Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa
File:                     b90bcce5-377e-4df4-b77e-97a06ec916c4.roa (raw, json)
Hash identifier:          wGZvqpB/BHsQkVxz3dG15Rq32X4QJGajKLJzERt3DKg=
Subject key identifier:   AF:A9:4C:E8:C5:1C:38:DA:B1:02:4A:C5:8D:55:F6:26:16:57:EA:77
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6746AE15D17563129EB1CB9F1405BF42CC601F73
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa
Signing time:             Tue 19 May 2026 04:20:04 +0000
ROA not before:           Tue 19 May 2026 04:20:04 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:46:ae:15:d1:75:63:12:9e:b1:cb:9f:14:05:bf:42:cc:60:1f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 19 04:20:04 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=6acd0dae969bc0b3e223c8f9c065be7dcb7ee6696f9ca29f56a34a4f3f3a610a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:2b:6a:ec:93:58:e4:59:19:ac:c8:24:45:
                    6c:56:60:1a:6a:bf:21:55:22:5e:06:eb:8a:2f:bd:
                    4c:ed:d0:0b:59:99:fe:7f:7b:b1:e0:0f:d0:52:07:
                    26:1c:ca:e5:2a:cd:2d:85:bc:4b:9d:92:33:32:30:
                    34:00:06:1b:a6:33:37:ef:ed:d3:10:79:9c:02:2e:
                    41:32:29:b4:87:1a:cb:50:fd:65:aa:a7:d8:d0:ec:
                    fc:0d:1f:e4:3c:bd:46:f1:ec:d2:5d:67:25:3c:73:
                    6e:b2:bc:12:17:d3:e1:87:a2:11:23:ca:1e:dc:fe:
                    00:34:31:3b:f5:ea:25:80:d8:6f:30:27:a4:a9:b3:
                    6d:b1:d2:6b:2f:29:23:9b:54:c2:31:91:9a:3e:0e:
                    1b:b3:71:a4:a9:eb:47:30:89:d6:93:33:9c:ed:d5:
                    9b:c6:e1:bd:76:94:32:c4:35:ab:21:3e:9a:87:d5:
                    6b:4c:a4:32:48:e7:ed:a6:a1:a2:a9:de:a2:9e:56:
                    b8:dc:3f:f1:16:7d:c1:16:34:2f:c1:a8:f7:81:6c:
                    77:e2:10:e4:49:78:f5:58:dc:a9:30:93:b0:5c:83:
                    ae:af:01:c2:d4:d1:ed:6f:19:00:70:a4:fc:53:bd:
                    0b:b1:a5:f8:b6:2a:51:c0:f8:b6:0d:ee:87:d9:c6:
                    3d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A9:4C:E8:C5:1C:38:DA:B1:02:4A:C5:8D:55:F6:26:16:57:EA:77
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:2d:d4:59:63:9e:bc:03:55:62:b9:2d:f0:be:83:6f:84:
         8a:5d:f0:a8:12:2e:fd:ef:87:48:f5:60:9a:ce:5a:1a:00:6b:
         6a:66:43:36:0e:f9:4e:48:68:9f:00:8c:0a:83:b1:f4:f3:8f:
         31:28:db:e9:44:d2:7d:b7:90:a1:70:26:c8:ef:ee:13:85:52:
         ed:ac:aa:6e:49:96:71:11:f4:19:ef:75:9c:1f:02:b7:ed:05:
         c0:be:d1:dd:95:08:88:f9:e4:ac:24:d6:15:15:6d:02:04:c2:
         04:81:b3:e0:24:a8:45:6a:53:6f:e7:fe:27:ff:d6:0f:7a:1a:
         1f:b8:42:23:e8:54:cb:a6:72:99:98:8f:c9:a1:fc:b9:b5:b1:
         3f:fc:01:90:16:60:49:c3:4c:6f:ce:5a:61:89:1e:c8:fc:28:
         e3:f0:c7:2a:2b:d0:a5:86:ed:6c:24:a1:3c:f8:56:ae:80:78:
         79:2d:48:d1:02:05:f0:7b:88:9d:cb:8d:9b:4d:ea:f5:66:19:
         fa:ff:2c:4c:e5:0b:48:16:da:4f:22:03:8e:71:ce:c2:7e:7d:
         47:b5:8d:c8:78:d5:6b:1a:ee:a7:a8:16:bd:0a:83:bf:9d:21:
         68:ab:14:b2:99:fe:d0:f1:49:0d:6c:8a:e0:89:6e:20:0a:35:
         ed:f1:5c:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:50:25 2026 by rpki-client