Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d196c9c9-eb40-4f2f-873c-1231e7438a0c.roa
File:                     d196c9c9-eb40-4f2f-873c-1231e7438a0c.roa (raw, json)
Hash identifier:          tb5mXCyeRHP4IZLtsJqPD3i7CCG3nrIjmpJAw9Q+W0Y=
Subject key identifier:   2E:A9:07:F8:46:93:8D:C9:B3:9E:A7:23:2F:26:D1:BA:37:26:E8:9A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7F957C2EAE6C7997C53AA01922AD87946493EF30
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d196c9c9-eb40-4f2f-873c-1231e7438a0c.roa
Signing time:             Thu 14 May 2026 01:40:09 +0000
ROA not before:           Thu 14 May 2026 01:40:09 +0000
ROA not after:            Wed 12 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:5507::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:95:7c:2e:ae:6c:79:97:c5:3a:a0:19:22:ad:87:94:64:93:ef:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 14 01:40:09 2026 GMT
            Not After : Aug 12 23:59:59 2026 GMT
        Subject: serialNumber=048a65d93d4ef15197f1e0adade2d9e5b01764b6fc01dcb80445f983c85daed1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:bb:0d:ff:74:62:13:9b:e5:7b:90:3c:6e:
                    14:4f:19:75:b5:5b:ab:3d:d3:a0:22:66:b9:68:10:
                    51:ee:58:12:14:96:bd:56:67:82:bb:eb:26:01:62:
                    65:d7:5a:82:38:c6:e5:2d:63:c3:c3:ac:93:2e:15:
                    e9:3c:17:2e:c4:86:cb:d8:68:84:b5:e6:11:38:0d:
                    9d:1f:8b:c8:84:47:4b:52:17:2a:cf:d8:88:2c:97:
                    5c:5d:0a:96:3a:1d:9b:72:e1:16:ad:6b:61:00:c3:
                    1e:73:33:52:cd:bd:b1:0e:ac:b5:e2:22:7b:2a:ed:
                    2d:91:eb:99:a7:b5:ee:b3:02:71:31:d0:ec:d3:c1:
                    16:04:f7:23:18:8d:47:a6:c3:2c:99:61:14:89:f2:
                    c8:4e:79:c6:3f:7b:4b:ee:c7:60:52:d1:06:57:16:
                    ea:da:99:80:67:ce:56:5e:a5:a6:f9:7a:f4:7b:fb:
                    f0:58:6d:e7:4c:69:0d:04:fb:73:ac:23:af:b9:f1:
                    41:ea:90:36:9e:b2:34:f2:b3:48:f2:43:0c:5b:d0:
                    a1:ce:1e:25:3a:42:4d:4d:55:28:dc:6d:69:9f:95:
                    4e:ce:38:9f:ab:58:4f:05:df:15:53:22:11:96:ae:
                    54:7d:f3:ca:5f:2e:21:fc:b7:72:a4:0c:84:4e:5b:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A9:07:F8:46:93:8D:C9:B3:9E:A7:23:2F:26:D1:BA:37:26:E8:9A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d196c9c9-eb40-4f2f-873c-1231e7438a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5507::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:0a:50:24:94:48:ed:b1:61:7d:f6:9f:70:82:eb:f8:d6:cd:
         37:12:1d:74:b2:8e:05:68:57:22:cb:cb:58:44:d9:38:ef:11:
         e1:01:36:bb:15:70:16:78:dd:ab:cb:66:dd:8f:fd:73:7c:bb:
         f6:23:56:bd:20:46:6d:50:ae:89:e6:f5:40:57:1a:4f:3a:4f:
         a8:11:93:e7:44:93:04:1f:05:a2:99:2e:0a:76:9b:a8:07:36:
         47:ca:4c:1f:5e:0f:5c:12:f9:f7:8e:97:4e:5c:9f:5a:51:69:
         43:71:69:ff:27:df:34:2c:bb:bd:55:d2:d1:3e:a1:49:6a:3c:
         59:d4:c0:bd:b1:d4:cf:b1:87:22:5b:b3:9c:f7:57:a9:47:f3:
         f8:45:fa:e0:96:32:f5:63:89:39:6c:fc:7a:25:cc:53:6b:a5:
         83:d9:02:10:88:9c:0d:03:6b:77:fd:16:0b:d2:31:b6:58:6b:
         fa:e0:9e:65:05:8e:a5:1f:56:0e:1b:b9:a4:8c:40:13:d5:1e:
         09:83:f3:7d:51:6e:37:b1:e2:9b:45:c6:27:39:41:9f:19:1b:
         c0:d3:4d:bc:ed:97:d0:e5:41:39:58:a4:77:6d:08:af:63:ff:
         4b:d3:e6:c3:39:34:92:d6:a4:74:58:75:12:67:9b:3c:c1:a4:
         c7:e3:30:0b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUf5V8Lq5seZfFOqAZIq2HlGST7zAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTE0MDE0MDA5WhcNMjYwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNDhhNjVkOTNkNGVmMTUxOTdmMWUwYWRhZGUyZDllNWIw
MTc2NGI2ZmMwMWRjYjgwNDQ1Zjk4M2M4NWRhZWQxMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClnbsN/3RiE5vle5A8bhRPGXW1W6s906AiZrloEFHuWBIU
lr1WZ4K76yYBYmXXWoI4xuUtY8PDrJMuFek8Fy7EhsvYaIS15hE4DZ0fi8iER0tS
FyrP2Igsl1xdCpY6HZty4Rata2EAwx5zM1LNvbEOrLXiInsq7S2R65mnte6zAnEx
0OzTwRYE9yMYjUemwyyZYRSJ8shOecY/e0vux2BS0QZXFuramYBnzlZepab5evR7
+/BYbedMaQ0E+3OsI6+58UHqkDaesjTys0jyQwxb0KHOHiU6Qk1NVSjcbWmflU7O
OJ+rWE8F3xVTIhGWrlR988pfLiH8t3KkDIROW6VjAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQULqkH+EaTjcmznqcjLybRujcm6JowHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2QxOTZjOWM5LWViNDAtNGYyZi04NzNjLTEyMzFlNzQzOGEwYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwVQcwDQYJKoZIhvcNAQELBQADggEBACAKUCSUSO2xYX32n3CC6/jW
zTcSHXSyjgVoVyLLy1hE2TjvEeEBNrsVcBZ43avLZt2P/XN8u/YjVr0gRm1Qronm
9UBXGk86T6gRk+dEkwQfBaKZLgp2m6gHNkfKTB9eD1wS+feOl05cn1pRaUNxaf8n
3zQsu71V0tE+oUlqPFnUwL2x1M+xhyJbs5z3V6lH8/hF+uCWMvVjiTls/HolzFNr
pYPZAhCInA0Da3f9FgvSMbZYa/rgnmUFjqUfVg4buaSMQBPVHgmD831Rbjex4ptF
xic5QZ8ZG8DTTbztl9DlQTlYpHdtCK9j/0vT5sM5NJLWpHRYdRJnmzzBpMfjMAs=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:52:59 2026 by rpki-client