Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fea307b4-7930-4800-8cf1-88ee124ee6f8.roa
File:                     fea307b4-7930-4800-8cf1-88ee124ee6f8.roa (raw, json)
Hash identifier:          TfTn0c/D1SrugO68Nt/vqBAmiP2sIifj9VJsnkSyDWw=
Subject key identifier:   91:5A:36:C5:5A:14:B5:06:3C:AA:FA:14:08:35:85:BA:DC:D5:88:D4
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2294B118D986E4F74F3799B2D515078D9CF66E92
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fea307b4-7930-4800-8cf1-88ee124ee6f8.roa
Signing time:             Mon 25 May 2026 00:00:28 +0000
ROA not before:           Mon 25 May 2026 00:00:28 +0000
ROA not after:            Sun 23 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:f08::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:94:b1:18:d9:86:e4:f7:4f:37:99:b2:d5:15:07:8d:9c:f6:6e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 25 00:00:28 2026 GMT
            Not After : Aug 23 23:59:59 2026 GMT
        Subject: serialNumber=7a566f049f620d250e31e6766d14ed051ca47f202c7113e2af68273654c1347c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f2:b3:c1:79:58:d4:4d:2f:ea:4a:7a:76:5c:
                    67:78:3d:e2:60:6c:4a:fc:a4:b9:c2:98:74:41:21:
                    d2:d9:a8:5a:67:f8:ed:b9:8c:f0:41:a8:a2:b8:26:
                    f0:61:09:4b:81:0f:df:7e:67:5d:6a:4b:9c:dd:0f:
                    78:d9:2b:e3:80:f2:7e:a8:a3:71:8c:92:a4:28:67:
                    a0:88:f8:b3:28:cb:09:6b:39:27:2f:5d:0e:d7:d2:
                    29:3d:58:5c:e5:39:66:4c:29:16:c5:11:09:74:08:
                    53:11:fd:d3:d0:2c:d0:7e:58:30:bd:a9:e5:09:8b:
                    9c:d6:40:60:c6:4e:c2:e6:f5:6c:9c:50:60:a0:68:
                    c7:ab:3e:a9:1e:a8:ac:ba:5e:80:e7:98:50:6c:ed:
                    49:8d:1d:0b:b7:66:0e:64:e0:cf:3a:30:4c:59:64:
                    af:49:90:20:cb:1a:ab:03:5b:3d:81:91:52:a7:7a:
                    9b:8a:55:9e:1f:48:95:12:75:e8:e7:97:29:4c:55:
                    bf:ef:e5:73:eb:79:9f:f6:41:f0:8d:35:76:79:33:
                    a6:23:7f:66:03:cc:7d:ce:a6:16:32:cc:e4:1f:49:
                    cd:a1:26:79:64:19:61:59:d0:94:35:34:bc:db:66:
                    33:e8:6d:27:6c:73:bd:d4:db:24:42:51:01:ec:8a:
                    6b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5A:36:C5:5A:14:B5:06:3C:AA:FA:14:08:35:85:BA:DC:D5:88:D4
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fea307b4-7930-4800-8cf1-88ee124ee6f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:f08::/46

    Signature Algorithm: sha256WithRSAEncryption
         12:80:ae:0b:6b:d4:7b:be:83:8c:f4:e8:b3:16:6a:dd:9f:59:
         a6:9f:7e:2a:9b:d7:bb:2c:68:0c:34:2c:30:be:1a:82:0a:06:
         96:2f:d6:6c:2c:2e:1d:57:be:ae:41:38:0b:7f:0c:07:d9:c4:
         a6:38:be:36:39:f0:e4:20:80:b3:6c:9e:99:d6:0c:1c:ef:b5:
         f7:cb:ac:0a:72:12:5e:13:89:56:36:8c:98:82:be:b9:38:b4:
         e3:c8:84:06:95:13:02:7a:c1:f2:a7:40:3d:1a:db:18:4d:2e:
         19:5a:a2:f9:5b:e6:bc:a1:d6:b7:44:9b:b2:d6:cc:e7:4c:6c:
         8d:13:f1:41:b9:49:1a:5b:8e:59:de:38:2c:b6:e7:58:79:89:
         da:7a:58:2f:db:dc:4a:0b:59:78:81:58:80:cf:8b:40:b2:a2:
         f8:e7:78:1c:a2:46:f1:63:35:d7:61:88:59:5c:29:5e:14:73:
         12:02:f9:05:20:97:38:80:78:e2:7e:94:5c:db:60:bc:c7:4b:
         4c:68:96:81:ba:44:4d:be:bd:a3:47:b2:74:aa:c9:23:f6:77:
         68:03:24:17:23:fa:df:97:06:e6:9f:68:b2:b1:a3:c9:b2:cf:
         b8:bb:bc:4b:b9:24:d3:80:83:36:95:e8:34:8c:4f:c8:93:16:
         b4:e7:da:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 16 08:01:08 2026 by rpki-client