Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1a47a69-1d53-4fa8-bab2-1b1f60e74655.roa
File:                     c1a47a69-1d53-4fa8-bab2-1b1f60e74655.roa (raw, json)
Hash identifier:          PSs/KWM707BV9YozCNpCONC5qr7w5mEOQME5w6it5Vw=
Subject key identifier:   A4:72:06:AD:2C:C0:70:41:3C:CE:1A:75:19:63:1C:79:7E:BA:B1:26
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6BBB30EF92ACA7CDEC1937FD33D20DA733C97B92
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1a47a69-1d53-4fa8-bab2-1b1f60e74655.roa
Signing time:             Wed 20 May 2026 00:50:06 +0000
ROA not before:           Wed 20 May 2026 00:50:06 +0000
ROA not after:            Tue 18 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:f102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bb:30:ef:92:ac:a7:cd:ec:19:37:fd:33:d2:0d:a7:33:c9:7b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 20 00:50:06 2026 GMT
            Not After : Aug 18 23:59:59 2026 GMT
        Subject: serialNumber=bc02b4acf53a484d239de22fdb5961e4b9d48a79a33fc4e9ad4476d79ac09b21, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:b0:2b:b2:62:2a:20:4b:3a:eb:6c:5e:14:
                    80:55:c9:00:3d:a5:0e:d8:ae:6c:c8:78:2a:ae:23:
                    27:54:f8:86:29:73:cc:64:e3:9e:2a:85:1c:65:06:
                    bc:f5:4f:b8:86:b5:0e:74:6a:5f:eb:f6:00:11:c9:
                    de:10:97:08:3a:5b:63:7d:a2:96:e5:23:08:3c:61:
                    63:bf:93:ed:45:27:a3:50:02:8a:62:6d:bc:97:3c:
                    95:d9:81:ba:e8:f2:64:01:41:4c:26:83:af:a1:08:
                    b8:15:10:24:97:f0:0e:1e:36:26:91:06:2a:3c:2f:
                    cf:be:1e:f0:23:6a:73:4c:1b:13:c5:b4:ee:ba:bd:
                    79:e8:74:53:8c:ea:9b:9b:fa:21:af:76:31:b4:06:
                    53:43:5c:09:51:f9:42:b9:80:4d:3d:ef:1f:e5:2e:
                    2d:47:b2:03:4a:74:1f:eb:66:94:ae:99:26:82:b6:
                    6e:86:5d:0b:7c:79:2f:71:75:87:6b:89:a8:ad:63:
                    92:de:03:88:94:82:48:53:6e:0a:60:98:7e:c5:81:
                    31:94:a9:33:cd:18:8e:d9:90:2e:8b:fa:9c:62:d8:
                    70:11:1a:c0:50:ab:0d:e8:56:21:a5:c1:4b:b1:6f:
                    29:df:1f:eb:f8:1b:ba:0a:93:39:6f:4f:b7:be:0f:
                    bf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:72:06:AD:2C:C0:70:41:3C:CE:1A:75:19:63:1C:79:7E:BA:B1:26
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1a47a69-1d53-4fa8-bab2-1b1f60e74655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f102::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:ef:37:60:1a:bf:f5:09:68:fd:5c:62:b2:75:68:08:be:be:
         83:5a:6f:88:c0:99:db:c4:e8:1a:e2:d5:c8:7f:fc:a0:0d:f9:
         6e:cc:dc:c6:f2:b7:9e:b3:63:5b:c7:22:d8:c0:02:af:b7:7b:
         3c:a8:8e:b7:1a:e0:49:f0:a4:c6:1d:e2:07:20:3f:ae:97:d7:
         ee:9f:f4:6f:ae:4d:a4:a2:da:bf:a4:7e:e4:10:c2:dd:6e:08:
         a9:62:30:38:eb:d1:8d:1e:98:78:9d:56:52:f3:f6:b1:38:67:
         c2:d1:80:49:50:f2:55:aa:f0:10:12:b4:de:69:51:61:03:6c:
         33:9c:97:03:00:93:d5:d2:c8:38:41:06:19:87:d7:d4:e9:3c:
         76:2e:87:6c:af:84:9c:73:16:2f:15:06:4d:70:96:ca:93:2d:
         8c:50:bb:ae:89:5f:06:64:67:08:a2:12:7d:de:59:21:01:a7:
         2f:a1:38:ab:85:0a:46:45:18:4a:91:90:fb:19:5a:cb:08:a6:
         b6:2a:69:07:58:86:fd:4b:33:12:d0:e5:44:df:52:4f:7c:b5:
         03:7d:91:3f:53:a3:30:3d:9f:c4:3c:d2:dc:3d:a0:36:e0:aa:
         64:05:29:3c:da:39:9a:7e:22:81:15:af:c5:08:e2:db:f9:f3:
         18:fa:65:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:15:05 2026 by rpki-client