Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d040f02c-c962-433b-9282-37c1d283eaeb.roa
File:                     d040f02c-c962-433b-9282-37c1d283eaeb.roa (raw, json)
Hash identifier:          fGzGbFUbNfxeSHTMtLLVfxqRSKU59zBTZEOf7EGTm3k=
Subject key identifier:   7C:1F:DD:EC:C5:A9:D4:A7:E2:49:D6:C4:B5:9E:7A:54:17:0C:64:2B
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0297BE5E7EF2192FC7CAE737B392853DFF4EC558
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d040f02c-c962-433b-9282-37c1d283eaeb.roa
Signing time:             Tue 19 May 2026 04:20:50 +0000
ROA not before:           Tue 19 May 2026 04:20:50 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:eb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:97:be:5e:7e:f2:19:2f:c7:ca:e7:37:b3:92:85:3d:ff:4e:c5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 19 04:20:50 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=c3c8dfe486d8dc2fe3ea888649f0cd72f3f231188f6c5461b070597a0ea4d793, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:22:61:96:43:ab:bf:0a:d4:07:8c:1e:d3:d6:
                    e0:5a:52:e8:67:66:cf:4e:51:32:17:6d:9e:9b:d0:
                    61:9f:1c:72:82:1e:ac:f7:9e:7c:47:10:b1:5b:13:
                    b0:43:4c:07:0f:0f:2b:08:75:cb:89:8c:43:73:2f:
                    36:c2:cc:bc:0b:f4:7c:cb:03:fe:d4:ac:93:95:c6:
                    7c:09:e1:a8:93:33:68:f2:cf:af:da:ce:84:45:fb:
                    52:42:bc:ec:39:e4:f8:bb:e7:96:d1:4c:3b:a0:9d:
                    10:93:de:f6:80:88:9d:9a:7d:b0:62:d0:54:e9:8b:
                    0b:9a:53:6c:b0:a8:e9:cd:19:ec:f1:c2:e6:c8:45:
                    5c:62:96:75:ce:88:8c:21:82:42:57:10:5e:50:97:
                    44:56:32:70:7c:ad:29:f0:53:da:93:35:a1:04:82:
                    6a:3b:0f:c2:14:25:28:f6:af:62:d8:29:3e:14:37:
                    3d:22:52:3b:41:47:28:9f:06:c5:3f:c4:2f:f5:c9:
                    aa:4b:ac:38:68:30:2e:3f:14:08:5c:80:7c:62:fa:
                    8c:ac:5c:4e:9c:69:26:a6:d2:2e:d5:e6:99:81:87:
                    1d:68:92:99:ee:c7:aa:d5:f5:51:9d:da:57:38:77:
                    62:a0:d1:b3:fd:7a:fb:8a:79:ba:b9:62:45:08:b2:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1F:DD:EC:C5:A9:D4:A7:E2:49:D6:C4:B5:9E:7A:54:17:0C:64:2B
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d040f02c-c962-433b-9282-37c1d283eaeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:eb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:11:77:ac:96:d8:bd:cb:8d:2b:b7:c5:fa:3f:1a:d7:1f:cc:
         a1:6b:8e:8e:5c:2c:f3:2b:30:56:2a:ba:3f:76:1d:b0:24:f4:
         2e:4d:60:36:cc:34:22:09:3e:3a:f4:c1:81:84:a0:c4:b6:e8:
         25:9b:48:84:21:87:08:bc:91:e6:0a:4e:ea:88:fd:24:5d:47:
         0c:6f:2b:0f:16:78:07:73:c7:2a:57:df:bc:9b:72:31:26:38:
         51:58:5c:ab:22:f9:b7:b7:84:12:eb:a1:01:cb:5c:73:cf:e3:
         57:da:19:44:76:e9:5e:30:01:3d:b4:88:d8:0a:95:b6:97:ef:
         c7:17:05:88:f0:86:a6:ad:25:9f:47:d9:99:6a:0f:a4:42:58:
         d3:dc:0f:17:f7:d9:c4:41:30:51:0c:2b:d2:cf:b0:ee:df:15:
         97:2e:5e:9e:88:08:dc:21:e6:0a:e0:70:94:45:5b:9b:75:50:
         88:7a:69:0c:7b:af:6d:a8:e2:ab:dd:d1:e1:a3:86:95:5c:30:
         15:bb:ec:31:e0:a9:9a:f9:83:b3:e6:af:5f:0f:08:0e:0d:78:
         a9:18:e1:e5:57:95:94:c9:5e:2f:0f:c9:00:5a:c4:b5:bc:55:
         9a:4b:a5:41:e4:fb:da:e6:4e:5f:0a:f2:c9:31:58:e6:af:e6:
         ce:99:70:06
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:50:17 2026 by rpki-client