Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ed489dd8-33df-4b42-9bde-ace356f6114a.roa
File:                     ed489dd8-33df-4b42-9bde-ace356f6114a.roa (raw, json)
Hash identifier:          uzTQt/8YAK7EYq7MuAt6maVeT5H4vSWO08LHoNuteBk=
Subject key identifier:   50:E9:7E:D5:99:84:59:AB:35:03:71:F8:56:12:A8:AF:F9:43:0A:0D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       466E658877B6BF3FC8DB36C5F1C506E3FD53730E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ed489dd8-33df-4b42-9bde-ace356f6114a.roa
Signing time:             Sat 08 Aug 2026 00:50:25 +0000
ROA not before:           Sat 08 Aug 2026 00:50:25 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:f102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6e:65:88:77:b6:bf:3f:c8:db:36:c5:f1:c5:06:e3:fd:53:73:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  8 00:50:25 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=c16f3303d724cdf0f14db6e85452c1544d95a12bb997930ea39d25b1206328a0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:0e:84:c3:4f:dd:2f:e8:18:ab:ba:0a:5e:
                    31:ca:3c:01:60:5b:53:ad:83:a2:1c:fc:0b:f3:33:
                    ea:31:d6:ef:c4:50:b3:70:80:a6:14:3b:a5:a5:b6:
                    9f:e9:cc:58:e2:30:43:e3:4e:8b:2f:67:b4:00:4b:
                    1a:2f:ec:33:91:70:22:c6:f0:b2:7c:96:ff:39:e7:
                    aa:4b:a4:16:ef:a2:14:fa:ea:d2:ea:1c:b8:b8:5d:
                    2a:b8:bf:c6:25:c9:8c:f3:1c:b7:03:fa:25:d6:16:
                    9d:15:e3:e7:09:6d:36:35:22:0b:8d:87:37:45:f6:
                    67:70:f6:af:4b:e9:67:e0:db:0c:57:3b:c9:76:a0:
                    55:0d:02:8b:06:41:3f:c6:df:b6:a7:d0:b8:37:2a:
                    46:f6:d3:ad:1d:2c:86:ba:e0:c0:eb:e0:bd:37:40:
                    49:b1:99:3b:bc:e4:eb:73:df:2d:e8:d2:00:04:75:
                    45:d5:c2:09:56:bc:d8:fc:65:7c:57:b2:f3:c6:8e:
                    eb:49:61:d2:4b:63:ec:41:16:2a:01:4d:a0:72:11:
                    06:53:56:f6:33:f1:6e:c7:72:e1:2d:ae:f7:13:6f:
                    7a:62:75:77:54:02:7a:9d:09:32:aa:29:3d:2a:38:
                    77:27:07:48:b4:bb:6c:c1:51:89:27:47:20:03:32:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E9:7E:D5:99:84:59:AB:35:03:71:F8:56:12:A8:AF:F9:43:0A:0D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ed489dd8-33df-4b42-9bde-ace356f6114a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f102::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:61:6b:f8:37:9d:19:3b:53:38:78:e7:97:c7:e6:a1:ef:50:
         86:30:aa:42:28:3f:d4:a7:23:24:10:9f:fc:40:6a:48:78:d8:
         55:6d:4d:a1:f0:68:d1:1f:35:59:64:2c:49:35:9c:24:cf:fd:
         05:1b:53:d0:97:ac:92:21:ae:79:23:a7:03:06:c5:f5:20:31:
         30:84:6a:a7:d7:58:83:5b:12:e3:4a:ea:2d:3f:9d:2e:b7:71:
         fe:36:72:85:ce:35:de:68:d5:03:e3:a3:a0:7a:54:33:01:be:
         6c:cd:40:9a:28:b0:39:0f:1b:e3:47:6b:43:1b:d3:b1:24:a1:
         1b:c1:93:64:45:e1:a5:36:1a:ff:f0:48:03:a5:6b:d8:30:a0:
         98:20:70:ba:c6:0b:f3:62:a1:9f:15:55:34:7b:1d:8e:6e:d0:
         d8:c8:ef:7e:5d:fc:6c:d0:f8:a6:fd:a0:eb:06:a2:54:2c:ad:
         8f:48:71:0b:39:e4:5f:07:9a:03:e3:37:ee:96:0f:52:16:7b:
         aa:84:bf:65:08:e0:29:9e:2f:62:4c:77:3a:3f:65:df:11:49:
         20:c2:cc:1b:7f:0b:74:b4:7b:91:25:7f:3f:83:b6:2c:64:d9:
         cd:0c:e0:e0:f3:3a:11:4b:06:dd:23:c0:32:02:a0:41:56:51:
         95:fc:83:de
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:17:24 2026 by rpki-client