Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ceacf551-02ee-4f40-8abd-053509a65c13.roa
File:                     ceacf551-02ee-4f40-8abd-053509a65c13.roa (raw, json)
Hash identifier:          TlxB4ouIWkVLqq4PmQZ1v5xVtgu50oJJDTEasvOripc=
Subject key identifier:   88:FE:05:C2:0A:94:FC:95:A2:40:A2:FF:F4:50:16:5A:DB:30:E4:E3
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6CD0657378583E7A33E056BEE7D5C2E67B1E7DA9
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ceacf551-02ee-4f40-8abd-053509a65c13.roa
Signing time:             Tue 19 May 2026 04:30:23 +0000
ROA not before:           Tue 19 May 2026 04:30:23 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:ea00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d0:65:73:78:58:3e:7a:33:e0:56:be:e7:d5:c2:e6:7b:1e:7d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 19 04:30:23 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=b7010127b1861f5f57d09067419354412335d2667116e8170049969d5f27304c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:3c:43:fa:00:5a:81:1a:bd:43:c1:85:ad:
                    4e:72:1f:d8:64:14:99:19:a8:7e:34:df:90:ba:ce:
                    bd:5a:2f:d2:95:7b:3e:6d:f2:0d:41:a7:d3:25:84:
                    64:ab:52:cf:bd:55:bf:f5:0b:45:55:f2:df:ba:d3:
                    6e:19:57:2d:37:dd:e4:c2:14:64:93:b1:d2:c5:97:
                    19:fb:e4:a5:7f:f6:05:fe:6c:c3:68:53:92:0b:f1:
                    51:c7:ec:63:dc:e9:04:21:fe:2a:37:e1:91:c2:c7:
                    f0:0f:1c:c6:94:13:8b:d8:93:46:b5:0e:1a:ae:b3:
                    18:fa:e5:fb:1b:4a:b3:da:08:04:b9:17:8a:c3:94:
                    f7:56:63:c0:10:0d:92:77:52:ab:b2:8d:5e:96:46:
                    d7:bb:fc:ea:63:26:e0:5a:92:cf:67:9f:d5:d4:1b:
                    4c:b5:3d:e3:e7:42:e1:72:f3:7a:e7:07:e0:1b:51:
                    b6:ba:a7:ac:2f:e4:e2:0f:ac:9f:f5:8f:5d:65:7c:
                    db:0d:e1:3a:65:33:38:84:c3:be:16:5b:53:ef:9e:
                    e5:9e:cd:4f:15:b9:bd:1b:bb:d5:ba:78:36:62:ab:
                    fe:e4:de:13:85:b6:10:b2:c7:b7:39:b9:32:e0:c0:
                    53:aa:bd:ca:0c:43:51:96:10:5e:ee:bb:3f:4d:41:
                    52:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FE:05:C2:0A:94:FC:95:A2:40:A2:FF:F4:50:16:5A:DB:30:E4:E3
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ceacf551-02ee-4f40-8abd-053509a65c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ea00::/42

    Signature Algorithm: sha256WithRSAEncryption
         2a:4e:fc:c3:0a:21:b5:04:1c:06:45:6b:30:dc:d4:0f:52:46:
         f6:37:0a:1f:04:34:97:ea:62:83:55:cd:01:6e:68:56:b4:41:
         b9:b8:3d:87:95:ca:7e:ae:ab:d8:27:fa:60:33:1a:83:c4:68:
         45:e1:9f:66:98:28:0a:01:3d:cf:3d:f0:47:67:c5:42:5c:16:
         5a:1f:98:aa:15:c3:27:ff:e3:80:ba:9e:39:bf:3e:cd:b9:0f:
         d4:1b:c0:75:8e:6b:11:95:5e:ef:40:8e:97:69:b8:d2:d9:1f:
         9b:be:c3:84:1e:13:66:22:e1:57:ed:d5:6e:1c:ea:55:78:bb:
         2e:60:57:de:f4:ac:a1:df:15:ec:1c:ec:24:ed:99:fa:68:14:
         9b:b8:8a:48:5c:e6:c1:a6:f6:80:6f:f6:1f:bb:53:1d:60:63:
         79:16:61:75:e1:74:ef:ab:55:19:85:7f:06:ac:88:72:48:ab:
         94:1e:8c:09:89:c7:d6:07:db:c0:cd:16:ec:64:d5:f9:fd:28:
         66:2f:f1:2c:c8:72:1f:55:b3:0a:53:a5:a9:67:5e:76:6f:76:
         41:af:58:1b:ec:da:a6:55:00:22:28:83:5a:af:3e:ae:ba:1a:
         c7:53:20:42:ca:11:59:97:5a:e6:67:85:05:25:0e:be:19:33:
         81:5b:07:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:52:06 2026 by rpki-client