Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6a919a63-0d22-4f29-acd1-5dd71f681c7a.roa
File:                     6a919a63-0d22-4f29-acd1-5dd71f681c7a.roa (raw, json)
Hash identifier:          8u0sqXjEAEzN1V95j8Nd5tqByxUDSkTcZLfQ1klp7rc=
Subject key identifier:   F0:F3:8C:74:4C:0B:85:F3:76:22:1A:A1:B1:04:54:13:7D:36:B2:BD
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       221F5D3C74F40104123B0D8D9EBA40938899A7CC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6a919a63-0d22-4f29-acd1-5dd71f681c7a.roa
Signing time:             Wed 20 May 2026 00:50:06 +0000
ROA not before:           Wed 20 May 2026 00:50:06 +0000
ROA not after:            Tue 18 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:f108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1f:5d:3c:74:f4:01:04:12:3b:0d:8d:9e:ba:40:93:88:99:a7:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 20 00:50:06 2026 GMT
            Not After : Aug 18 23:59:59 2026 GMT
        Subject: serialNumber=1f518fef89708e6c5175d7e5077a305ca3ea2c3f8aec61fd961fd711342f2fee, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:93:ba:94:0d:d7:9f:c7:2d:ca:26:b8:d4:7c:
                    32:6c:ac:47:41:71:c2:ec:c9:d9:b5:36:bf:4e:5d:
                    91:30:b0:bc:7c:7b:41:af:72:07:cd:e0:5c:cd:6e:
                    53:13:69:08:bf:ad:d3:5b:55:50:b1:66:f6:50:82:
                    d1:fc:d3:a2:0d:a6:8f:07:8d:34:aa:62:d6:63:cc:
                    06:2b:b2:1d:e2:b5:2d:b8:ac:3b:4f:d9:a7:b0:77:
                    c8:4b:e9:05:8d:a4:1e:4d:e0:cd:04:cc:e6:e8:cf:
                    1d:5d:1f:1a:04:5d:7e:a2:25:d8:3a:74:4c:2a:8a:
                    e7:95:bd:78:79:31:16:eb:81:55:1a:0a:06:44:a4:
                    f4:94:0a:96:ca:1b:66:8f:fe:14:43:f4:e6:3c:64:
                    9f:58:52:49:87:11:9c:a3:4a:98:f6:fc:55:a4:0f:
                    1c:77:57:83:a9:de:49:4b:bb:97:5f:9a:86:f5:c9:
                    bf:f4:20:09:9d:b5:b4:ca:13:2f:cd:a6:e3:24:d2:
                    f5:b3:e9:f3:60:d6:60:43:9a:cd:5c:fb:87:f9:bf:
                    82:ff:b3:aa:68:2c:0e:9f:4b:7f:df:d2:30:b7:5c:
                    af:54:18:b4:5f:00:c5:32:cd:4f:5d:ea:33:d9:4f:
                    8d:b0:41:53:f3:dc:fc:f6:4b:fe:87:79:5d:d0:c4:
                    23:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F3:8C:74:4C:0B:85:F3:76:22:1A:A1:B1:04:54:13:7D:36:B2:BD
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6a919a63-0d22-4f29-acd1-5dd71f681c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f108::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:0c:cd:51:de:95:22:45:5f:30:07:51:c2:66:dd:d5:73:6c:
         8c:41:19:38:49:73:ae:7a:f4:f3:05:b3:22:a6:4c:ab:25:00:
         57:3e:5d:62:2f:db:f3:d4:67:5b:84:e6:68:51:e6:bb:d2:b6:
         2d:c2:4f:c0:8e:65:0f:96:cf:c4:47:03:ab:15:1d:87:10:b4:
         16:9e:60:56:9c:8b:c0:2a:f3:75:69:43:63:d8:3b:51:b4:1d:
         ef:69:04:20:16:0a:c2:01:2d:f7:a4:8a:71:a7:5a:09:60:8b:
         78:e8:18:7e:d3:be:98:7d:d7:b1:ab:c4:28:fb:56:bf:d8:2b:
         8a:4c:56:bc:99:4e:a6:39:59:b4:cf:f8:e2:12:67:08:59:71:
         3a:a6:4d:5d:02:d9:db:8c:98:d9:e7:54:a8:2c:f4:2e:c0:7c:
         81:52:bb:f8:7e:ad:b2:03:3a:5a:79:75:94:ce:37:4f:fe:f5:
         8e:1b:47:f1:61:ba:84:b5:07:b4:0b:ec:d7:99:33:87:e1:6e:
         10:18:f8:f6:18:9b:fc:0d:99:2a:5e:c6:f3:97:dc:06:a6:60:
         31:7f:82:41:b7:98:0c:25:28:6b:35:49:b9:e4:83:ea:c5:93:
         67:a6:da:60:76:e8:80:5a:6a:16:61:97:be:a1:c9:81:4b:c7:
         48:18:5c:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:07:31 2026 by rpki-client