Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa
File:                     bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa (raw, json)
Hash identifier:          frCZPn2JEuWk0X2d8JIe5aWZPNVE44jjJs6UfYBpi8o=
Subject key identifier:   39:E5:83:DD:F6:DD:5A:24:68:E2:64:1E:26:9F:A7:C8:A3:E2:8B:B1
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       515584C4499F71978050E96656BCB4939FEE5B8B
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa
Signing time:             Fri 07 Aug 2026 04:20:31 +0000
ROA not before:           Fri 07 Aug 2026 04:20:31 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:5519::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:55:84:c4:49:9f:71:97:80:50:e9:66:56:bc:b4:93:9f:ee:5b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  7 04:20:31 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=2480e3c204a80754a7aff2eda3eabaac38852ee7540394d40280128f7998f1f8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:27:70:a3:3e:76:8a:60:cb:6b:e4:1b:b6:7e:
                    b3:ed:be:64:cd:47:20:26:bd:11:19:a5:da:60:05:
                    65:6c:9b:fc:e1:0a:89:54:00:68:bb:a4:5d:b4:96:
                    f4:da:51:91:e4:9c:56:c9:9f:b2:9d:a0:3e:ad:8a:
                    24:4a:6a:db:cd:40:99:38:fc:5a:48:03:18:bb:82:
                    e2:b5:24:4b:c2:f2:03:d9:eb:11:d9:43:d6:04:f7:
                    bd:e8:9d:56:38:64:4a:40:fa:0e:a8:95:d8:08:b3:
                    42:2e:73:4c:b2:d3:8b:b4:cf:3f:c8:f1:00:48:0b:
                    0b:33:51:1e:4a:32:5b:23:dd:e2:33:55:ce:89:91:
                    1f:64:ad:bf:cf:38:da:64:2c:c3:39:23:3c:59:ae:
                    d3:e8:d3:45:9a:a1:6a:96:33:49:eb:7a:4d:64:af:
                    6b:ee:97:51:4a:01:e5:fd:82:30:a3:9c:57:88:d7:
                    7a:c1:eb:01:10:61:26:53:24:23:c0:cf:c3:3f:48:
                    c9:2d:09:73:b6:1b:70:06:0a:21:fb:03:8e:b9:2c:
                    97:37:7a:7a:9a:d8:88:18:7b:16:84:d1:3f:20:87:
                    9d:73:e0:4d:5f:2e:17:a6:6f:f4:eb:24:39:6d:eb:
                    c0:86:98:85:04:68:6a:34:5b:15:66:da:ed:0f:f1:
                    5c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E5:83:DD:F6:DD:5A:24:68:E2:64:1E:26:9F:A7:C8:A3:E2:8B:B1
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bda33800-108d-4eb7-bbc8-f1f3a5a088e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5519::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:04:49:08:38:2a:fe:a7:93:12:21:17:cc:93:59:9a:92:82:
         b7:31:76:eb:c0:d1:19:ca:44:83:e3:5e:03:1a:fd:0b:94:df:
         6c:df:f8:28:4f:76:18:87:d6:3b:4d:97:de:26:85:51:f8:5b:
         e4:f1:de:32:ec:5d:09:88:73:a5:36:d8:41:c2:c3:e6:0c:18:
         bd:aa:02:91:a9:8d:86:de:ae:e3:ce:2f:8f:34:d1:c0:48:37:
         ba:1d:b3:4f:2a:bf:c7:c5:f8:a2:a8:b4:b6:fe:ab:86:0e:8e:
         72:35:ac:7c:d6:b4:ca:06:10:a3:ac:07:9d:c8:5e:27:d2:c5:
         3a:86:ed:40:77:62:31:ea:bf:14:cd:ce:2e:15:a2:2b:a9:a5:
         14:8f:f7:e9:e0:ba:d5:3f:48:1d:e8:eb:cf:8a:29:6b:d0:cd:
         ed:61:b0:e8:12:46:fe:8e:94:7b:c2:e1:f9:87:ba:b7:8e:46:
         fb:0e:2b:26:ff:87:93:12:79:e3:f5:52:f7:0e:3f:e7:2e:b6:
         90:a0:dd:da:34:0d:a7:c2:e9:fb:1a:2a:88:30:2d:1e:cf:0e:
         7c:87:03:68:9b:78:4f:37:77:a3:a1:48:54:2f:2d:01:a8:25:
         f9:f1:85:58:c6:fe:e4:99:43:53:95:9c:42:dd:28:9b:ff:d6:
         c5:e3:2c:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 9 01:44:06 2026 by rpki-client