Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f9c5c5b5-4b9a-42d3-ac4f-f88549162922.roa
File:                     f9c5c5b5-4b9a-42d3-ac4f-f88549162922.roa (raw, json)
Hash identifier:          nO6Fy6u3XrGMmGEzlQunlXNIP1Xtgk4fcZJzDX4lnvo=
Subject key identifier:   57:A8:0C:AD:B0:C7:8B:AD:8D:8D:3E:63:97:D5:7D:9B:3F:BD:2C:BD
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1FD2B08469CCA915A839C9E704800DD0545E5D3D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f9c5c5b5-4b9a-42d3-ac4f-f88549162922.roa
Signing time:             Thu 27 Aug 2026 00:00:06 +0000
ROA not before:           Thu 27 Aug 2026 00:00:06 +0000
ROA not after:            Wed 25 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f1:12::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d2:b0:84:69:cc:a9:15:a8:39:c9:e7:04:80:0d:d0:54:5e:5d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug 27 00:00:06 2026 GMT
            Not After : Nov 25 23:59:59 2026 GMT
        Subject: serialNumber=782a89b94073f31ba4bb6e3a10e393d65353157ddc6fba2d8f23018c4011bf4c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:16:3d:fa:08:b3:4b:7f:35:25:c9:42:db:
                    20:08:c6:be:a1:42:62:68:1d:f5:5b:c7:b0:bf:e8:
                    d3:5d:93:de:93:d1:be:7c:6e:7f:cd:ed:61:02:13:
                    38:d8:cd:3c:89:65:f2:f7:7c:e2:85:aa:fd:cf:33:
                    c2:74:d9:60:64:25:6e:98:8a:77:70:60:ff:41:67:
                    c7:8f:a1:c4:3b:b2:14:e3:fe:3c:2d:61:59:0a:96:
                    55:ef:e0:79:23:39:e1:c5:2d:63:35:d7:f1:59:f9:
                    c7:a2:b0:f3:32:60:eb:51:97:1b:d5:a0:82:07:85:
                    4f:00:2c:38:0b:d2:ce:12:bc:41:99:74:a6:2c:7e:
                    5a:3f:64:35:50:8e:90:1c:60:5c:e4:0a:61:04:63:
                    e2:93:e9:d2:b4:c3:ae:c9:ea:75:af:e8:cf:a8:d9:
                    41:2c:22:ae:ba:9b:20:7a:b1:c1:c7:7a:df:c1:48:
                    14:70:c6:5a:65:cf:00:f7:f7:d7:12:00:18:16:97:
                    ae:eb:33:06:38:0b:2a:cb:29:53:1c:eb:52:20:87:
                    6d:40:af:c6:55:09:43:10:56:ce:25:0d:3a:13:ec:
                    a6:5a:40:dc:a6:eb:cf:e8:3d:27:03:12:7a:5f:3a:
                    e6:07:34:c3:d4:41:8a:9f:84:c1:aa:62:34:79:26:
                    33:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A8:0C:AD:B0:C7:8B:AD:8D:8D:3E:63:97:D5:7D:9B:3F:BD:2C:BD
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f9c5c5b5-4b9a-42d3-ac4f-f88549162922.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:12::/47

    Signature Algorithm: sha256WithRSAEncryption
         13:6e:2e:60:b4:34:ab:d6:29:7e:07:fd:42:bf:af:68:5b:4d:
         44:2c:86:99:14:d2:a2:6a:c8:ed:2a:9e:c1:ac:64:c1:65:6c:
         e4:f5:2c:74:c8:2f:1c:e1:6c:2b:44:f2:38:1b:92:e9:b0:fc:
         4e:66:52:8a:a6:8a:d4:52:ec:c8:e9:c0:c2:d5:5f:c9:7a:04:
         18:ea:15:f6:1b:b2:e4:24:4e:47:9d:b1:2f:e3:11:4c:60:ad:
         60:97:15:a2:45:63:b7:1d:16:db:64:82:87:42:ca:9f:c2:b9:
         a6:13:a3:31:cb:96:88:cc:80:ca:d5:16:de:fa:7b:f7:67:00:
         2f:2b:9b:9f:2a:5a:10:b4:cb:be:fe:fc:46:99:9f:60:0b:53:
         59:91:2c:72:6b:8b:8f:63:45:50:81:67:11:cb:04:3e:2b:ae:
         06:43:0e:64:0a:81:c5:35:44:eb:af:af:b2:63:02:3c:ae:6c:
         5a:43:cf:40:be:90:5b:32:25:83:cf:c5:d5:39:4a:72:40:5c:
         c2:f3:d4:eb:0a:58:7c:cb:34:cc:d0:23:37:69:2e:01:a6:6b:
         d2:f6:ce:c4:cb:10:92:98:da:18:ad:70:f0:b1:9c:76:80:1d:
         19:84:f9:30:3e:2d:c6:c5:21:67:1a:c9:07:30:3e:89:1f:a4:
         4d:ee:8f:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:42:21 2026 by rpki-client