Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fe163dbc-48ec-47e4-982a-1f9b82096c5e.roa
File:                     fe163dbc-48ec-47e4-982a-1f9b82096c5e.roa (raw, json)
Hash identifier:          oq/ThPEFzRHQ3XVQwf9BXLTFsynaKQEpVBuQewGDraM=
Subject key identifier:   62:BC:62:FD:36:41:30:0C:A9:E8:C4:49:D8:3D:08:1D:7A:2A:CB:8E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       14288193ADE90A91C6097118528002D60BBE3D68
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fe163dbc-48ec-47e4-982a-1f9b82096c5e.roa
Signing time:             Mon 13 Apr 2026 20:21:54 +0000
ROA not before:           Mon 13 Apr 2026 20:21:54 +0000
ROA not after:            Sun 12 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6026::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:28:81:93:ad:e9:0a:91:c6:09:71:18:52:80:02:d6:0b:be:3d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Apr 13 20:21:54 2026 GMT
            Not After : Jul 12 23:59:59 2026 GMT
        Subject: serialNumber=8cde73a3150f0d15a2bae03d439b58d4c39c8c4040ba614d94c59a81b1fd64d0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:7f:aa:64:d6:cb:33:82:50:23:16:0d:53:
                    46:10:4a:42:f6:7c:df:a1:a5:bb:ee:3f:7e:80:62:
                    d4:e1:fd:d3:2e:fd:fe:c1:38:99:c8:6a:70:5f:6f:
                    e3:97:23:73:85:ff:b1:49:2b:1e:5d:30:db:cf:29:
                    5b:65:9b:25:ae:c7:30:25:20:00:93:f0:bd:68:b7:
                    f4:22:42:04:ef:95:a4:04:0b:a6:eb:08:5a:a2:12:
                    4b:1d:19:b5:78:53:ce:fb:47:b0:25:d2:f6:16:8d:
                    73:94:ef:8b:b6:58:4b:1d:5f:3f:2c:d1:2c:23:6f:
                    82:69:3e:f4:da:f6:db:5c:2d:7e:c5:b5:03:0b:9c:
                    0d:d7:6f:e6:7f:cd:86:0c:45:88:f1:3d:c7:bd:e3:
                    2a:ad:f9:f9:0f:c6:80:5a:32:a1:b4:24:94:fe:8d:
                    05:cf:22:0e:e2:f6:4a:d9:ce:39:21:e0:2c:12:74:
                    15:c0:ad:7b:a7:1e:f9:25:8d:f6:ba:f2:c1:70:9f:
                    96:32:03:ac:54:14:8b:57:8b:6e:6f:7a:06:7e:dd:
                    01:2f:ec:99:14:97:67:b5:8b:3a:35:ad:8c:7a:91:
                    4d:50:27:6d:6b:50:c8:bf:c9:08:2b:21:0c:ca:25:
                    be:d8:e4:84:3c:22:54:7f:c6:eb:9a:98:e1:e5:ea:
                    f3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BC:62:FD:36:41:30:0C:A9:E8:C4:49:D8:3D:08:1D:7A:2A:CB:8E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fe163dbc-48ec-47e4-982a-1f9b82096c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6026::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:6e:c0:f5:1b:8a:36:b1:58:fb:71:bd:3b:73:d1:b7:ba:9b:
         99:e0:1e:cd:a7:2b:8e:02:5e:d8:0e:9b:6e:c7:17:fb:a6:67:
         d7:47:1b:17:63:06:5e:4f:18:e1:38:f3:50:40:bc:a4:d5:2c:
         8b:22:18:d5:b9:db:7e:59:c4:8a:46:f3:13:63:b8:6c:84:11:
         db:64:b6:34:f9:e3:f3:e1:e0:ec:2b:9e:5d:2e:1a:3c:6f:b4:
         a4:bf:39:07:13:8d:49:bf:00:c4:ba:8d:3c:01:e4:51:95:a9:
         2c:0a:8c:90:90:2f:a3:fc:36:10:e4:76:00:83:b9:aa:60:94:
         7d:a4:b8:af:f9:c3:18:46:f7:9b:ca:10:7f:d2:51:b6:ac:7c:
         cf:66:33:9b:62:bf:83:d9:cd:31:83:d2:6e:23:aa:67:af:79:
         15:b9:e2:65:f2:aa:2c:4a:2f:86:ba:a5:b7:bd:08:c5:38:60:
         da:6a:75:96:0f:29:b6:e6:6a:f7:e4:9c:ca:4b:80:3d:3b:7d:
         54:69:16:2f:36:aa:17:b3:ce:90:e3:bc:e2:f3:bb:50:c6:76:
         65:80:43:a8:b2:b3:d9:45:84:f6:be:8e:70:58:fa:72:d8:15:
         1b:de:0c:e4:29:79:44:b9:be:67:d7:2b:0d:49:77:c5:77:ab:
         ed:36:0b:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 14 13:05:58 2026 by rpki-client