Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f504ccce-2eee-4202-842d-dad59cabe141.roa
File:                     f504ccce-2eee-4202-842d-dad59cabe141.roa (raw, json)
Hash identifier:          COsr1qI5FHIPzq7IzaMOiZa7MgddZPZW6YikM+O0JEo=
Subject key identifier:   0E:30:A7:DE:76:38:10:2D:67:27:63:CD:3E:E9:78:B7:D0:3F:8D:98
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       77A17055702D648F696DA29AB656E52F2DFEC9C7
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f504ccce-2eee-4202-842d-dad59cabe141.roa
Signing time:             Fri 07 Aug 2026 04:30:14 +0000
ROA not before:           Fri 07 Aug 2026 04:30:14 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a1:70:55:70:2d:64:8f:69:6d:a2:9a:b6:56:e5:2f:2d:fe:c9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  7 04:30:14 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=78d23fe4dc681b9cfdcdcea5f5994d6012ece37657338fb335c18b6baf9c352d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:54:c0:1e:c8:66:c8:94:42:26:84:a2:f7:
                    b4:3e:2a:6a:4f:88:56:b3:28:f6:1a:32:29:f4:dd:
                    0c:10:fe:c1:06:f5:75:f2:8a:7c:a4:01:88:3b:21:
                    e6:7c:e6:bd:a5:4c:2c:2d:4e:a6:e9:08:a7:8b:31:
                    67:c5:d0:2b:34:1a:d3:83:1b:3a:87:94:da:b9:5d:
                    f5:fe:dd:ed:65:00:39:3d:d7:1c:92:d7:ce:a7:49:
                    b0:50:15:1e:e6:34:0a:52:e4:58:99:2d:9d:62:9b:
                    69:c8:90:ed:21:b1:07:df:71:45:83:d7:dc:bb:fd:
                    e4:14:c5:5c:c9:c6:a8:f5:49:2b:49:b9:e1:98:ab:
                    e6:81:5d:31:84:a8:ae:a6:35:61:7a:e2:b5:cd:49:
                    09:e4:3e:d6:18:86:bb:cb:84:a6:f1:46:9d:82:42:
                    d6:48:11:15:35:6a:76:07:2d:41:d2:ee:3f:07:f1:
                    71:82:46:6a:57:61:a3:0d:1d:a5:c1:85:36:6c:ac:
                    ca:53:58:ca:48:f8:59:e3:98:ba:c1:15:d5:b7:c0:
                    24:5e:4e:ed:43:b5:58:3e:d6:9d:fd:d7:a7:c3:42:
                    18:64:51:35:b3:24:7e:eb:53:90:d9:52:4c:53:99:
                    59:38:3a:3a:d1:eb:1e:b5:06:27:24:e3:e8:95:74:
                    7d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:30:A7:DE:76:38:10:2D:67:27:63:CD:3E:E9:78:B7:D0:3F:8D:98
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f504ccce-2eee-4202-842d-dad59cabe141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:05:33:78:34:77:71:80:38:59:03:4e:b4:12:fc:8f:7a:28:
         d0:55:4a:51:aa:ae:24:12:4c:ea:8f:a0:de:34:bc:fb:ff:00:
         28:85:4e:bb:73:87:da:e5:a9:03:04:1e:e0:7f:c9:42:09:de:
         80:f2:4f:f8:03:42:d5:c7:a9:a7:8d:8f:0e:e4:11:ba:2b:44:
         26:5f:86:4a:05:a7:64:83:87:65:34:2c:d1:29:d7:f1:e5:cf:
         e6:2f:f3:3b:ff:4c:3b:5f:a3:23:c2:1d:55:a4:15:f9:ed:23:
         00:86:d6:58:ce:e3:4d:78:35:46:aa:b2:f6:50:67:fa:9d:ca:
         ac:d0:58:2d:5e:9c:b9:d5:0d:e9:fb:c8:08:4a:66:ad:65:8a:
         09:5e:d7:dd:8e:c9:04:eb:60:0f:51:09:e2:ad:04:90:7c:64:
         e5:ce:aa:88:8c:0e:77:96:40:31:5f:48:82:e4:7d:6f:93:46:
         8c:80:05:85:ea:54:51:6c:58:4b:48:ed:1b:18:ff:32:58:dd:
         89:65:21:16:af:92:3a:6d:0e:69:ff:f7:40:d1:83:46:5a:e4:
         77:71:75:5d:40:fc:72:a8:18:81:50:6d:64:b8:6c:37:40:b7:
         30:11:1f:1f:11:9f:44:42:fc:ea:71:ba:be:5c:92:94:4e:cd:
         40:69:a5:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 11 07:36:55 2026 by rpki-client