Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd2c3e2-4d89-41a3-b450-b53f95a9dcd3.roa
File:                     ffd2c3e2-4d89-41a3-b450-b53f95a9dcd3.roa (raw, json)
Hash identifier:          mUqDDKN+eWNkXZfpLBhbSBx+4hXIY+G7WgmN7dFYRdY=
Subject key identifier:   E9:97:CE:0A:BA:0D:09:19:1D:20:67:E1:39:47:AC:98:4B:66:C9:8A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       350A07F30867251B18F80FC3DC3F52AB29560712
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd2c3e2-4d89-41a3-b450-b53f95a9dcd3.roa
Signing time:             Tue 19 May 2026 04:10:06 +0000
ROA not before:           Tue 19 May 2026 04:10:06 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0a:07:f3:08:67:25:1b:18:f8:0f:c3:dc:3f:52:ab:29:56:07:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 19 04:10:06 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=98ba25c58c840db64c5965f5591750344f21d106a4e8c88d5d551c82d28ec2e8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3f:41:f1:29:e8:6d:04:4e:52:ca:61:ab:95:
                    a1:d4:4c:7e:34:82:c4:e7:2c:45:e8:c8:9e:19:81:
                    13:ed:3f:7c:82:87:48:91:95:a0:1f:bb:d0:e0:0c:
                    62:15:1e:fd:50:69:35:10:37:24:74:d8:69:28:2b:
                    63:d0:2c:69:a8:1b:14:43:69:94:fa:b1:b8:00:91:
                    95:2e:2b:16:c5:2c:05:27:c9:36:b0:7e:93:76:5c:
                    6d:2a:c7:c9:c9:3e:64:be:fa:d9:86:2e:9b:0a:3a:
                    e5:86:af:80:e3:15:ab:95:7d:4f:76:b5:b4:78:eb:
                    f7:31:dc:b7:e4:b2:80:5e:de:46:51:21:c3:2d:42:
                    b2:f7:74:53:cf:b7:b4:f5:2e:66:c4:e0:da:c3:02:
                    fb:d9:7c:73:ca:27:3c:89:ae:ba:58:3c:6f:80:7f:
                    97:4b:e8:3f:cb:c9:af:e2:c4:44:eb:aa:6a:5f:4d:
                    35:19:21:a4:77:30:e3:b4:91:8a:99:15:b9:87:03:
                    14:02:62:4c:97:e1:58:4f:66:fe:89:e1:44:92:0d:
                    33:1a:60:eb:24:c7:42:eb:f9:72:86:3b:ab:4c:69:
                    7b:0e:3c:24:18:07:04:4b:60:af:c6:29:fe:cd:4d:
                    9b:97:fc:6f:58:08:d1:42:32:06:31:f4:fd:6a:f2:
                    cb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:CE:0A:BA:0D:09:19:1D:20:67:E1:39:47:AC:98:4B:66:C9:8A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ffd2c3e2-4d89-41a3-b450-b53f95a9dcd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e200::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:1c:f6:84:94:aa:33:fa:08:11:db:59:47:40:c3:27:c8:c4:
         3c:9f:4c:4a:ef:88:e3:1e:61:f2:86:91:17:76:a3:92:71:6f:
         7b:f7:16:67:19:0d:f2:df:95:e0:a0:d8:4c:38:b1:e4:8e:80:
         81:bf:02:64:10:18:0c:ff:a1:ac:2d:5e:4c:7b:5a:e0:a7:3d:
         d5:59:3c:0e:b0:21:61:0b:78:4f:68:66:88:bf:9a:46:85:b2:
         f4:77:87:d3:88:5d:a9:e2:f3:38:19:d2:b7:38:29:ae:22:98:
         b4:94:82:b3:8a:1d:ae:d4:f4:e9:2d:91:37:50:61:7e:70:46:
         02:36:f5:76:be:64:ba:9e:1b:6c:16:9a:32:7e:4c:7d:11:68:
         cb:bb:1b:c5:c5:ae:e3:18:fc:58:e1:75:89:8a:97:79:c9:16:
         b1:16:4b:19:a4:d4:8b:d2:1c:4a:9f:d9:d8:88:8b:cd:e5:f0:
         c3:b2:4f:bf:90:75:ee:a8:d7:4a:d0:f9:62:e4:bf:17:4c:9d:
         5e:49:ad:ed:c1:b0:51:df:1f:82:17:d4:29:21:79:3e:4b:5e:
         1c:18:25:d4:37:f4:84:ba:f7:b1:90:2b:1a:50:fd:bd:08:f5:
         fc:20:7b:84:1d:da:d7:df:a0:da:da:a0:9d:00:fc:eb:f4:7c:
         e6:a6:b0:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:50:09 2026 by rpki-client