Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b2fd38c-e5ed-4d75-8053-4eb0318268ec.roa
File:                     2b2fd38c-e5ed-4d75-8053-4eb0318268ec.roa (raw, json)
Hash identifier:          n62WH4vMIl8vmeI2YhxK0Hr8joLkcXt0cxiWSrhYdxM=
Subject key identifier:   F0:0F:E6:76:49:B6:0A:61:84:F4:53:3C:2B:AB:43:25:A0:94:A2:52
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2EFDACA0D2CAA0C2FB4219543AA9A25BC93C94CB
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b2fd38c-e5ed-4d75-8053-4eb0318268ec.roa
Signing time:             Mon 27 Jul 2026 03:10:10 +0000
ROA not before:           Mon 27 Jul 2026 03:10:10 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f0f0:700::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fd:ac:a0:d2:ca:a0:c2:fb:42:19:54:3a:a9:a2:5b:c9:3c:94:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 27 03:10:10 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=fe4fadb4639c616493538ed8041dac38c7a782b04fbb7a74a0e736de8cd03105, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:b4:c7:c5:3c:2c:fd:c0:68:f1:71:48:c9:
                    7e:da:1e:69:ba:2a:35:6a:7b:d0:0c:9a:14:08:23:
                    26:d8:f2:80:7d:75:a8:da:15:cc:98:ef:e3:17:af:
                    f1:4d:80:a8:0c:75:be:78:04:93:1f:e8:39:0c:12:
                    83:1e:b1:f2:22:de:ea:53:9a:11:c6:34:de:03:98:
                    06:d5:fb:6d:9f:da:b6:90:21:b9:a8:16:c6:b7:93:
                    c6:00:04:ea:c8:1f:3a:65:05:99:ee:4f:25:eb:a4:
                    77:1b:62:fa:42:98:7a:d4:dd:17:e8:86:11:2c:15:
                    d8:23:cc:3a:26:53:d8:0d:61:fc:ea:05:c4:6f:16:
                    f2:3a:7b:25:79:c3:0c:1f:bb:56:94:9b:df:4d:60:
                    90:d5:7e:0b:04:52:33:34:40:72:39:67:96:e9:47:
                    59:99:ef:7d:29:b9:28:9a:a4:d7:f9:04:85:72:30:
                    97:25:7f:78:27:81:c5:47:1c:64:f7:41:d3:08:1c:
                    21:8e:f2:09:ff:af:14:a7:f4:ca:65:e8:02:95:32:
                    75:2b:46:42:ef:f7:58:a7:58:4f:3b:82:72:ee:24:
                    58:f1:be:27:6c:23:0e:59:ba:30:c7:6d:f5:88:d7:
                    a9:ef:e6:1a:cf:9c:66:fb:d8:7c:28:e0:6a:d1:b8:
                    75:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0F:E6:76:49:B6:0A:61:84:F4:53:3C:2B:AB:43:25:A0:94:A2:52
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b2fd38c-e5ed-4d75-8053-4eb0318268ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:b3:a7:9a:93:94:4a:19:a4:a8:02:5f:d7:1f:a5:5c:51:
         85:db:3e:f9:5e:bf:49:3b:8f:29:c4:27:41:c0:b1:ce:be:2b:
         54:ba:d5:38:d2:3b:5c:b2:0d:d0:ae:7c:5c:75:47:8f:78:1e:
         72:7d:39:72:80:ca:76:34:e9:89:d2:fc:bf:d3:43:17:a3:04:
         01:e6:42:d5:94:82:b9:85:02:e2:d9:1c:19:c5:b5:f0:07:d4:
         70:ae:25:65:e1:a4:05:79:90:c5:4e:af:9f:d3:e6:f3:04:20:
         f9:a0:20:4b:61:8d:a7:af:dc:8b:6e:98:ce:b1:c8:c7:ba:9e:
         19:d8:01:d8:23:dd:d1:4f:41:54:7f:10:0f:e5:85:91:b5:6c:
         e2:1a:ae:e0:8b:93:2d:64:23:48:6f:f2:2f:61:25:50:71:ad:
         23:78:7c:fd:4e:a8:5f:d7:2c:56:33:f8:b3:1e:ca:fe:bb:f6:
         08:76:46:47:e1:d6:3c:cb:02:46:02:b7:23:00:04:bc:5b:54:
         a0:a2:6a:74:27:b3:8f:83:01:df:9d:50:95:99:dd:f3:9f:d7:
         c9:31:2e:6a:57:10:24:12:89:11:73:75:e0:5f:3f:8d:6e:71:
         28:46:73:b0:c1:84:d0:96:b8:8e:2b:34:b7:1f:de:b0:a1:48:
         96:b7:1d:db
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:07:20 2026 by rpki-client