Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e0124927-afa7-4267-814d-16ec9e0135d2.roa
File:                     e0124927-afa7-4267-814d-16ec9e0135d2.roa (raw, json)
Hash identifier:          adrV1U9WBKGYsRHlv2yeK1M6eH4OB9BifSNQ+5guX0U=
Subject key identifier:   07:53:29:81:6B:8D:97:3C:D7:A5:C9:8B:E8:04:96:FF:4D:F6:44:16
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7EC29CC0245DEFEAE718C3A41CEF60592D57CEF2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e0124927-afa7-4267-814d-16ec9e0135d2.roa
Signing time:             Tue 19 May 2026 04:10:40 +0000
ROA not before:           Tue 19 May 2026 04:10:40 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c2:9c:c0:24:5d:ef:ea:e7:18:c3:a4:1c:ef:60:59:2d:57:ce:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 19 04:10:40 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=f7d1514e5e208181054cabd0e214c07679ffb6526f40b55d704bf60ec05101a4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:19:fa:e3:b4:95:13:dc:34:54:20:a2:64:
                    9d:39:ce:1f:33:79:93:0d:81:59:e4:8f:b7:a9:ac:
                    86:1a:dd:ef:bd:04:17:6b:6d:c9:8e:b8:19:10:d0:
                    13:02:d4:6f:71:08:d9:16:d2:bd:44:55:8e:fd:26:
                    b6:25:ca:1f:3e:6f:14:01:87:53:dc:05:71:58:4d:
                    ae:fd:c6:6f:8a:8e:70:59:17:19:e3:13:ff:4f:97:
                    a6:f9:6b:36:bc:16:dc:de:87:39:ed:a9:75:62:56:
                    2a:0d:9b:88:39:85:a8:d8:84:e3:da:0b:00:16:81:
                    d4:0d:65:74:e6:fe:e7:63:76:37:c5:ce:19:1b:e6:
                    64:30:22:87:84:d9:57:44:f4:2a:ac:2d:4c:16:4c:
                    dd:ff:a2:48:33:28:08:c6:16:ea:01:f2:2d:41:68:
                    cc:06:96:78:8f:5d:45:0f:73:2c:cb:e9:48:b5:69:
                    e6:a9:75:cf:c1:19:fe:71:ba:37:74:7a:05:f0:8a:
                    cc:f0:11:68:28:3a:b0:b1:22:71:e3:7f:de:12:92:
                    37:ef:f5:a6:6f:a1:81:4a:d8:56:46:34:b2:28:7c:
                    f7:b8:57:d3:69:2c:a2:93:67:7e:49:3a:26:28:2a:
                    fd:ce:4d:aa:77:48:2e:44:aa:b4:20:9b:1f:a6:d7:
                    4e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:53:29:81:6B:8D:97:3C:D7:A5:C9:8B:E8:04:96:FF:4D:F6:44:16
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e0124927-afa7-4267-814d-16ec9e0135d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:b8:25:0c:d8:32:33:51:c2:ec:fc:45:61:d3:12:88:77:30:
         ae:16:c2:d1:63:ee:77:fa:34:1d:48:09:91:fa:45:17:ac:39:
         9d:32:2f:ac:da:53:fe:60:63:08:d3:0d:54:f5:9f:be:a8:5f:
         59:7a:62:d9:65:13:40:75:dd:64:26:be:ea:fa:c0:41:cb:20:
         58:f9:9d:88:58:e7:35:33:8d:05:47:9e:82:37:7b:f4:07:58:
         01:b0:a6:5e:a7:57:25:16:f3:bb:3a:c4:39:d1:3b:a1:ea:dc:
         d5:84:6c:c1:98:be:88:50:df:c1:45:54:75:fd:f7:6c:58:ed:
         f8:e2:86:14:59:33:97:e1:51:40:fb:f4:a4:78:92:99:91:11:
         69:81:76:e2:fc:8e:67:78:8f:bf:20:0e:69:c7:1f:34:10:32:
         9f:70:bb:1c:10:c4:e7:f5:75:d4:79:bf:79:7f:4b:8c:84:5d:
         02:de:32:e4:fc:5a:a8:c9:18:86:3c:56:7a:ea:02:0b:13:c9:
         e0:57:0c:b1:ce:23:cc:cc:96:96:b0:b6:67:fc:31:ac:cf:c6:
         58:f9:8f:9c:1c:f1:07:db:81:4d:34:7b:a7:0d:99:ee:74:e9:
         fd:ca:c5:c6:f7:f7:64:6d:88:21:38:c3:0c:7a:da:06:9d:e8:
         56:1b:cb:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 23 01:19:06 2026 by rpki-client