Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/81ea6e17-e080-4e12-ab16-89fe13ce5ae4.roa
File:                     81ea6e17-e080-4e12-ab16-89fe13ce5ae4.roa (raw, json)
Hash identifier:          Y88qFiPz0fpibHbrF3PoUt1RRBrFXMoaXnGE3q3w+kE=
Subject key identifier:   0C:2F:17:4C:E3:E6:6C:24:4B:A3:CB:B0:B2:87:BE:18:F3:E1:39:6A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       715188246B66957E66772AC5DFCEADBE994C58A1
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/81ea6e17-e080-4e12-ab16-89fe13ce5ae4.roa
Signing time:             Sun 01 Mar 2026 00:50:21 +0000
ROA not before:           Sun 01 Mar 2026 00:50:21 +0000
ROA not after:            Sat 30 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:f10f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:51:88:24:6b:66:95:7e:66:77:2a:c5:df:ce:ad:be:99:4c:58:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Mar  1 00:50:21 2026 GMT
            Not After : May 30 23:59:59 2026 GMT
        Subject: serialNumber=3c803ae007056cdcdef6684809caf5135d6b0f798ac3126b1ce51f6236dfdc62, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7f:63:69:75:1c:22:bc:1d:85:3b:fc:87:7d:
                    f8:6d:8d:de:1b:fa:b4:22:32:90:13:6c:c0:58:c1:
                    76:4e:b3:93:ce:4d:58:1b:81:61:3b:ea:95:ee:27:
                    66:1b:36:6d:ae:06:0d:f4:c8:bb:65:e6:cc:5f:f3:
                    bd:9e:0b:14:b6:66:3e:f3:04:23:93:43:57:47:3f:
                    05:64:78:64:32:02:22:49:46:12:40:63:3f:8a:69:
                    a0:ed:5d:88:75:b7:fe:18:b8:51:07:53:3e:69:c6:
                    b8:71:8b:75:49:b6:35:3b:67:9e:6f:32:b8:06:01:
                    0d:8e:fb:20:34:78:fe:2c:a2:9b:42:e4:f5:6c:7b:
                    c9:3b:83:a2:e0:2d:ae:76:4a:93:34:82:85:63:0d:
                    b1:00:29:ac:97:40:6e:06:7a:15:e1:cd:60:d3:c0:
                    9e:11:f5:20:4e:73:b7:25:f5:72:3c:28:83:6f:e6:
                    9b:4c:84:25:5c:1a:c4:cf:a2:b3:b1:62:0f:78:51:
                    fd:ef:8d:4c:9e:5d:f8:c9:a6:99:80:2d:a4:ea:20:
                    27:44:56:34:ab:db:7f:52:f5:80:1c:d4:25:25:db:
                    ed:b8:2a:b5:a1:2f:a3:fb:5e:f1:7f:39:53:d6:79:
                    86:c9:2e:5f:6b:bc:55:7f:0a:98:7b:90:f8:76:e2:
                    d0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2F:17:4C:E3:E6:6C:24:4B:A3:CB:B0:B2:87:BE:18:F3:E1:39:6A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/81ea6e17-e080-4e12-ab16-89fe13ce5ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f10f::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:27:4f:bc:ec:a5:3b:36:f8:7a:f5:bb:e3:68:84:bb:4a:ed:
         73:f6:eb:67:33:08:d5:5c:22:6b:51:3a:6c:5f:d0:bd:94:b2:
         2f:93:e5:b3:24:1a:4b:90:37:b9:ba:11:c9:37:5d:ad:5f:18:
         1a:e2:f2:f0:2f:8d:5a:4a:cf:5a:ca:8a:16:06:04:87:71:a2:
         8d:e4:c4:af:88:3c:67:e7:3a:ea:92:7f:b8:51:c7:ac:e6:c3:
         cf:bb:b5:2f:b7:f6:cf:41:99:a8:6d:26:17:36:25:d4:78:03:
         79:70:ab:69:e9:9a:e0:00:c5:6f:1d:4a:5f:15:07:ad:ff:ff:
         7d:ff:9c:44:24:1c:b3:4b:6b:cc:00:0c:d8:5a:01:ea:d5:62:
         ec:e1:82:db:a5:60:e6:73:7b:16:02:aa:d8:26:54:68:d3:d4:
         19:3c:fc:e8:95:bc:02:37:db:21:94:13:7d:cc:dd:3c:01:47:
         bb:ae:0b:15:57:9d:54:6c:60:10:72:d1:1d:e3:2f:5e:72:2d:
         3f:ea:53:60:9a:16:da:67:17:98:03:39:ef:99:d1:90:ab:ef:
         b4:9d:0f:7d:7a:84:ea:45:3e:85:d5:7c:c3:82:aa:66:ef:3f:
         02:41:51:73:c9:e5:c1:aa:7d:dd:e1:99:8e:ed:bf:0b:15:fa:
         d2:70:7e:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:02:51 2026 by rpki-client