Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6334ad8-04a1-4b1e-af68-368584971f2f.roa
File:                     f6334ad8-04a1-4b1e-af68-368584971f2f.roa (raw, json)
Hash identifier:          IEKp75gKjBaG1CKst7LKfE9HUXaJJLP2n10MVkF9MbQ=
Subject key identifier:   29:9D:E5:35:3C:94:FD:72:B3:64:74:14:0E:A3:CD:A7:2B:E5:54:9D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       66E2D1692F559210C1C9ACFC3B56967C6CEF2A3D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6334ad8-04a1-4b1e-af68-368584971f2f.roa
Signing time:             Tue 19 May 2026 04:10:56 +0000
ROA not before:           Tue 19 May 2026 04:10:56 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e2:d1:69:2f:55:92:10:c1:c9:ac:fc:3b:56:96:7c:6c:ef:2a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 19 04:10:56 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=4bc5e3d1813d4c4c19864d6dfd1964a249a0a350c20719f64cfc9ec1f32ebe76, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:01:23:33:e8:4b:d1:5a:0f:fa:7d:4f:38:
                    90:22:c8:1b:54:a2:c3:60:5c:d9:f4:0a:4e:8e:ba:
                    ea:19:bc:ab:6d:94:ec:91:3c:a4:b5:d4:22:7b:2b:
                    df:6b:8e:99:d4:e0:12:6c:a1:d4:29:6f:44:01:cb:
                    72:a9:aa:fc:96:fa:9f:0e:c2:d3:1f:d0:1e:aa:e0:
                    8e:a8:6d:e7:4d:a3:5b:1a:ff:21:57:18:fe:1f:ac:
                    32:89:86:70:f6:15:4d:86:ea:4f:cb:0d:74:46:db:
                    d6:ac:7d:82:5c:db:15:68:e8:c3:72:00:a2:8b:01:
                    de:63:89:46:af:2e:85:17:15:e4:a1:a6:38:63:70:
                    c9:9f:08:7a:3b:0b:b8:0b:27:fa:1f:3f:a1:52:ae:
                    08:86:13:c0:49:fc:a0:5f:55:f3:36:9e:b8:8e:7f:
                    54:22:8b:91:bb:53:a4:bf:7a:9e:c4:88:55:d1:bc:
                    79:3e:4b:11:56:c9:48:a5:5f:91:56:7a:4f:38:9b:
                    7e:4f:4f:75:62:d9:f5:09:bd:27:e9:46:c5:90:b3:
                    ea:3c:84:7d:44:db:81:ac:9b:33:8a:b5:be:9f:c2:
                    cc:55:ec:30:ce:12:0a:b1:b9:c6:4d:3f:a0:64:f0:
                    09:23:5e:07:20:0a:fc:2b:34:b4:1e:eb:bc:11:32:
                    e7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9D:E5:35:3C:94:FD:72:B3:64:74:14:0E:A3:CD:A7:2B:E5:54:9D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6334ad8-04a1-4b1e-af68-368584971f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e300::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:bd:58:47:e3:02:57:7c:82:4a:06:a7:a4:f0:ac:9c:7b:ed:
         b5:54:e9:f5:12:56:15:26:04:f7:b0:af:6b:99:12:f8:83:ee:
         fd:d1:b5:88:93:71:b4:d4:57:ac:df:b6:c1:2a:ed:ff:27:e4:
         35:3a:06:9f:61:e9:4b:09:c1:18:a3:bd:87:23:5f:8b:d7:40:
         e3:88:e9:bf:9a:84:ed:4b:20:a4:3e:61:a9:af:0b:fa:02:19:
         1e:80:19:73:45:9a:3a:34:4b:b8:b2:85:86:5e:62:79:62:96:
         20:0c:d6:21:5e:aa:af:04:50:fe:4e:e4:02:d2:e3:67:23:61:
         6a:32:56:6f:26:c7:e0:77:84:89:cd:2b:64:95:46:2e:08:de:
         fa:15:6e:1f:54:3b:cc:40:c0:14:07:d6:e9:aa:f4:68:10:c4:
         bb:e5:83:d4:a3:94:c3:40:e4:8b:a6:0e:73:2b:03:67:00:77:
         cb:0e:5c:e4:d4:23:0b:44:1d:61:38:6a:90:46:65:b5:b7:b9:
         1c:fd:e7:ba:50:fc:85:7f:a3:98:35:b8:63:3c:72:1e:28:8e:
         9c:c4:37:4b:97:61:3c:cf:fb:80:cc:63:0e:24:db:83:49:e6:
         51:b2:ec:2d:61:3e:b7:c9:2d:f6:04:f6:4b:6c:06:4d:43:1e:
         0d:cd:5d:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:52:36 2026 by rpki-client