Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa
File:                     f1746927-d9c4-41c2-8abc-289ecb180bdc.roa (raw, json)
Hash identifier:          4dRZyC0bteCIVfw2kQv2iM4rsDrHuZs4slqEO9K5syM=
Subject key identifier:   78:04:52:E2:B7:76:77:EA:66:9F:1F:24:40:F1:59:DB:E0:E4:7D:2F
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4499F7F8B176A9BB987E3BFF5FE669B02D04FD57
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa
Signing time:             Fri 07 Aug 2026 04:10:15 +0000
ROA not before:           Fri 07 Aug 2026 04:10:15 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:99:f7:f8:b1:76:a9:bb:98:7e:3b:ff:5f:e6:69:b0:2d:04:fd:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  7 04:10:15 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=5c8fc42d9ca61ae34b4255040db7a818a8ef89c75d5b51a8cfa573ac14087fc9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:c5:90:c8:29:f9:88:78:af:31:f3:9c:cd:
                    be:de:c6:40:72:2e:9d:cd:0e:aa:7e:02:a8:f5:ca:
                    80:3e:d4:a1:dd:2a:27:6c:43:10:d9:4b:0d:3f:a4:
                    a7:e3:af:e8:37:8f:6a:cb:25:29:e9:ee:50:71:6e:
                    bb:b6:6e:e4:83:86:79:86:10:9d:17:d4:2c:d6:24:
                    d4:5c:ec:bd:84:0f:dc:4d:6a:7f:a4:75:4f:48:65:
                    c5:34:49:9c:2c:56:2b:de:24:08:f7:17:05:af:5f:
                    e2:6f:4a:ab:91:ba:60:13:82:e7:26:53:8e:df:f2:
                    f1:88:80:96:c1:bf:11:27:0a:f7:46:29:9a:a5:59:
                    55:38:e1:06:1d:d9:56:4c:9e:49:8b:6f:e9:88:73:
                    8e:dc:1c:72:de:5b:c6:cc:23:0f:c1:60:99:18:f3:
                    26:73:b7:10:0c:bb:c7:2c:3d:50:07:6d:c6:6e:ad:
                    e7:f2:de:da:f2:35:16:1a:81:a7:e4:12:0d:38:0b:
                    18:63:de:3a:b7:9a:24:bc:f6:bc:31:2a:c9:68:5f:
                    98:5f:4c:29:c2:c7:e3:db:79:02:1e:55:47:0c:d0:
                    6b:9b:1d:38:9e:26:49:ca:bb:a5:0e:61:31:32:ce:
                    1a:a9:7d:7e:6c:df:ba:7a:64:29:f9:e3:71:ab:54:
                    97:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:04:52:E2:B7:76:77:EA:66:9F:1F:24:40:F1:59:DB:E0:E4:7D:2F
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e500::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:1f:5c:4d:29:e0:3d:92:85:d3:38:54:74:7a:41:8c:01:43:
         9d:08:f9:c1:13:80:8b:10:f0:a1:e1:3e:fa:78:8d:f3:a9:00:
         33:a6:5c:f2:55:0a:6b:51:3d:4f:a9:4f:da:34:b3:1a:7b:22:
         a8:ef:17:e2:04:d9:9e:fd:28:ef:f2:e2:a9:e7:d7:64:4c:35:
         36:95:a2:25:ac:46:eb:f2:de:09:b5:dd:9d:a2:93:b3:17:d9:
         1d:16:02:12:29:1a:88:6e:9e:da:e4:6a:40:7f:3e:99:ed:42:
         54:0d:d9:dd:d1:15:43:27:1c:30:80:e1:f1:61:da:d5:c2:ae:
         1c:94:31:33:20:61:5f:21:4d:b7:37:c4:4b:10:b0:d9:84:8a:
         a8:8f:9c:a9:fd:fc:f6:e3:9a:12:e0:c3:f6:c0:44:fc:62:de:
         bb:94:c5:30:74:82:d9:ed:2d:4e:f4:4f:bc:8a:92:3c:bb:2c:
         c0:a3:ae:ba:a0:40:1b:91:55:a5:76:09:89:eb:03:38:01:d6:
         dc:f2:76:38:87:78:02:ab:2e:47:52:00:2f:8d:9b:09:58:dc:
         4a:e8:d6:1d:5d:55:a9:6d:77:c1:1c:4a:03:f5:04:51:5e:cc:
         c6:bf:c4:f2:9f:42:08:cb:b9:51:f5:8e:71:ed:6f:d3:a1:71:
         82:6e:ec:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:00:32 2026 by rpki-client