Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa
File:                     529e132d-0c8c-4ca3-bafc-0927932483fd.roa (raw, json)
Hash identifier:          6tPQq5CwClZJNONmsg1lxEZNAdpxZjtjxUHIqnP0faE=
Subject key identifier:   94:A2:CF:5C:C6:90:8C:35:6C:C7:E1:F5:75:4C:22:4C:63:14:5A:C7
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5C0D7B6B0C018938D188826E29D3A1443A1B2498
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa
Signing time:             Tue 19 May 2026 04:30:07 +0000
ROA not before:           Tue 19 May 2026 04:30:07 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0d:7b:6b:0c:01:89:38:d1:88:82:6e:29:d3:a1:44:3a:1b:24:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 19 04:30:07 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=6bd89611e33f2141e1ee5ef2f370c5ffcaa74a0b1e06fef77be74a0ef6dc9e0d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:72:41:8d:6b:40:ed:bc:c8:d7:01:00:c0:
                    95:c6:fe:18:fa:e0:ea:87:90:f4:57:27:45:25:1e:
                    41:b3:27:a9:9b:05:a2:88:b3:29:27:a2:c5:87:1e:
                    e2:40:9f:05:a8:27:d2:0a:67:56:63:01:fd:16:7c:
                    27:c9:5e:06:46:55:e6:92:76:bb:47:56:9d:70:d6:
                    f4:ee:db:f2:2e:2e:2b:d8:25:44:81:1c:cd:ab:b9:
                    3b:fb:bb:e9:67:b7:0f:9b:58:2e:7e:12:57:95:3e:
                    d3:5e:a0:41:eb:9f:7e:3a:ff:76:8c:b8:eb:43:4c:
                    10:fa:c7:2e:c2:f3:6c:94:47:40:da:f1:d5:26:5f:
                    49:3d:bf:e9:3c:52:be:b1:f5:c7:ba:ad:55:52:1e:
                    62:dd:f1:6b:38:b7:5b:ab:7c:58:7e:57:10:66:8f:
                    34:ba:bd:db:f2:7e:6b:8e:ac:c6:e6:60:98:9d:40:
                    dd:ed:6a:96:2c:68:36:c0:c1:8e:5f:32:d1:a2:28:
                    5e:83:02:21:fd:fa:71:33:2b:2e:8d:3c:14:9e:eb:
                    dd:dc:69:e2:ab:ad:8d:0f:af:53:9d:1c:51:7e:8a:
                    c4:cb:8d:29:9c:70:a9:3f:fa:77:8c:1a:07:38:d0:
                    5b:bf:65:40:ff:fe:b0:88:bd:fe:62:96:16:49:04:
                    7e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A2:CF:5C:C6:90:8C:35:6C:C7:E1:F5:75:4C:22:4C:63:14:5A:C7
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/529e132d-0c8c-4ca3-bafc-0927932483fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3e:28:9b:3c:73:ef:88:d7:f2:bf:9f:2a:3b:a3:e5:7c:61:dd:
         eb:ef:02:87:1c:fc:f3:87:23:4b:87:66:bd:0a:76:17:57:85:
         5d:01:b9:e9:9f:0a:6b:9f:ba:c5:c9:02:7e:33:e6:ba:07:2c:
         9d:af:24:5b:51:7a:95:65:2f:db:aa:e0:e7:c2:49:9f:e6:bb:
         d1:03:e6:6f:7c:3c:53:88:da:b9:89:f5:84:d1:07:33:42:dd:
         bf:cd:f8:d9:df:f3:52:42:24:77:23:09:1a:ed:23:c7:03:9f:
         34:38:a4:53:65:56:1b:38:5d:9e:87:66:5c:c2:4f:c0:13:0b:
         7f:ff:cc:d7:85:09:ea:0d:e1:14:b6:0f:2c:03:3f:26:e7:ba:
         25:5a:b1:76:3a:7e:18:85:dd:38:f9:11:84:9f:50:d6:84:d8:
         25:60:f9:a0:91:88:31:8d:60:b7:4f:61:be:d4:68:37:27:37:
         4d:bf:fa:8e:3e:b9:0d:37:c3:bf:e0:56:91:00:01:58:36:c3:
         80:b2:e2:6c:16:ae:9b:f5:2e:ff:74:93:c8:f5:1f:04:5a:7e:
         bf:ec:95:b3:8a:ee:0d:73:e2:17:52:ee:cf:1c:60:dd:31:4f:
         1e:29:5e:19:9e:c1:d2:d6:21:20:a2:8a:76:48:24:01:9c:51:
         f8:1b:de:b6
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUXA17awwBiTjRiIJuKdOhRDobJJgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTE5MDQzMDA3WhcNMjYwODE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2YmQ4OTYxMWUzM2YyMTQxZTFlZTVlZjJmMzcwYzVmZmNh
YTc0YTBiMWUwNmZlZjc3YmU3NGEwZWY2ZGM5ZTBkMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsIXJBjWtA7bzI1wEAwJXG/hj64OqHkPRXJ0UlHkGzJ6mb
BaKIsyknosWHHuJAnwWoJ9IKZ1ZjAf0WfCfJXgZGVeaSdrtHVp1w1vTu2/IuLivY
JUSBHM2ruTv7u+lntw+bWC5+EleVPtNeoEHrn346/3aMuOtDTBD6xy7C82yUR0Da
8dUmX0k9v+k8Ur6x9ce6rVVSHmLd8Ws4t1urfFh+VxBmjzS6vdvyfmuOrMbmYJid
QN3tapYsaDbAwY5fMtGiKF6DAiH9+nEzKy6NPBSe693caeKrrY0Pr1OdHFF+isTL
jSmccKk/+neMGgc40Fu/ZUD//rCIvf5ilhZJBH6zAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUlKLPXMaQjDVsx+H1dUwiTGMUWscwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzUyOWUxMzJkLTBjOGMtNGNhMy1iYWZjLTA5Mjc5MzI0ODNmZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAPD74DANBgkqhkiG9w0BAQsFAAOCAQEAPiibPHPviNfyv58qO6PlfGHd
6+8Chxz884cjS4dmvQp2F1eFXQG56Z8Ka5+6xckCfjPmugcsna8kW1F6lWUv26rg
58JJn+a70QPmb3w8U4jauYn1hNEHM0Ldv8342d/zUkIkdyMJGu0jxwOfNDikU2VW
GzhdnodmXMJPwBMLf//M14UJ6g3hFLYPLAM/Jue6JVqxdjp+GIXdOPkRhJ9Q1oTY
JWD5oJGIMY1gt09hvtRoNyc3Tb/6jj65DTfDv+BWkQABWDbDgLLibBaum/Uu/3ST
yPUfBFp+v+yVs4ruDXPiF1Luzxxg3TFPHileGZ7B0tYhIKKKdkgkAZxR+Bvetg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:51:42 2026 by rpki-client