Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e063e272-cc04-463b-8e7f-783203b45df8.roa
File:                     e063e272-cc04-463b-8e7f-783203b45df8.roa (raw, json)
Hash identifier:          bAdUVGeCNJFWPldRCSiqMTe5NpItZl91RIH7Htugyss=
Subject key identifier:   B9:FC:88:4E:9E:C3:3D:CC:60:2E:62:A2:03:BA:B3:68:9D:29:73:A7
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       26B6DCA4EBAB584C38DD150CDE0F99C6556F061B
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e063e272-cc04-463b-8e7f-783203b45df8.roa
Signing time:             Thu 11 Jun 2026 20:02:17 +0000
ROA not before:           Thu 11 Jun 2026 20:02:17 +0000
ROA not after:            Wed 09 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:c102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b6:dc:a4:eb:ab:58:4c:38:dd:15:0c:de:0f:99:c6:55:6f:06:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jun 11 20:02:17 2026 GMT
            Not After : Sep  9 23:59:59 2026 GMT
        Subject: serialNumber=e4d758be44d280883e72377cee58cba632f676a64d572288c083a3a6cff9b444, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:18:db:57:30:73:c5:05:c9:53:34:4f:0b:
                    31:d8:33:f5:fc:f0:c3:c9:b8:50:54:16:c1:09:25:
                    a0:0e:3f:d7:58:ef:14:72:45:be:aa:12:49:21:4b:
                    72:f3:f6:88:78:2f:04:05:12:f5:b4:20:db:de:a9:
                    5a:7f:75:e2:4d:dc:09:dd:73:0c:00:27:90:49:7c:
                    dd:ad:46:e3:21:6a:21:7f:71:fc:c4:2d:91:2d:6a:
                    33:5c:37:4a:82:2f:5d:53:e7:80:56:b2:ea:14:f8:
                    01:fa:36:e0:54:e4:fd:9b:48:9b:58:ca:05:80:6f:
                    79:17:e7:c5:46:01:d2:3f:08:d2:17:73:11:4d:5e:
                    88:50:cb:ef:42:34:be:7d:2f:eb:9d:94:16:b9:22:
                    0a:cc:a0:05:29:4f:00:8a:9f:ca:71:bf:80:16:15:
                    87:8f:5b:2f:a0:14:51:ee:98:e2:45:19:9f:2f:12:
                    67:0b:44:e5:e3:12:a2:6f:3d:33:a7:d0:3e:05:40:
                    22:6f:ea:7e:be:0b:8f:36:82:7d:2d:f8:e3:26:f1:
                    c9:d8:1d:a6:16:69:72:24:4c:89:86:4f:64:ac:29:
                    e1:b7:c6:ee:f2:88:ea:2f:b8:65:82:97:8f:3d:13:
                    b9:80:44:97:27:47:54:e4:3e:56:7a:26:3f:d5:17:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FC:88:4E:9E:C3:3D:CC:60:2E:62:A2:03:BA:B3:68:9D:29:73:A7
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e063e272-cc04-463b-8e7f-783203b45df8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:c102::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:4a:47:07:b7:0e:c7:0d:d6:20:7c:d7:22:9c:27:33:51:fa:
         4d:e6:a6:b0:e3:0d:7a:57:36:21:38:78:50:af:49:c3:1a:44:
         51:f0:d1:4c:99:c6:99:4d:4e:0a:ca:d0:2d:d2:5a:3e:44:05:
         aa:77:85:33:c9:d4:b8:81:c7:f3:5f:c2:4f:58:75:c0:6e:b0:
         a7:15:15:10:3e:d4:e4:04:d1:0c:08:d6:1b:a7:92:65:f6:87:
         d8:5f:ab:32:9a:b9:e4:f3:f4:45:39:06:6c:81:56:8b:9a:78:
         07:8d:a9:de:53:27:3c:9f:3c:39:d1:02:79:f2:2c:f5:e4:02:
         0e:14:b2:fb:cb:4b:b8:c9:9b:65:65:b5:27:aa:f3:66:db:d1:
         7b:39:cc:5a:92:2a:93:8b:be:3a:95:c7:ba:f5:4e:f9:35:a6:
         0f:89:2a:19:4a:fc:16:83:58:2f:a0:e8:ff:02:5e:a6:42:74:
         e4:19:e6:cc:0d:0a:2f:b8:85:14:7f:ac:36:02:60:43:e7:19:
         fc:07:0e:af:48:9e:c6:05:dd:81:bd:8a:33:db:7c:b4:b0:7e:
         e6:b7:b1:e4:68:af:7a:b1:c2:df:25:0c:be:9c:e7:2b:28:55:
         b7:a6:f6:c6:4f:bc:0e:2f:fb:1f:a6:59:72:c4:13:de:06:57:
         bc:0b:1f:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:46:42 2026 by rpki-client