Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1b2c5d45-6ba0-4267-9d5a-01ae26e27a77.roa
File:                     1b2c5d45-6ba0-4267-9d5a-01ae26e27a77.roa (raw, json)
Hash identifier:          1okReTlXCTEDOGE1QNSedzl0PFpiHiER0pGPsqnFZjI=
Subject key identifier:   61:75:C2:83:AE:6C:EE:20:FA:4F:38:A1:73:52:1E:6A:4C:A3:8F:0C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       05ABA40965596A70E1AE8036F936FCE2E17921A4
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1b2c5d45-6ba0-4267-9d5a-01ae26e27a77.roa
Signing time:             Wed 01 Jul 2026 07:17:55 +0000
ROA not before:           Wed 01 Jul 2026 07:17:55 +0000
ROA not after:            Tue 29 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ab:a4:09:65:59:6a:70:e1:ae:80:36:f9:36:fc:e2:e1:79:21:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul  1 07:17:55 2026 GMT
            Not After : Sep 29 23:59:59 2026 GMT
        Subject: serialNumber=b12a9f0d7a89109af4a113f3c112e63cd6e2e3ca0540c1633abd8729f948d78e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:00:02:bf:7c:19:9c:30:68:2a:ff:b1:f9:
                    ce:0c:82:75:aa:2e:5d:32:e5:59:ec:7a:e3:4e:47:
                    38:83:4e:b8:d3:22:46:2e:47:cb:d9:6b:0a:d7:f9:
                    b9:03:37:9f:03:ed:be:8b:99:43:2d:8a:65:a1:cf:
                    3e:e6:44:cd:cc:22:ca:04:ad:cb:50:54:bd:5a:95:
                    27:45:c0:60:86:5f:6b:fb:89:59:af:f4:86:99:2c:
                    04:67:dc:5e:7c:02:ac:3f:df:10:72:48:5f:53:c9:
                    09:bf:e0:3e:47:90:b0:41:86:53:08:7e:70:c7:04:
                    dd:bb:e2:85:8a:5b:f0:ab:81:b2:22:4f:5f:86:37:
                    b3:fa:1f:64:42:31:25:ca:43:9c:1e:fb:35:01:de:
                    8c:a5:93:ad:1d:51:af:ee:40:62:4e:a9:2c:dc:ff:
                    ce:00:37:77:fd:8e:a3:22:7a:83:6d:27:6b:f6:62:
                    ce:17:29:55:1a:82:03:59:f4:f6:64:ab:22:46:0a:
                    5a:f9:69:29:9c:f4:7b:2a:40:a9:a0:2c:ff:2a:2e:
                    78:62:f5:7d:b9:e0:27:c5:ab:c4:c9:93:04:d7:69:
                    0d:aa:6a:cc:c9:e2:7b:f7:14:19:aa:21:d1:5b:49:
                    c4:d5:cf:14:9d:bf:ae:67:88:26:c0:b3:de:2b:29:
                    58:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:75:C2:83:AE:6C:EE:20:FA:4F:38:A1:73:52:1E:6A:4C:A3:8F:0C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1b2c5d45-6ba0-4267-9d5a-01ae26e27a77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:e6:10:81:70:93:85:78:49:d0:fa:bc:a5:5b:f7:0a:7d:c3:
         e8:b7:e7:6f:9e:08:d3:16:8d:07:e8:5e:da:84:f4:2b:c6:78:
         bd:47:ac:56:bf:04:f0:f5:4b:dd:c7:89:1e:63:3f:fc:9d:f8:
         07:5b:14:f6:ab:7d:0c:f1:be:f7:76:d5:0e:6d:8c:32:b0:40:
         bc:45:5f:8a:3e:1a:4b:bf:f1:9b:f0:90:1a:34:3f:80:12:01:
         20:8e:a7:a6:b7:6a:c1:7b:63:f8:2e:81:63:d8:8a:93:3f:e7:
         3e:d3:a1:cb:33:e7:6e:1a:04:48:c6:1b:c5:73:80:28:36:a1:
         29:90:dc:98:66:97:09:7e:58:c6:0b:b4:a6:10:0a:e7:ab:d2:
         74:4c:0a:06:9a:64:0d:e3:fc:53:fd:7d:74:81:47:6f:26:c4:
         cb:4f:85:29:09:9a:ed:3a:38:3c:68:7e:58:d7:f4:35:b8:b5:
         cc:6f:f2:e5:d4:fe:7b:fe:58:fa:8e:aa:ae:25:3e:5a:52:02:
         ff:25:cf:42:8b:a5:0a:fe:73:28:e7:9f:6f:06:b3:27:ce:e7:
         63:ba:9d:2b:5f:09:b6:1d:9b:e4:61:f4:3f:09:ca:7d:34:1d:
         db:cc:24:c9:72:61:5f:c5:aa:a1:e6:61:25:f0:e5:f4:9a:5b:
         b3:88:60:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 3 14:49:31 2026 by rpki-client