Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa
File:                     321028ee-2e2d-410c-8bdc-39a00f2044f0.roa (raw, json)
Hash identifier:          21JdEKVaPZ7GAMpGpgyHPcaMcPFO887npn4+Rf6HYbQ=
Subject key identifier:   43:69:5F:6D:CA:35:08:F7:98:6B:11:C2:C1:DB:DF:24:7F:0B:62:3F
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       105CC1D09C2636A2E46D2C42F0085863CD2B7CF6
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa
Signing time:             Fri 07 Aug 2026 04:20:13 +0000
ROA not before:           Fri 07 Aug 2026 04:20:13 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:5c:c1:d0:9c:26:36:a2:e4:6d:2c:42:f0:08:58:63:cd:2b:7c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  7 04:20:13 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=6d76eebc8056a56d4545bd36ba6dd8c88996d2e0fa79aaf4c4f733537b26c7e5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:92:fd:01:be:2a:09:4b:e7:9b:47:65:64:
                    2e:39:2a:ad:c5:f3:10:b7:59:f9:a0:e7:09:48:bd:
                    7d:1a:a8:7e:cd:2e:e8:67:f5:2e:8b:36:92:88:21:
                    24:9c:b8:43:f5:3d:1b:a4:31:56:44:56:de:b2:01:
                    18:3a:d7:ec:b3:35:f6:60:30:e7:f2:80:31:d5:51:
                    6e:e8:20:f9:32:b1:d6:0c:6b:25:99:4c:19:ab:c0:
                    27:d0:a5:1c:2a:a6:22:e8:a0:2e:8c:94:9c:f9:bb:
                    09:c3:73:0c:2f:d9:c8:6b:b6:86:bd:a0:84:2b:2d:
                    ad:4e:01:9d:ab:1f:4a:75:3c:97:e0:9c:47:97:65:
                    a1:dd:77:6f:17:d4:dc:c8:4c:42:df:8d:d2:29:85:
                    08:62:cd:83:71:15:89:52:b8:fe:95:26:12:82:cf:
                    cd:cb:11:3b:1b:fa:b9:84:0f:0e:00:81:a5:17:aa:
                    e7:ff:7e:b5:5d:69:26:0f:76:57:26:18:49:67:5b:
                    6b:09:f5:bf:9d:38:8e:2e:58:05:c2:9f:9a:61:b4:
                    f1:7a:1f:92:fe:d4:e9:b7:ff:f1:6c:2d:a9:c8:31:
                    68:e1:46:96:90:ee:64:bd:26:0f:be:21:7d:50:ab:
                    d2:a9:f4:21:6f:12:ac:2c:97:da:bf:5c:3f:2e:b3:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:69:5F:6D:CA:35:08:F7:98:6B:11:C2:C1:DB:DF:24:7F:0B:62:3F
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:d2:d2:65:c8:7e:f9:4d:48:6f:2e:5d:21:34:70:0c:e0:43:
         64:a0:f7:8a:46:01:a6:57:19:3b:c3:70:33:ed:e5:35:76:bb:
         8a:70:7a:6e:4f:e0:75:64:80:29:ec:21:1d:55:71:54:e3:f6:
         a9:9e:41:0f:5a:3a:eb:bf:2e:41:e1:37:7f:25:08:91:5b:f1:
         9a:67:29:04:01:06:da:85:f5:19:07:4c:1f:88:f3:24:66:24:
         5c:90:8f:99:a0:00:90:a1:11:67:9b:b0:7f:dd:c8:96:7e:38:
         03:7e:cb:78:d5:89:e4:dd:28:60:a9:c9:d7:d9:8e:6f:b9:fd:
         3b:18:7d:6d:48:50:92:4a:b4:56:ef:8d:d0:3c:77:36:2d:ec:
         45:19:3e:79:ad:5f:20:92:d1:d8:f5:a5:53:e4:19:44:ed:6c:
         ba:87:cd:c9:a3:5c:22:7d:eb:2d:7e:1f:b4:e8:f0:1f:25:71:
         4b:d3:ee:c5:97:a7:7c:d6:72:13:ba:5c:e7:95:18:21:83:3f:
         52:a7:f5:92:6e:b2:c0:7f:85:fa:92:60:f0:04:ed:ef:ee:46:
         6f:27:ea:5c:db:92:f3:20:ed:23:2d:2f:af:87:a9:58:b3:1f:
         d5:1e:70:60:b3:0e:37:be:70:c1:d6:8e:49:bf:fb:7b:a2:2e:
         97:0c:55:4c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUEFzB0JwmNqLkbSxC8AhYY80rfPYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDEzWhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZDc2ZWViYzgwNTZhNTZkNDU0NWJkMzZiYTZkZDhjODg5
OTZkMmUwZmE3OWFhZjRjNGY3MzM1MzdiMjZjN2U1MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0fJL9Ab4qCUvnm0dlZC45Kq3F8xC3Wfmg5wlIvX0aqH7N
Luhn9S6LNpKIISScuEP1PRukMVZEVt6yARg61+yzNfZgMOfygDHVUW7oIPkysdYM
ayWZTBmrwCfQpRwqpiLooC6MlJz5uwnDcwwv2chrtoa9oIQrLa1OAZ2rH0p1PJfg
nEeXZaHdd28X1NzITELfjdIphQhizYNxFYlSuP6VJhKCz83LETsb+rmEDw4AgaUX
quf/frVdaSYPdlcmGElnW2sJ9b+dOI4uWAXCn5phtPF6H5L+1Om3//FsLanIMWjh
RpaQ7mS9Jg++IX1Qq9Kp9CFvEqwsl9q/XD8us9TTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUQ2lfbco1CPeYaxHCwdvfJH8LYj8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzMyMTAyOGVlLTJlMmQtNDEwYy04YmRjLTM5YTAwZjIwNDRmMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwBQAwDQYJKoZIhvcNAQELBQADggEBADzS0mXIfvlNSG8uXSE0cAzg
Q2Sg94pGAaZXGTvDcDPt5TV2u4pwem5P4HVkgCnsIR1VcVTj9qmeQQ9aOuu/LkHh
N38lCJFb8ZpnKQQBBtqF9RkHTB+I8yRmJFyQj5mgAJChEWebsH/dyJZ+OAN+y3jV
ieTdKGCpydfZjm+5/TsYfW1IUJJKtFbvjdA8dzYt7EUZPnmtXyCS0dj1pVPkGUTt
bLqHzcmjXCJ96y1+H7To8B8lcUvT7sWXp3zWchO6XOeVGCGDP1Kn9ZJussB/hfqS
YPAE7e/uRm8n6lzbkvMg7SMtL6+HqVizH9UecGCzDje+cMHWjkm/+3uiLpcMVUw=
-----END CERTIFICATE-----
Generated at Sun Aug 9 01:43:41 2026 by rpki-client