Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f504ccce-2eee-4202-842d-dad59cabe141.roa
File:                     f504ccce-2eee-4202-842d-dad59cabe141.roa (raw, json)
Hash identifier:          q1xU46YtVmjbKJYm0wRSy0xYP+EOWVjxkwh1foapY9g=
Subject key identifier:   73:64:A4:2C:ED:30:9B:AE:99:69:80:C6:AB:7F:CB:11:60:48:F2:0C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       139C7E39D71987389D68C83A2644BFA824886979
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f504ccce-2eee-4202-842d-dad59cabe141.roa
Signing time:             Tue 19 May 2026 04:30:08 +0000
ROA not before:           Tue 19 May 2026 04:30:08 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9c:7e:39:d7:19:87:38:9d:68:c8:3a:26:44:bf:a8:24:88:69:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 19 04:30:08 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=45b0918b6d8a9f857d3674b39be0ade386b048967fd500819fad1326b36fa69e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:05:8a:4d:a8:03:02:df:34:db:8a:38:34:5f:
                    91:99:90:6b:f4:e5:86:4a:3f:57:d4:b8:71:8a:34:
                    ff:ff:b2:4c:a5:38:e5:db:cb:22:4c:6b:1e:3b:e1:
                    de:69:ef:d3:68:27:98:f7:18:9a:f7:d3:09:b4:d8:
                    db:44:1f:4d:20:54:47:5f:03:3d:1d:40:d3:8d:4b:
                    40:39:19:78:d4:34:5b:ad:1a:4c:6a:c1:c4:b7:19:
                    fa:5d:6c:f1:2a:be:7f:5a:60:de:38:f6:7b:11:4f:
                    b1:0f:ad:4b:b6:a1:88:61:e2:7b:58:18:c9:32:4f:
                    d8:66:6a:0a:ea:ad:35:e9:44:89:75:62:74:66:63:
                    86:e5:87:ec:9a:ac:ba:ce:04:b1:38:c9:9d:1e:b1:
                    b5:1c:e6:b9:d2:01:80:d4:64:1a:8c:06:d5:73:c0:
                    f8:c0:ba:54:07:66:cb:20:29:0b:ee:4e:c6:43:f1:
                    b0:0d:f8:9d:a4:70:2a:30:76:bd:e9:b8:dc:1d:b3:
                    90:aa:9d:8a:9e:31:15:44:4a:e0:3e:d6:02:ce:34:
                    d5:56:4c:0b:f8:d1:2d:63:75:54:c7:71:46:c7:4b:
                    67:91:cb:54:16:6f:13:64:c9:91:40:5f:54:72:7a:
                    dd:bb:09:99:24:74:95:05:37:9a:69:72:bc:c2:31:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:64:A4:2C:ED:30:9B:AE:99:69:80:C6:AB:7F:CB:11:60:48:F2:0C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f504ccce-2eee-4202-842d-dad59cabe141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:46:2a:01:7c:88:db:7b:6a:7a:ef:d7:77:e9:b1:46:8e:ff:
         c5:85:97:3f:1a:e6:34:20:10:9b:4e:9a:4e:e1:92:30:96:37:
         80:30:04:eb:09:a2:67:7a:a3:19:4b:64:9f:d6:03:74:b0:01:
         96:73:6e:25:b2:c9:23:c6:29:97:62:21:e8:05:f6:7f:35:4c:
         41:8a:1a:5c:e7:01:fe:be:c9:0f:09:12:4a:80:95:46:b9:1d:
         a3:ec:d8:f3:9e:9d:5c:04:eb:70:9a:7e:6f:23:10:a9:38:af:
         df:28:04:c7:35:2c:20:49:ed:22:0e:61:22:3c:f3:de:2e:75:
         39:d3:fa:02:57:aa:d4:4a:33:d5:3b:c3:2b:65:d3:58:90:c6:
         d1:80:25:ee:53:73:59:3d:a7:fb:b9:cd:ad:aa:9b:e4:cd:db:
         77:af:43:46:b0:f8:ce:6f:42:79:d5:66:2a:b8:07:33:af:e6:
         e2:8c:5d:c7:fd:d1:21:bc:72:35:a3:f1:5b:6d:78:77:4c:30:
         49:b8:86:4d:0a:c6:d6:02:b8:8e:7a:01:37:80:53:fb:62:54:
         83:32:1d:25:16:d9:1c:5c:b1:30:c0:87:20:cd:02:01:d2:21:
         65:de:e8:c2:c3:50:99:40:8b:7c:4f:43:f9:dc:ea:9a:62:33:
         c3:f3:41:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:50:35 2026 by rpki-client