Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef49247f-e1bb-4e0e-9df0-6edb97404f9e.roa
File:                     ef49247f-e1bb-4e0e-9df0-6edb97404f9e.roa (raw, json)
Hash identifier:          aQcYaldMpfax286c2can0+Cy+hD+89JGoCS2SLDfFfQ=
Subject key identifier:   AA:8C:F1:E9:01:A7:C0:5B:3F:02:40:48:0F:6F:4A:C3:DB:BB:86:7E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5DE73D60F287710FA92B6A65221E58E3C93BDC0C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef49247f-e1bb-4e0e-9df0-6edb97404f9e.roa
Signing time:             Fri 07 Aug 2026 04:20:43 +0000
ROA not before:           Fri 07 Aug 2026 04:20:43 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e300::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e7:3d:60:f2:87:71:0f:a9:2b:6a:65:22:1e:58:e3:c9:3b:dc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug  7 04:20:43 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=1a1d9c1c5b4f5e715f58c16c90cb9a94854384b72e62cf538b4a491fde010d84, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:52:e8:fc:70:a2:10:44:be:31:e7:f4:da:
                    62:82:19:9f:01:32:0d:25:a2:78:27:66:c9:cc:f1:
                    b0:f9:d6:74:44:04:5b:de:76:95:d8:21:4f:4d:6f:
                    3a:7c:68:ea:a0:40:4d:94:f7:b4:9c:c3:f1:9c:b6:
                    81:eb:1e:ac:54:9f:a7:13:fd:c7:16:c6:ff:b0:df:
                    1d:a3:2e:98:a0:34:e0:40:7f:84:bd:91:66:1a:7d:
                    70:00:d8:5a:d1:84:1e:a2:23:ae:2d:44:84:43:34:
                    ef:54:a9:2f:a8:a3:d6:e5:89:3c:7a:b2:ac:31:54:
                    ee:54:6a:8a:17:5e:ff:d4:2a:cd:8c:22:b3:3d:ab:
                    1a:32:6f:0e:9b:13:d4:97:9a:dc:92:19:79:84:f6:
                    fb:93:f4:1e:79:40:19:5a:05:18:6a:e6:b6:05:5f:
                    90:a9:e7:e2:d1:82:7a:f6:f3:3b:8d:bf:3d:a0:8f:
                    88:77:61:5a:44:23:5b:a1:8f:a4:24:22:eb:a0:36:
                    77:ad:68:c5:db:ba:43:37:f3:d3:da:d2:7b:b0:db:
                    7b:f4:2d:19:6e:a6:10:7e:e5:e1:64:6e:5c:2a:fc:
                    75:97:a2:39:f0:58:aa:68:6c:33:d5:72:dd:d1:0e:
                    0b:de:8e:ae:5e:f8:76:28:ec:5b:41:b9:f0:be:7f:
                    e7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8C:F1:E9:01:A7:C0:5B:3F:02:40:48:0F:6F:4A:C3:DB:BB:86:7E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef49247f-e1bb-4e0e-9df0-6edb97404f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e300::/42

    Signature Algorithm: sha256WithRSAEncryption
         36:5b:6e:ba:97:d7:6a:b5:48:ce:f1:69:a9:dd:92:82:6f:83:
         b3:7f:00:a0:cb:73:9f:2c:3e:5a:49:85:06:52:7f:d6:7b:23:
         05:82:51:59:5d:eb:82:43:75:d9:fa:1c:75:ee:59:52:04:1b:
         ee:48:12:f1:cc:43:e7:21:2b:78:2a:52:f4:ff:8f:42:2d:cb:
         77:42:8c:6b:a7:81:1c:18:5d:50:27:76:8d:bf:67:29:af:b1:
         69:06:10:03:b7:1d:df:42:23:b2:99:a8:ac:22:41:df:03:fe:
         ac:a1:6c:3e:aa:e2:5d:98:eb:2b:55:93:97:37:cd:8b:df:a2:
         0c:97:8a:8d:2d:b9:62:19:88:99:22:d5:1c:35:a5:05:11:90:
         2c:db:da:c1:94:65:c3:60:15:5f:dd:07:76:7f:a2:2b:f2:b5:
         c6:f8:8a:02:f8:b4:3d:48:53:01:42:f3:bd:1c:4d:d1:fd:39:
         ef:4d:c5:fc:9b:da:4f:39:73:5d:9d:98:62:cb:ff:97:dd:b1:
         b1:b3:34:c9:37:eb:c0:95:b8:96:bb:c3:d3:77:66:7b:3f:bc:
         41:cc:dd:a2:ee:28:5f:45:40:92:e3:8c:c4:58:d3:ef:45:18:
         25:e4:82:3a:61:c9:2f:be:90:8c:31:bb:b5:81:20:54:be:2f:
         11:64:65:76
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUXec9YPKHcQ+pK2plIh5Y48k73AwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQyMDQzWhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYTFkOWMxYzViNGY1ZTcxNWY1OGMxNmM5MGNiOWE5NDg1
NDM4NGI3MmU2MmNmNTM4YjRhNDkxZmRlMDEwZDg0MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDD21Lo/HCiEES+Mef02mKCGZ8BMg0longnZsnM8bD51nRE
BFvedpXYIU9Nbzp8aOqgQE2U97Scw/GctoHrHqxUn6cT/ccWxv+w3x2jLpigNOBA
f4S9kWYafXAA2FrRhB6iI64tRIRDNO9UqS+oo9bliTx6sqwxVO5UaooXXv/UKs2M
IrM9qxoybw6bE9SXmtySGXmE9vuT9B55QBlaBRhq5rYFX5Cp5+LRgnr28zuNvz2g
j4h3YVpEI1uhj6QkIuugNnetaMXbukM389Pa0nuw23v0LRluphB+5eFkblwq/HWX
ojnwWKpobDPVct3RDgvejq5e+HYo7FtBufC+f+fDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUqozx6QGnwFs/AkBID29Kw9u7hn4wHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2VmNDkyNDdmLWUxYmItNGUwZS05ZGYwLTZlZGI5NzQwNGY5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD74wAwDQYJKoZIhvcNAQELBQADggEBADZbbrqX12q1SM7xaandkoJv
g7N/AKDLc58sPlpJhQZSf9Z7IwWCUVld64JDddn6HHXuWVIEG+5IEvHMQ+chK3gq
UvT/j0Ity3dCjGungRwYXVAndo2/ZymvsWkGEAO3Hd9CI7KZqKwiQd8D/qyhbD6q
4l2Y6ytVk5c3zYvfogyXio0tuWIZiJki1Rw1pQURkCzb2sGUZcNgFV/dB3Z/oivy
tcb4igL4tD1IUwFC870cTdH9Oe9Nxfyb2k85c12dmGLL/5fdsbGzNMk368CVuJa7
w9N3Zns/vEHM3aLuKF9FQJLjjMRY0+9FGCXkgjphyS++kIwxu7WBIFS+LxFkZXY=
-----END CERTIFICATE-----
Generated at Sun Aug 9 01:41:06 2026 by rpki-client