Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc372e7b-796d-474f-9081-c4d593d48cd3.roa
File:                     dc372e7b-796d-474f-9081-c4d593d48cd3.roa (raw, json)
Hash identifier:          9SwwM7t2gA8yE/iJ/BhyJNDXHi763ZErt/t+f4ZQ348=
Subject key identifier:   19:E2:09:ED:E9:AD:F7:F8:C6:E8:23:EA:1C:C2:9F:9F:2B:FE:DC:6B
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       55C10EF2DE1E4D39064698B5F3AFD156CAA253DC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc372e7b-796d-474f-9081-c4d593d48cd3.roa
Signing time:             Sun 09 Aug 2026 00:00:05 +0000
ROA not before:           Sun 09 Aug 2026 00:00:05 +0000
ROA not after:            Sat 07 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:8100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c1:0e:f2:de:1e:4d:39:06:46:98:b5:f3:af:d1:56:ca:a2:53:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  9 00:00:05 2026 GMT
            Not After : Nov  7 23:59:59 2026 GMT
        Subject: serialNumber=042681f6ee96ac3f47a4b9d3957ca6fced67dc86ccb9f7a4cebe3351cb6527d2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:ec:5c:9c:81:be:f7:2d:3c:3b:73:79:6f:
                    b7:a4:08:29:4f:08:67:98:11:b7:78:40:24:17:7f:
                    9b:ca:a0:05:cd:b2:cd:e4:ff:93:65:9b:bb:7f:34:
                    46:9a:8d:5a:08:22:e3:b7:74:75:88:1d:14:ab:59:
                    40:a3:ea:18:2a:03:81:d5:62:29:f9:82:ae:21:ac:
                    7d:1d:2e:95:ec:74:39:cd:6f:a7:1c:2c:ab:0f:f1:
                    75:14:80:b0:ab:75:0e:c6:88:64:ad:bf:bb:c5:61:
                    f0:c8:e0:a4:de:f2:11:09:32:e5:3d:fd:ee:a8:eb:
                    23:1e:41:b5:5a:b0:bd:7d:c6:35:f7:fe:a7:ef:86:
                    d3:5d:f1:c1:cc:bc:cc:8a:e8:8c:cb:d2:ab:3e:45:
                    e5:bf:ac:1b:05:da:0d:7f:14:15:36:83:e0:c8:69:
                    3c:83:2f:47:f9:b9:eb:09:0c:df:e1:4c:66:f3:3f:
                    71:00:18:10:99:e0:cd:11:4a:ed:28:52:95:17:5c:
                    7e:64:d1:5d:50:92:f0:96:76:05:ea:77:8e:e7:45:
                    46:5a:88:5c:45:b8:0f:23:f0:aa:3e:fa:59:33:36:
                    db:c4:7f:26:37:f2:8c:7d:4f:de:d6:90:09:ae:9b:
                    45:98:c8:bd:ca:1e:db:61:d7:ee:e5:2f:1d:5c:80:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E2:09:ED:E9:AD:F7:F8:C6:E8:23:EA:1C:C2:9F:9F:2B:FE:DC:6B
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/dc372e7b-796d-474f-9081-c4d593d48cd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:ba:3e:56:1c:df:6a:03:fb:e2:6c:1a:b8:7d:d4:52:d6:ec:
         e4:fc:70:54:54:3a:40:9a:4b:99:80:32:c9:0b:4e:ff:fa:0d:
         85:8c:61:6b:18:0c:e2:e3:b1:bf:ff:33:36:5f:cb:f7:a8:1b:
         be:c3:a8:b8:3d:e7:a1:ca:2a:0f:8e:0c:3e:27:62:d4:d1:17:
         85:b8:70:48:b0:ab:65:26:c8:15:4b:24:8f:59:de:cb:fe:15:
         47:9a:5a:bd:70:88:4c:82:48:42:58:89:b4:28:d3:00:6f:dc:
         52:07:f7:6c:dd:08:78:cc:8f:de:cd:56:6d:cd:e0:ec:78:28:
         ee:f5:24:b6:05:b7:66:70:3d:1b:1b:97:19:d6:09:c8:1b:ee:
         a8:da:f1:2c:6f:75:4c:d8:cc:79:8a:a9:21:1a:f3:90:3c:09:
         42:ab:5c:b3:14:6a:23:3a:a4:04:43:93:7d:05:03:54:25:8f:
         10:eb:91:c3:db:0c:2e:ae:f1:18:f5:c4:42:6d:d8:43:d4:4c:
         98:5b:c8:89:03:8a:06:49:d6:99:95:01:d7:78:48:e4:51:a8:
         93:ef:f2:f5:96:aa:a3:c0:0a:59:a7:32:bc:8e:81:c9:c4:03:
         c6:01:60:50:81:fc:3e:fb:3b:2b:75:cf:32:aa:e9:59:06:e2:
         83:86:8a:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 9 01:41:10 2026 by rpki-client