Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ee334bd-d86b-455a-ac15-6e83b3b11d16.roa
File:                     4ee334bd-d86b-455a-ac15-6e83b3b11d16.roa (raw, json)
Hash identifier:          xGgesrzOtMi+4iBppaizp8v8C+96dbyRPwLgRdcvCe4=
Subject key identifier:   9A:95:79:9C:3F:9E:17:33:CD:6A:54:72:C5:F1:32:43:30:D3:C1:87
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2D93233612837ABA67BE25E392DAAC9E4F852E85
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ee334bd-d86b-455a-ac15-6e83b3b11d16.roa
Signing time:             Thu 10 Sep 2026 00:20:06 +0000
ROA not before:           Thu 10 Sep 2026 00:20:06 +0000
ROA not after:            Wed 09 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:e11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:93:23:36:12:83:7a:ba:67:be:25:e3:92:da:ac:9e:4f:85:2e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Sep 10 00:20:06 2026 GMT
            Not After : Dec  9 23:59:59 2026 GMT
        Subject: serialNumber=8d3f2b769e66292bdd273470d578ced5079bd1168f4d15d44e1e34dcf282706d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:8e:44:6f:6e:f1:e4:35:94:6b:79:1a:e3:
                    22:7a:42:d1:26:39:b6:b7:84:da:58:f2:52:c5:2c:
                    a6:0e:4e:d3:1f:7c:e3:fe:f3:28:ab:75:f6:32:60:
                    d0:4e:c7:dc:8d:22:f1:93:28:36:d5:3f:c9:6d:dc:
                    c8:30:17:32:45:ff:d6:4d:62:b6:bf:62:49:2b:56:
                    37:85:8d:46:00:b9:93:5a:21:04:97:bb:10:bf:7e:
                    2e:ad:85:34:12:ed:47:40:9f:72:0e:21:b3:bb:30:
                    69:d5:4e:d2:af:62:b2:01:51:c8:a8:3d:34:82:7f:
                    fd:b3:e9:7a:ea:7c:68:ef:e0:49:85:29:c9:84:bd:
                    99:fc:8d:16:74:39:77:43:82:3e:e3:82:38:1d:ce:
                    5c:5d:26:01:6b:ee:02:4d:62:36:04:cf:19:6f:c9:
                    55:be:9b:18:c3:61:8b:49:18:12:b8:43:14:c2:3e:
                    ad:18:74:5b:20:40:b3:8a:67:50:2f:1f:dc:3b:b0:
                    64:0f:1f:15:e0:87:51:9b:e0:9b:58:e6:1e:31:6c:
                    9b:d2:7e:b2:90:3f:02:bd:7d:cb:2a:dc:e9:72:6c:
                    cb:02:bf:10:5c:c2:9b:db:81:f4:10:3b:a5:f8:b2:
                    3b:05:fa:42:9e:5b:a6:d3:4e:d2:80:14:25:7d:77:
                    bf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:95:79:9C:3F:9E:17:33:CD:6A:54:72:C5:F1:32:43:30:D3:C1:87
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ee334bd-d86b-455a-ac15-6e83b3b11d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:e11::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:96:df:cd:25:0d:f2:22:5a:4a:d6:c9:1b:e8:04:1b:cf:8d:
         46:8f:c7:03:02:58:13:96:17:73:36:65:8d:be:cc:ff:d0:56:
         9b:3b:59:45:11:db:31:f3:13:fe:eb:94:c1:0f:32:d7:42:33:
         a4:9a:cc:e8:9e:c4:8a:ac:d0:01:e9:b1:d8:55:c3:b5:8f:6f:
         b8:26:9a:57:15:f7:da:88:52:9c:06:f6:84:73:5b:fa:cb:d4:
         bf:8d:ac:de:0a:ab:84:54:7a:60:5a:69:9d:8c:88:2c:69:93:
         a3:f2:44:ce:34:66:5f:d3:55:04:97:88:9f:cc:2b:2d:43:9a:
         dc:ac:8e:d1:a5:d3:22:59:ac:82:d8:4d:d0:72:0d:76:66:ad:
         c3:82:0e:04:e8:8c:09:b1:72:88:7f:39:9f:15:ff:25:09:bb:
         71:f6:bc:25:5e:7a:35:c9:eb:64:45:8f:83:b8:3c:61:3c:91:
         22:06:a3:66:b4:b4:e5:dc:e6:be:67:a8:a2:de:a4:3f:8c:27:
         a6:65:8a:e4:54:3c:21:7a:08:b6:85:ec:bb:c1:fc:92:ae:6b:
         18:6d:63:2c:4d:2f:d5:d5:2e:7a:6d:1e:68:9e:e3:22:b3:2f:
         3b:f6:19:60:eb:dc:f7:79:23:00:3d:19:e9:23:d4:36:b4:f4:
         b2:95:d7:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 07:37:33 2026 by rpki-client