Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6632e911-ee11-4bc9-a573-00ef83fd31d7.roa
File:                     6632e911-ee11-4bc9-a573-00ef83fd31d7.roa (raw, json)
Hash identifier:          baWYHG5Q86GyMs1s1LWmYkLFR/YReUBUVCKEkzy3bIA=
Subject key identifier:   9A:F8:0A:95:51:DF:66:0D:83:F5:4E:01:E7:18:9D:38:9D:44:C9:82
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0BB1A7BFEF8D09B8F05DB4A8F619FB57FFF3110C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6632e911-ee11-4bc9-a573-00ef83fd31d7.roa
Signing time:             Sat 28 Feb 2026 05:00:27 +0000
ROA not before:           Sat 28 Feb 2026 05:00:27 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b1:a7:bf:ef:8d:09:b8:f0:5d:b4:a8:f6:19:fb:57:ff:f3:11:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 28 05:00:27 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=8aad1aba3f91840d97650cd214fe31634c6f3cd3177e301c95b722c2266ab188, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:8b:a8:94:92:48:58:51:07:c2:86:9b:b5:
                    c8:ae:a4:d3:cc:c4:3c:7e:f1:51:3b:fd:17:c4:2f:
                    c3:af:c8:13:23:7d:42:40:59:29:4a:78:1b:1e:d7:
                    b2:f6:93:a1:3a:7a:a8:d4:08:83:2b:c0:f6:64:90:
                    23:d6:a0:27:d0:f4:7b:b5:76:a5:f1:e3:05:6c:05:
                    60:40:cc:d0:78:dd:bc:c2:ba:11:3b:75:d9:ba:5f:
                    3b:11:6f:8d:3e:55:b1:c6:e3:c4:cb:a4:06:bf:ca:
                    37:9b:e1:2b:f7:b0:9c:d6:a6:99:c2:81:32:44:aa:
                    f0:41:ca:7d:e2:df:08:20:60:3b:6c:56:e7:b1:2d:
                    10:8d:fc:e5:24:95:6b:26:18:6a:ad:be:e5:28:82:
                    70:03:ca:89:ff:bc:04:b7:01:47:27:16:c9:ce:05:
                    72:0c:60:d2:d0:b1:c7:a6:46:b4:ec:b4:fb:60:69:
                    2a:a5:75:98:85:de:78:01:26:cf:fb:f8:90:a5:7b:
                    7b:41:61:00:ef:b7:43:20:92:14:7f:0d:3d:09:15:
                    7b:70:c9:ec:15:a3:32:a5:e2:58:da:42:17:b5:9d:
                    8a:9c:87:0f:77:99:34:76:f3:10:48:78:8d:07:06:
                    ec:35:ff:ef:61:75:81:ca:ea:b6:f1:26:6b:51:cf:
                    12:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F8:0A:95:51:DF:66:0D:83:F5:4E:01:E7:18:9D:38:9D:44:C9:82
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6632e911-ee11-4bc9-a573-00ef83fd31d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6000::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:8c:aa:a3:5e:4b:e1:4d:81:b8:f8:19:90:dc:b1:00:16:e9:
         ef:26:8a:5f:5e:a6:31:07:38:12:cc:5a:13:45:1b:de:e9:07:
         a5:93:39:2a:cb:79:96:71:1c:7f:2d:8e:b4:39:42:3b:e0:aa:
         31:04:e1:e0:63:e6:3b:d8:84:f8:d1:64:d6:e9:69:e4:65:94:
         53:7d:60:8b:78:66:0b:4f:07:fd:e0:6a:ea:50:35:a6:25:21:
         e6:85:00:3d:c2:84:1d:81:4f:86:e5:2f:70:3f:ef:db:8d:30:
         07:cb:ec:c6:ef:4c:40:3f:c5:58:f1:72:38:02:b9:f2:af:00:
         7c:f1:d8:4d:a2:4b:47:01:80:9e:52:2e:32:03:62:42:44:0c:
         9b:ed:fb:07:b4:86:58:ff:73:4b:8c:d3:d5:b5:b1:40:0b:ad:
         50:a9:5a:7d:e8:8a:ce:cd:05:92:12:52:50:04:8b:f0:9e:52:
         df:d0:09:f3:3c:d2:74:6c:ef:d1:3b:86:64:1b:79:c8:b4:f2:
         ed:29:73:eb:ba:9a:bd:d4:43:9e:48:23:f8:c6:fe:f6:3e:cf:
         41:36:bd:fb:9d:e4:de:0b:00:d6:30:71:c4:3f:22:d1:8e:77:
         ad:b0:d3:95:2f:ea:b8:35:b2:7a:74:9c:04:cb:3b:9a:43:b3:
         4f:7c:37:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:53 2026 by rpki-client