Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab7f6e22-1b78-4330-bfdd-974eea4f73df.roa
File:                     ab7f6e22-1b78-4330-bfdd-974eea4f73df.roa (raw, json)
Hash identifier:          G14ynPxjfngU9c8VJjGXBIupIFfBrRvbgV5X0PqJmRU=
Subject key identifier:   E4:B7:73:BB:6C:BA:0F:1C:98:94:C3:CF:63:4C:08:E3:1F:CF:C7:F5
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3F0A7790C393DF26406BC23C219BFEEE7428C3AA
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab7f6e22-1b78-4330-bfdd-974eea4f73df.roa
Signing time:             Sat 08 Aug 2026 00:50:28 +0000
ROA not before:           Sat 08 Aug 2026 00:50:28 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f0f0:6123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:0a:77:90:c3:93:df:26:40:6b:c2:3c:21:9b:fe:ee:74:28:c3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  8 00:50:28 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=ccc350863694cae3654962ae51f919d3d9ac6d7f2558de42d6488e396e548cf1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:f3:cb:58:c6:50:c0:81:59:c2:56:4e:cc:
                    88:52:27:d9:ed:a1:90:d9:c8:5e:5d:8e:ca:0f:bd:
                    f2:6e:f1:2d:15:67:de:c8:74:67:17:33:fe:52:62:
                    74:5b:7c:bb:bc:24:b3:a3:b9:87:bc:8b:7a:94:bf:
                    e1:16:f3:6d:af:7e:ef:90:c5:4b:d9:2e:92:1e:7e:
                    7a:cc:87:3f:b3:06:62:4c:09:ec:68:52:15:02:62:
                    cc:55:54:5b:35:8e:84:c4:f7:b8:7b:83:32:b9:0b:
                    0f:13:3e:76:71:54:93:a2:09:4f:48:53:68:18:86:
                    18:dc:23:bf:00:86:b1:6c:7d:9c:b7:46:1c:82:ef:
                    b1:62:b5:46:09:9f:2b:cb:33:c6:dd:ab:f9:78:a3:
                    9a:6e:70:b0:93:c5:6d:e7:35:70:ea:c4:61:7f:69:
                    7f:15:bc:78:55:62:4c:55:3d:87:c6:db:03:e0:f3:
                    73:9a:9c:6b:a2:23:81:59:f2:6b:76:e1:35:d0:ad:
                    2c:27:ff:eb:ac:45:b9:fa:da:c1:6e:02:6a:5d:b0:
                    e0:1d:19:11:ce:bf:99:99:79:34:81:46:98:d0:ae:
                    29:7f:6e:9b:2a:2f:77:ce:93:7b:5a:1a:62:d9:ff:
                    f4:f5:09:77:5b:44:9a:40:23:ea:5c:ad:2d:aa:9c:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B7:73:BB:6C:BA:0F:1C:98:94:C3:CF:63:4C:08:E3:1F:CF:C7:F5
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab7f6e22-1b78-4330-bfdd-974eea4f73df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6123::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:33:17:e9:77:5e:ce:21:29:17:15:8e:2e:06:d7:e7:65:38:
         2e:0e:a4:29:5b:9d:62:61:8c:47:d3:11:bd:c7:09:9c:85:83:
         2e:a2:4d:ff:3e:02:f8:f6:b1:c1:be:9d:0c:0c:ab:45:e6:52:
         1e:4f:eb:1c:d5:3b:24:c2:f7:77:e6:ef:88:3e:bf:19:b3:c8:
         57:d2:3d:f1:7e:89:c8:e7:77:3a:5b:91:3b:9d:c8:73:e4:6b:
         f2:04:75:32:c7:45:77:c7:72:8b:1b:d9:af:c4:82:db:f4:ff:
         2e:06:ad:fb:7f:b2:58:af:38:3f:f7:a5:38:2f:a3:44:76:fd:
         3d:76:e4:8c:96:36:36:63:24:c3:82:58:52:4c:28:27:73:e8:
         28:3b:31:82:c7:fb:6e:d2:1c:3f:05:4d:4a:77:35:09:b1:40:
         b6:8d:5b:00:26:70:79:7d:03:bc:e6:cc:fb:0b:d6:01:09:41:
         6b:7a:82:b6:d3:d8:ed:90:6a:d4:17:b2:d4:62:bd:72:f3:0d:
         7d:42:16:91:ea:ea:1a:10:92:7f:a7:51:19:09:1a:77:b4:1e:
         86:72:e4:d6:4f:59:a3:72:bb:e2:55:d1:a0:80:ea:fb:7b:c5:
         cf:e0:3a:42:d1:3a:d8:03:ff:71:80:c2:82:be:4d:01:cc:04:
         bb:77:df:5c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPwp3kMOT3yZAa8I8IZv+7nQow6owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDI4WhcNMjYxMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BjY2MzNTA4NjM2OTRjYWUzNjU0OTYyYWU1MWY5MTlkM2Q5
YWM2ZDdmMjU1OGRlNDJkNjQ4OGUzOTZlNTQ4Y2YxMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCj5PPLWMZQwIFZwlZOzIhSJ9ntoZDZyF5djsoPvfJu8S0V
Z97IdGcXM/5SYnRbfLu8JLOjuYe8i3qUv+EW822vfu+QxUvZLpIefnrMhz+zBmJM
CexoUhUCYsxVVFs1joTE97h7gzK5Cw8TPnZxVJOiCU9IU2gYhhjcI78AhrFsfZy3
RhyC77FitUYJnyvLM8bdq/l4o5pucLCTxW3nNXDqxGF/aX8VvHhVYkxVPYfG2wPg
83OanGuiI4FZ8mt24TXQrSwn/+usRbn62sFuAmpdsOAdGRHOv5mZeTSBRpjQril/
bpsqL3fOk3taGmLZ//T1CXdbRJpAI+pcrS2qnF3vAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU5Ldzu2y6DxyYlMPPY0wI4x/Px/UwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2FiN2Y2ZTIyLTFiNzgtNDMzMC1iZmRkLTk3NGVlYTRmNzNkZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYSMwDQYJKoZIhvcNAQELBQADggEBAJYzF+l3Xs4hKRcVji4G1+dl
OC4OpClbnWJhjEfTEb3HCZyFgy6iTf8+Avj2scG+nQwMq0XmUh5P6xzVOyTC93fm
74g+vxmzyFfSPfF+icjndzpbkTudyHPka/IEdTLHRXfHcosb2a/Egtv0/y4Grft/
slivOD/3pTgvo0R2/T125IyWNjZjJMOCWFJMKCdz6Cg7MYLH+27SHD8FTUp3NQmx
QLaNWwAmcHl9A7zmzPsL1gEJQWt6grbT2O2QatQXstRivXLzDX1CFpHq6hoQkn+n
URkJGne0HoZy5NZPWaNyu+JV0aCA6vt7xc/gOkLROtgD/3GAwoK+TQHMBLt331w=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:15:56 2026 by rpki-client