Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a5fee016-0f0f-4ed5-8231-85d2240819d9.roa
File:                     a5fee016-0f0f-4ed5-8231-85d2240819d9.roa (raw, json)
Hash identifier:          ujPunx9QdlyBbPniaj8YyIBFR30e8ljg4efJR/KeC6Y=
Subject key identifier:   AE:E0:02:3F:D1:96:49:58:2F:BE:4E:80:BC:04:BB:A6:34:FE:C1:EA
Certificate issuer:       /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial:       042C7632F9B5A97454DB6AD165953F3B0D2C06EF
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a5fee016-0f0f-4ed5-8231-85d2240819d9.roa
Signing time:             Thu 14 May 2026 19:47:10 +0000
ROA not before:           Thu 14 May 2026 19:47:10 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2605:8380:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:2c:76:32:f9:b5:a9:74:54:db:6a:d1:65:95:3f:3b:0d:2c:06:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
        Validity
            Not Before: May 14 19:47:10 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=5df7d1d29a4de6ada9859c4f157ef955bb54f58961b90708ebc23fbbcb14d527, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:36:d6:85:20:d3:30:1e:be:8e:d9:c2:99:
                    7b:09:03:2b:c4:04:6b:ae:3c:04:40:ba:e9:f2:ae:
                    f9:35:d9:54:d1:1d:99:2a:aa:51:b1:91:d5:63:0c:
                    ee:0d:bf:d5:24:d7:44:4d:2f:92:5d:be:db:94:18:
                    e5:e3:09:58:3b:33:f9:aa:46:c8:54:b8:8c:77:b1:
                    9e:a3:ce:ad:b1:81:9e:74:f2:43:b9:66:0f:e2:7b:
                    43:0f:f3:ec:30:58:61:8c:4d:e5:33:8b:d9:05:71:
                    d1:9e:9a:c9:94:64:36:8d:6a:f5:32:41:0d:93:a4:
                    d5:35:fb:c7:24:1c:fd:b0:cd:a9:68:f8:ea:3d:f1:
                    92:9c:74:11:82:7e:92:94:63:cf:26:28:96:f4:e1:
                    98:c6:e9:3d:5f:cc:e5:9e:50:29:11:27:8e:21:77:
                    be:d4:eb:b6:e3:13:d7:02:68:83:57:74:fb:53:5d:
                    e8:2b:56:3a:97:99:16:3d:2a:42:f5:4e:5e:9c:e5:
                    e1:a6:2b:c8:e1:5e:3d:cb:bc:5c:0f:17:39:80:0b:
                    d2:18:01:12:e0:cc:1a:42:0f:43:07:3e:cb:ae:28:
                    d8:68:b4:dc:a3:a0:9f:98:0a:51:e8:0f:ed:27:f8:
                    55:4f:62:49:aa:a4:74:e6:7d:a8:cf:30:3c:0a:87:
                    0d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E0:02:3F:D1:96:49:58:2F:BE:4E:80:BC:04:BB:A6:34:FE:C1:EA
            X509v3 Authority Key Identifier:
                keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/a5fee016-0f0f-4ed5-8231-85d2240819d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8380:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:ec:81:97:b7:bd:41:ad:32:d5:15:cf:85:61:4f:94:e0:99:
         95:8a:b0:eb:fc:f9:be:a8:ce:c0:d2:18:6b:52:ec:c1:b8:0b:
