Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa
File:                     eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa (raw, json)
Hash identifier:          0ZMye/TmXIMbs3AOBrS3awAYj6dRZPv98qF1PS3QwbM=
Subject key identifier:   51:C2:27:F6:D6:C7:11:54:BF:B5:D9:E6:8C:C1:4A:61:EB:DF:AF:1D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       408484531B4FA11B807500C3E4F4C2764D1AC26D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa
Signing time:             Mon 08 Jun 2026 00:00:09 +0000
ROA not before:           Mon 08 Jun 2026 00:00:09 +0000
ROA not after:            Sun 06 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f1:12::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:84:84:53:1b:4f:a1:1b:80:75:00:c3:e4:f4:c2:76:4d:1a:c2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jun  8 00:00:09 2026 GMT
            Not After : Sep  6 23:59:59 2026 GMT
        Subject: serialNumber=af40fa022d139904d53dd62bc979434f94487a599805e4643debcf3cd93712ca, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3e:95:b7:12:db:d6:a6:e5:f6:91:d0:b2:a8:
                    85:c0:52:d3:a6:39:65:75:1d:a0:5c:79:ce:bd:3f:
                    03:e4:dd:37:f3:6c:d6:e0:f1:c2:3a:de:72:2c:6e:
                    5f:aa:b4:aa:f7:6a:84:c0:ff:db:1b:23:f0:2a:db:
                    22:13:fa:40:be:3d:ad:35:ac:ab:65:3b:aa:3e:5a:
                    72:5b:33:d2:9f:78:3b:d5:fc:19:3a:3b:14:1e:a2:
                    f9:3b:60:ab:87:58:12:1b:d3:13:13:20:5f:bb:d0:
                    f6:e8:5c:1e:c8:36:40:59:b5:f8:c4:34:40:33:c4:
                    59:b2:42:83:31:72:d4:60:a5:ee:41:32:18:50:49:
                    14:d9:1b:18:72:46:80:e1:de:25:dd:2e:89:16:bd:
                    72:03:67:6f:a4:a5:9f:68:a2:2f:1a:2c:f2:17:d8:
                    0c:67:e3:0a:1a:9c:4f:1f:58:e9:f7:a0:5c:b8:f9:
                    b2:1e:d4:23:82:f1:57:f0:ee:00:7b:65:a9:b0:80:
                    75:96:0a:45:4d:c2:44:4f:ed:47:4c:62:b2:f1:01:
                    c1:27:0a:f6:f8:94:78:b8:81:47:69:a0:ed:6f:5a:
                    48:51:bd:2c:b6:7e:52:ef:74:22:65:b2:29:f8:36:
                    11:a5:e0:9e:23:95:21:59:c3:9a:39:f7:47:03:e4:
                    cc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C2:27:F6:D6:C7:11:54:BF:B5:D9:E6:8C:C1:4A:61:EB:DF:AF:1D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:12::/47

    Signature Algorithm: sha256WithRSAEncryption
         11:da:a9:d9:0b:d8:59:05:0d:34:e6:67:4d:d1:16:eb:cb:41:
         00:db:5f:f0:df:8c:b6:d0:6d:2c:6a:4e:c2:b2:73:21:aa:13:
         74:2d:1a:fa:35:33:ce:9a:6b:9d:fa:60:a3:c2:45:15:06:42:
         a2:7f:6d:a2:54:6e:0e:3c:c2:1e:a2:2c:6d:db:5b:ff:41:f1:
         76:36:e9:34:cf:76:fe:ca:a8:09:da:eb:fa:c0:f5:2b:ea:eb:
         a9:8c:15:3b:7c:ea:e4:d8:40:27:ce:29:1c:5b:04:65:b6:6e:
         cd:4f:b0:46:56:f3:61:d8:37:11:a2:cd:e7:70:aa:82:b3:22:
         ee:04:82:61:2d:26:24:f2:d9:82:c5:a3:99:3b:94:34:49:e3:
         9b:99:b7:7b:7b:56:62:3e:79:57:a4:99:bb:9e:7f:e3:1b:9e:
         ec:de:06:2b:f4:33:a6:3f:03:ac:2a:1d:9c:64:49:15:90:6d:
         04:ff:e7:1a:22:b2:c2:17:d9:f5:aa:e0:11:b1:6c:2a:bb:d3:
         96:b8:b0:ca:95:32:94:e7:1d:c8:2e:e4:f8:9b:46:ab:5f:82:
         d9:fb:c5:2b:2a:90:e0:bf:26:49:47:f3:5e:1a:bd:b5:aa:0c:
         60:e8:43:47:ce:08:9b:5a:c3:29:4c:2d:10:15:01:01:85:1b:
         66:d4:7d:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:53:54 2026 by rpki-client