:CD:81
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       20210DCFAE73BE2740DF2708BD34A0D0BF19DD9F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c92a8c24-62b8-4009-a51c-8908d7373850.roa
Signing time:             Tue 19 May 2026 04:30:18 +0000
ROA not before:           Tue 19 May 2026 04:30:18 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e100::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 28 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:21:0d:cf:ae:73:be:27:40:df:27:08:bd:34:a0:d0:bf:19:dd:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 19 04:30:18 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=57b43a4f73e4b26fefd69b4d7aec8269aee44ac4a8e396acfefaebe868fd5325, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7c:cb:4b:e1:b9:be:29:32:ec:18:25:f5:14:
                    44:0b:d6:5e:c7:6a:f5:22:ea:e0:30:35:2f:e2:9a:
                    9c:f2:e3:22:0b:3f:08:90:af:6e:03:4b:b7:cd:9b:
                    b5:0b:f6:ea:b7:d7:73:36:5c:10:79:18:4e:0c:b3:
                    db:89:81:8c:ff:d9:8a:8a:b8:c7:ed:5d:d3:80:38:
                    c0:94:45:3b:d3:ae:db:b5:e1:8c:b3:b7:68:16:f5:
                    5d:85:db:37:64:29:9b:e4:06:4f:95:14:03:1d:59:
                    36:a6:c9:57:7f:66:d5:98:c0:42:8a:71:c2:23:ba:
                    c7:a3:35:b1:a4:3f:ef:b2:5c:5e:f7:8d:d5:6d:ab:
                    10:aa:c2:4e:47:a4:c0:c2:b3:02:28:b1:f4:ba:09:
                    eb:4f:83:77:ea:e2:5a:78:55:c1:85:8a:92:5b:1e:
                    32:85:87:06:e0:1c:68:e1:19:b6:8e:fd:28:13:09:
                    61:f0:9c:38:50:4e:a8:46:85:b0:f4:81:a9:71:4f:
                    6b:6a:b6:76:7e:3c:89:b9:d8:4a:07:4b:d7:12:8a:
                    bc:80:e5:6d:de:32:fe:07:7d:73:db:78:c0:24:92:
                    63:55:c9:55:00:c3:08:71:cb:ca:b9:95:ca:42:27:
                    57:85:36:b4:34:a7:4d:4e:64:e0:e8:cd:17:12:af:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7F:43:81:2E:06:DE:B8:2D:52:7D:3A:14:2C:19:31:52:A2:CD:81
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c92a8c24-62b8-4009-a51c-8908d7373850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e100::/42

    Signature Algorithm: sha256WithRSAEncryption
         76:54:1b:d3:47:94:d9:ee:0e:eb:1e:6b:a1:97:01:00:c1:24:
         64:94:9b:f0:e2:f8:2d:bb:7e:5b:e1:45:a6:20:17:4f:91:63:
         9f:c1:c1:3d:8e:20:ba:7c:5a:ad:45:3c:5d:55:87:e9:77:b9:
         88:ad:df:82:e6:24:72:4c:4d:c4:24:3e:2a:b8:75:e6:43:68:
         ce:d5:0b:c8:c2:ce:d2:46:24:44:11:2e:d3:78:46:3c:e4:63:
         7c:bf:a3:83:a2:82:d2:4f:77:8f:f5:29:88:a0:57:3c:b9:90:
         6b:91:2e:29:be:96:64:88:c0:b0:b0:01:43:f2:05:75:fd:6f:
         eb:8f:14:d8:39:ce:7b:34:5e:fa:a2:0c:bc:fa:d2:80:35:67:
         62:0c:a7:af:7f:0b:a1:9a:76:6e:fc:77:2f:c1:66:68:c6:20:
         7d:f5:30:92:c0:07:8e:1e:2e:5d:b2:6b:71:86:30:59:5a:09:
         9a:aa:2c:1a:98:ef:a0:cc:07:08:b7:eb:b6:19:ba:c6:de:7e:
         23:55:37:33:f9:a9:d2:1d:63:b7:73:a3:6f:af:79:b3:4f:6b:
         95:37:c1:fb:a3:92:41:34:97:8e:ea:84:bf:a2:9f:4a:b8:3e:
         2e:20:c8:7c:e0:1b:10:78:a5:6c:78:0c:22:83:a2:70:41:ba:
         d4:c1:24:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 27 18:32:57 2026 by rpki-client