         e8:d1:16:83:c7:4a:c8:f6:ea:90:1b:21:b3:dc:d7:db:a5:2c:
         c3:a4:29:05:c6:46:09:e1:17:ed:70:2b:38:67:1d:14:10:73:
         29:ad:9f:06:7b:e1:43:4d:8f:71:35:98:9c:83:cb:ff:10:42:
         cc:1a:28:c3:bd:68:93:93:7e:34:e2:29:3d:7b:92:66:6a:f0:
         b0:b8:42:cf:40:93:0f:fc:34:3d:1a:46:c5:b1:fd:0e:b6:5e:
         4a:2c:7e:01:63:68:c1:67:33:ad:73:1e:fc:d4:f1:ee:80:6f:
         a4:b8:ce:cd:e5:40:59:2d:0b:ac:08:ad:35:25:c8:90:0d:31:
         37:1f:17:0f:83:92:be:76:19:e3:2a:76:90:1a:52:91:db:ae:
         c8:bf:c0:7a:ca:b6:89:a3:d3:75:8b:f3:08:95:5f:c9:c1:ad:
         78:a5:93:63:e2:86:0f:c8:6d:af:e5:71:5c:3c:df:91:c2:43:
         bd:da:7e:27:f0:f5:57:0b:72:b8:ae:6e:84:e7:5b:dc:a0:9a:
         6b:ef:f8:fe:0e:0e:fb:59:ef:7d:07:c6:6f:75:60:51:3c:b1:
         1d:19:3f:2d
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUBCx2Mvm1qXRU22rRZZU/Ow0sBu8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzE2N2E4YjNhMDFmMDY3MTdkMmFmNjJlMzgwOTA3MjA4
NGMzYWY4ZjQ4OTQ4ZTQwZTIwHhcNMjYwNTE0MTk0NzEwWhcNMjYwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZGY3ZDFkMjlhNGRlNmFkYTk4NTljNGYxNTdlZjk1NWJi
NTRmNTg5NjFiOTA3MDhlYmMyM2ZiYmNiMTRkNTI3MS0wKwYDVQQDEyQ4Zjk1ZTRk
MS1mMTRmLTRkNjEtYWUwMC02N2UwNDdkMmYxMDIwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCv+TbWhSDTMB6+jtnCmXsJAyvEBGuuPARAuunyrvk12VTR
HZkqqlGxkdVjDO4Nv9Uk10RNL5JdvtuUGOXjCVg7M/mqRshUuIx3sZ6jzq2xgZ50
8kO5Zg/ie0MP8+wwWGGMTeUzi9kFcdGemsmUZDaNavUyQQ2TpNU1+8ckHP2wzalo
+Oo98ZKcdBGCfpKUY88mKJb04ZjG6T1fzOWeUCkRJ44hd77U67bjE9cCaINXdPtT
XegrVjqXmRY9KkL1Tl6c5eGmK8jhXj3LvFwPFzmAC9IYARLgzBpCD0MHPsuuKNho
tNyjoJ+YClHoD+0n+FVPYkmqpHTmfajPMDwKhw19AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUruACP9GWSVgvvk6AvAS7pjT+weowHwYDVR0jBBgwFoAUHl8tYvha0oTU
0Ykla4hp6OkRKDgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYTNkYjRmZi05
Y2Q4LTRkMDItYTAyNy02ZmE5MDQ5NGEzYTEvYzE2N2E4YjNhMDFmMDY3MTdkMmFm
NjJlMzgwOTA3MjA4NGMzYWY4ZjQ4OTQ4ZTQwZTIuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMmYwNTlhMjEtZDQxYi00ODQ2LWI3YWUtN2Vh
MzhjMzJmZDRjL2E1ZmVlMDE2LTBmMGYtNGVkNS04MjMxLTg1ZDIyNDA4MTlkOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzJmMDU5YTIxLWQ0MWItNDg0Ni1iN2Fl
LTdlYTM4YzMyZmQ0Yy9Id1p4ZlNyMkxqZ0pCeUNFdzYtUFNKU09RT0kuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmBYOACjANBgkqhkiG9w0BAQsFAAOCAQEAF+yBl7e9Qa0y1RXPhWFPlOCZ
lYqw6/z5vqjOwNIYa1LswbgL6NEWg8dKyPbqkBshs9zX26Usw6QpBcZGCeEX7XAr
OGcdFBBzKa2fBnvhQ02PcTWYnIPL/xBCzBoow71ok5N+NOIpPXuSZmrwsLhCz0CT
D/w0PRpGxbH9DrZeSix+AWNowWczrXMe/NTx7oBvpLjOzeVAWS0LrAitNSXIkA0x
Nx8XD4OSvnYZ4yp2kBpSkduuyL/Aesq2iaPTdYvzCJVfycGteKWTY+KGD8htr+Vx
XDzfkcJDvdp+J/D1VwtyuK5uhOdb3KCaa+/4/g4O+1nvfQfGb3VgUTyxHRk/LQ==
-----END CERTIFICATE-----
Generated at Fri May 22 16:04:26 2026 by rpki-client