Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c92a8c24-62b8-4009-a51c-8908d7373850.roa
File:                     c92a8c24-62b8-4009-a51c-8908d7373850.roa (raw, json)
Hash identifier:          F+NU0N5DVQVo7vg4xEpQ6VG0eG12QQWGd7z7RXoUAMI=
Subject key identifier:   31:52:43:5B:DB:7A:DC:C0:BA:2B:5B:E2:6D:43:CF:40:5E:02:3B:DA
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       34EF3CC48A0730450584CD338C76C0148C37CB7E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c92a8c24-62b8-4009-a51c-8908d7373850.roa
Signing time:             Fri 07 Aug 2026 04:20:41 +0000
ROA not before:           Fri 07 Aug 2026 04:20:41 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e100::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ef:3c:c4:8a:07:30:45:05:84:cd:33:8c:76:c0:14:8c:37:cb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  7 04:20:41 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=97b5cfa84f335b575d45464ee8758136cf42930bb737bd6bc0b9a91fe49d4667, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:8d:a3:2d:78:d3:16:a5:01:d8:82:17:22:
                    3c:25:9a:47:b0:76:81:c8:fc:84:a2:7a:12:25:30:
                    c9:25:17:32:ea:ce:c7:10:5c:99:51:f1:a4:74:8b:
                    f5:99:69:a4:c9:8e:69:74:98:b8:88:c8:d4:bf:6b:
                    c0:b8:6c:cd:31:3e:b6:cd:0b:b9:ec:b3:8f:d7:15:
                    85:a5:2e:53:ca:5b:e6:26:24:3d:60:aa:5a:77:30:
                    07:2b:bb:5a:bf:49:42:18:e0:fe:82:db:d8:2f:f2:
                    86:d6:29:2a:58:59:9f:33:11:27:38:bb:6e:4b:46:
                    9d:2f:2b:30:21:d7:4e:5e:27:da:d2:44:2a:44:59:
                    c8:db:6a:dc:d1:26:d1:58:5a:26:10:eb:e3:d4:a3:
                    10:9a:fc:ce:3c:c8:92:8a:cd:01:3a:73:5b:8e:71:
                    f9:f1:1e:6d:1f:ba:1a:a8:50:09:cb:89:39:49:68:
                    8e:43:04:32:59:d7:fb:12:42:3a:2d:ff:92:01:d9:
                    a9:35:0d:b9:91:c9:3f:bd:6f:a0:37:67:eb:53:0c:
                    61:b0:0e:9a:73:4c:e9:d8:34:cc:f6:98:72:1a:18:
                    95:0b:24:c5:0a:7b:9b:bd:c9:2f:84:0c:b1:37:29:
                    ab:5c:24:fc:79:78:f5:38:96:80:4f:74:c8:2b:5a:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:52:43:5B:DB:7A:DC:C0:BA:2B:5B:E2:6D:43:CF:40:5E:02:3B:DA
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c92a8c24-62b8-4009-a51c-8908d7373850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e100::/42

    Signature Algorithm: sha256WithRSAEncryption
         37:a4:f4:66:69:9c:8e:f3:14:cc:e1:51:d0:99:fc:72:35:d1:
         2c:c3:57:30:b3:90:4e:68:64:ef:9e:c8:b5:6d:39:ef:30:50:
         16:d6:a4:83:e4:12:27:73:4c:9d:60:1a:40:63:c0:dc:d9:0f:
         92:71:c1:a0:c1:08:b8:c6:92:cb:e6:08:1a:37:08:9d:dc:df:
         bc:26:a7:1b:9a:5c:4d:dd:f0:84:f5:fd:00:4c:e4:69:9b:62:
         98:a6:7d:e4:4a:52:4a:82:55:c1:d9:c5:aa:bc:df:14:f0:e6:
         30:26:e6:5c:f3:f0:0e:c6:49:27:75:5f:57:38:07:12:17:bc:
         24:09:cc:53:f8:77:11:7f:3c:f4:47:4c:cb:d5:a9:e5:de:41:
         7f:c8:32:c1:4c:a0:ec:49:98:39:30:82:a3:68:b9:2d:9d:0d:
         8b:50:6a:b9:82:ff:69:21:e6:7e:5c:15:a0:fe:b9:ca:dd:39:
         72:52:62:dc:ca:c2:eb:b6:a4:74:11:4a:ce:4c:c8:25:a8:d8:
         e0:0e:85:5e:df:ff:58:22:12:03:6d:82:f2:70:ff:d8:11:f9:
         18:37:ae:15:ba:80:0c:35:d5:0a:cd:1e:c4:0c:e6:c1:15:fa:
         48:10:bb:15:4b:84:e4:69:25:f8:50:f7:be:40:78:3b:41:67:
         6c:86:40:52
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNO88xIoHMEUFhM0zjHbAFIw3y34wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDQxWhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5N2I1Y2ZhODRmMzM1YjU3NWQ0NTQ2NGVlODc1ODEzNmNm
NDI5MzBiYjczN2JkNmJjMGI5YTkxZmU0OWQ0NjY3MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXi42jLXjTFqUB2IIXIjwlmkewdoHI/ISiehIlMMklFzLq
zscQXJlR8aR0i/WZaaTJjml0mLiIyNS/a8C4bM0xPrbNC7nss4/XFYWlLlPKW+Ym
JD1gqlp3MAcru1q/SUIY4P6C29gv8obWKSpYWZ8zESc4u25LRp0vKzAh105eJ9rS
RCpEWcjbatzRJtFYWiYQ6+PUoxCa/M48yJKKzQE6c1uOcfnxHm0fuhqoUAnLiTlJ
aI5DBDJZ1/sSQjot/5IB2ak1DbmRyT+9b6A3Z+tTDGGwDppzTOnYNMz2mHIaGJUL
JMUKe5u9yS+EDLE3KatcJPx5ePU4loBPdMgrWszDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUMVJDW9t63MC6K1vibUPPQF4CO9owHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2M5MmE4YzI0LTYyYjgtNDAwOS1hNTFjLTg5MDhkNzM3Mzg1MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD74QAwDQYJKoZIhvcNAQELBQADggEBADek9GZpnI7zFMzhUdCZ/HI1
0SzDVzCzkE5oZO+eyLVtOe8wUBbWpIPkEidzTJ1gGkBjwNzZD5JxwaDBCLjGksvm
CBo3CJ3c37wmpxuaXE3d8IT1/QBM5GmbYpimfeRKUkqCVcHZxaq83xTw5jAm5lzz
8A7GSSd1X1c4BxIXvCQJzFP4dxF/PPRHTMvVqeXeQX/IMsFMoOxJmDkwgqNouS2d
DYtQarmC/2kh5n5cFaD+ucrdOXJSYtzKwuu2pHQRSs5MyCWo2OAOhV7f/1giEgNt
gvJw/9gR+Rg3rhW6gAw11QrNHsQM5sEV+kgQuxVLhORpJfhQ975AeDtBZ2yGQFI=
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:45 2026 by rpki-client