Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/15a6666d-857e-4a1a-980c-67bac36ff734.roa
File:                     15a6666d-857e-4a1a-980c-67bac36ff734.roa (raw, json)
Hash identifier:          0go0aZnOb1ibcKCptmYvKMbYTn+xL9Y6P8NRCMXDRE8=
Subject key identifier:   9F:E2:4B:CF:3B:7F:43:E2:D1:9A:29:AB:CB:62:8C:0A:C1:EF:FB:92
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       71D8834F69ABA5D7AFE9353C21C89EE7177CF62F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/15a6666d-857e-4a1a-980c-67bac36ff734.roa
Signing time:             Thu 11 Jun 2026 18:02:08 +0000
ROA not before:           Thu 11 Jun 2026 18:02:08 +0000
ROA not after:            Wed 09 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:22::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d8:83:4f:69:ab:a5:d7:af:e9:35:3c:21:c8:9e:e7:17:7c:f6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jun 11 18:02:08 2026 GMT
            Not After : Sep  9 23:59:59 2026 GMT
        Subject: serialNumber=f6a7f6d0073c496e9df39bc6b09cf0129534c1f66902d13ec4387a79932abfe3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5b:25:4c:c7:ec:05:37:1d:7c:0b:c4:ce:07:
                    58:51:ef:04:38:21:fc:c3:a4:17:36:dc:e8:c3:eb:
                    52:8e:f8:a6:e5:f9:67:cb:db:8e:36:42:f1:45:f8:
                    a0:1c:d0:b1:7a:13:23:88:e4:1b:21:d7:cd:4e:3a:
                    1b:31:00:38:97:11:b5:98:d6:57:97:7d:94:26:0b:
                    9d:3f:aa:1b:11:2a:b9:89:cc:5a:6d:49:95:5a:bc:
                    9c:88:31:30:e5:51:ad:0a:bb:ab:3e:e2:c4:e6:73:
                    6a:00:24:29:32:b3:cc:34:da:44:34:97:20:4a:fe:
                    4f:4c:81:05:ad:6d:ce:2a:af:a6:cd:b8:ad:cc:68:
                    91:aa:a7:9e:63:02:60:62:6d:ae:1e:15:27:b4:81:
                    97:b3:2d:11:e0:3a:06:74:b9:ee:4b:b4:32:26:bc:
                    71:9f:12:1e:7a:fc:34:b5:b0:18:a3:aa:33:c9:85:
                    98:59:28:94:6f:1d:97:df:36:ea:6a:87:bc:3a:57:
                    e4:44:cc:c5:1c:b4:f3:cc:b5:e2:38:33:08:a4:1a:
                    45:5b:de:f1:3d:73:23:51:a7:5c:f0:ce:c5:83:a0:
                    1b:80:f3:6b:6b:e1:4b:20:ec:0a:fc:80:e9:59:d0:
                    95:0f:01:a4:28:e4:02:7b:ef:bd:d8:97:0a:a1:72:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E2:4B:CF:3B:7F:43:E2:D1:9A:29:AB:CB:62:8C:0A:C1:EF:FB:92
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/15a6666d-857e-4a1a-980c-67bac36ff734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:22::/47

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:64:2c:75:43:34:07:f3:67:10:61:0b:8e:d4:72:04:82:
         cf:63:6a:6e:74:c6:02:7c:47:30:67:be:fc:bc:72:da:ee:71:
         19:ee:96:2b:e7:90:dc:a3:45:f2:3c:f2:2d:27:5d:87:cb:b2:
         2a:e7:9f:8f:f5:5d:f2:d6:6a:24:35:84:13:3d:93:f9:88:d0:
         93:d1:81:25:21:e7:41:c8:9f:11:ab:7b:c3:67:1b:b0:2f:d7:
         e3:49:88:1b:13:c4:97:b4:b2:82:bc:be:6f:ff:ca:bd:07:7c:
         0f:94:6e:19:3b:77:03:a8:c6:1e:4c:02:62:7d:e0:c1:73:62:
         11:72:a0:67:0c:c8:86:37:eb:7e:9e:b8:b1:12:3f:91:e4:80:
         4b:b3:92:92:f5:b9:60:9a:85:4c:7c:97:d2:6a:e1:b9:64:aa:
         fd:de:03:75:6f:5d:a8:af:95:7d:11:d0:19:c2:f8:56:86:31:
         30:13:50:ee:28:f8:80:1d:16:da:10:34:5d:13:03:21:6c:d6:
         17:90:62:da:2b:5b:a1:4e:f1:71:7a:f5:c8:b1:80:e5:1e:e7:
         d8:6b:fe:f3:02:0b:19:6e:53:c7:ed:7f:3e:c7:e9:01:d4:43:
         b9:7b:64:52:45:21:3c:20:c2:01:43:fa:34:79:98:b1:36:49:
         37:34:6f:80
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUcdiDT2mrpdev6TU8Icie5xd89i8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNjExMTgwMjA4WhcNMjYwOTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNmE3ZjZkMDA3M2M0OTZlOWRmMzliYzZiMDljZjAxMjk1
MzRjMWY2NjkwMmQxM2VjNDM4N2E3OTkzMmFiZmUzMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6WyVMx+wFNx18C8TOB1hR7wQ4IfzDpBc23OjD61KO+Kbl
+WfL2442QvFF+KAc0LF6EyOI5Bsh181OOhsxADiXEbWY1leXfZQmC50/qhsRKrmJ
zFptSZVavJyIMTDlUa0Ku6s+4sTmc2oAJCkys8w02kQ0lyBK/k9MgQWtbc4qr6bN
uK3MaJGqp55jAmBiba4eFSe0gZezLRHgOgZ0ue5LtDImvHGfEh56/DS1sBijqjPJ
hZhZKJRvHZffNupqh7w6V+REzMUctPPMteI4MwikGkVb3vE9cyNRp1zwzsWDoBuA
82tr4Usg7Ar8gOlZ0JUPAaQo5AJ7773Ylwqhcrd5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUn+JLzzt/Q+LRmimry2KMCsHv+5IwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzE1YTY2NjZkLTg1N2UtNGExYS05ODBjLTY3YmFjMzZmZjczNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAPDwACIwDQYJKoZIhvcNAQELBQADggEBAAjCZCx1QzQH82cQYQuO1HIE
gs9jam50xgJ8RzBnvvy8ctrucRnulivnkNyjRfI88i0nXYfLsirnn4/1XfLWaiQ1
hBM9k/mI0JPRgSUh50HInxGre8NnG7Av1+NJiBsTxJe0soK8vm//yr0HfA+Ubhk7
dwOoxh5MAmJ94MFzYhFyoGcMyIY3636euLESP5HkgEuzkpL1uWCahUx8l9Jq4blk
qv3eA3VvXaivlX0R0BnC+FaGMTATUO4o+IAdFtoQNF0TAyFs1heQYtorW6FO8XF6
9cixgOUe59hr/vMCCxluU8ftfz7H6QHUQ7l7ZFJFITwgwgFD+jR5mLE2STc0b4A=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:46:41 2026 by rpki-client