Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fb1ebad2-e86d-4515-9576-a075e9827e71.roa
File:                     fb1ebad2-e86d-4515-9576-a075e9827e71.roa (raw, json)
Hash identifier:          CHdFTUMkRELBsNfAxKIUAhf6vmqft+nfSP+xTxjPytw=
Subject key identifier:   C6:B4:13:7C:D5:EF:93:86:2B:BD:7D:14:1F:C3:E6:AA:02:B6:FF:87
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       50E75CC856FB01B6DFB2454EE86C9713E637D295
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fb1ebad2-e86d-4515-9576-a075e9827e71.roa
Signing time:             Fri 14 Aug 2026 18:02:08 +0000
ROA not before:           Fri 14 Aug 2026 18:02:08 +0000
ROA not after:            Thu 12 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:700::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e7:5c:c8:56:fb:01:b6:df:b2:45:4e:e8:6c:97:13:e6:37:d2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Aug 14 18:02:08 2026 GMT
            Not After : Nov 12 23:59:59 2026 GMT
        Subject: serialNumber=263c665e76f8c00afcd10047500d8ffc7b556817dc11f7590810844011eaf794, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:89:25:99:91:db:9d:64:57:6a:67:74:65:8d:
                    01:4a:a4:0d:9b:72:9a:9e:98:5d:b2:1e:3f:a5:18:
                    e4:c3:87:3c:db:f3:f3:e1:cb:7a:30:c4:a7:71:76:
                    4b:c1:fb:f2:fe:c6:48:e1:03:5e:0d:21:a2:6b:43:
                    c2:02:06:ff:ef:e6:68:18:52:61:6b:8f:3d:ea:f7:
                    ad:7e:62:f5:8d:45:85:dd:85:01:5c:f5:3e:ad:d7:
                    b1:c8:18:49:71:e7:9a:ff:c9:7d:04:da:c7:ef:64:
                    17:95:e9:59:2c:e7:cf:68:71:34:9c:b4:af:f7:8b:
                    de:c1:fb:09:29:eb:cb:f4:bf:1c:ac:32:0e:2c:09:
                    7c:82:27:96:e6:07:f0:28:49:c4:24:22:ec:dc:25:
                    cc:3a:2b:25:4e:73:87:b3:a7:61:bf:0e:0f:3d:61:
                    ac:7b:2e:37:00:e1:f3:c8:39:23:be:51:62:a0:b4:
                    0f:a1:94:4b:ed:f5:74:9e:34:a5:2e:2e:6c:0a:a2:
                    8f:60:39:bf:f8:a5:b8:64:3b:1c:c8:cb:dc:29:34:
                    e4:09:29:f2:a3:9c:c2:6d:bf:3b:4e:8f:da:b6:b9:
                    14:a3:11:94:3a:a8:9d:56:35:ac:7e:54:78:dc:66:
                    85:6a:49:f2:27:e3:3f:60:10:21:79:a1:01:81:be:
                    94:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B4:13:7C:D5:EF:93:86:2B:BD:7D:14:1F:C3:E6:AA:02:B6:FF:87
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fb1ebad2-e86d-4515-9576-a075e9827e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:700::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:bf:f1:52:4b:fd:67:e4:19:da:42:10:b4:4f:82:5a:78:2d:
         f8:33:06:52:54:fb:25:6f:a1:e3:ed:67:fb:0b:1c:1c:93:6d:
         43:a6:bf:4a:a7:5a:48:57:f8:f2:79:4d:de:a7:6d:14:b2:87:
         e1:c4:56:57:f6:cd:d7:42:b7:d5:89:22:14:e9:98:9f:c6:d9:
         15:f3:97:84:8f:cb:d8:9c:6f:09:a1:7a:5e:8e:85:f8:15:70:
         87:2e:54:8c:bd:12:c2:7a:4b:be:aa:d0:5a:01:a3:b5:37:59:
         77:b2:7e:c9:9f:61:e4:57:6b:41:f3:66:06:45:f3:8f:25:e6:
         ca:f2:7d:85:6c:3d:d5:1d:a6:e8:63:64:6b:85:af:d4:f4:55:
         62:b2:a8:84:60:04:aa:80:e3:ca:66:56:87:8a:d0:5f:57:df:
         45:45:00:26:1f:9c:59:87:53:0f:ce:42:1c:9e:24:d6:79:61:
         40:f0:fc:21:91:a2:9d:da:98:36:6e:10:e2:f7:09:e6:e3:a6:
         0f:76:eb:74:29:20:8f:77:fa:15:cf:71:a4:a0:99:31:3c:83:
         cc:30:37:7f:9e:11:66:83:27:40:25:56:1c:a2:36:90:2c:ae:
         0b:af:07:17:13:a1:6d:ae:31:08:31:3b:e6:18:a0:70:87:98:
         31:2e:ea:6b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUOdcyFb7AbbfskVO6GyXE+Y30pUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODE0MTgwMjA4WhcNMjYxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNjNjNjY1ZTc2ZjhjMDBhZmNkMTAwNDc1MDBkOGZmYzdi
NTU2ODE3ZGMxMWY3NTkwODEwODQ0MDExZWFmNzk0MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNiSWZkdudZFdqZ3RljQFKpA2bcpqemF2yHj+lGOTDhzzb
8/Phy3owxKdxdkvB+/L+xkjhA14NIaJrQ8ICBv/v5mgYUmFrjz3q961+YvWNRYXd
hQFc9T6t17HIGElx55r/yX0E2sfvZBeV6Vks589ocTSctK/3i97B+wkp68v0vxys
Mg4sCXyCJ5bmB/AoScQkIuzcJcw6KyVOc4ezp2G/Dg89Yax7LjcA4fPIOSO+UWKg
tA+hlEvt9XSeNKUuLmwKoo9gOb/4pbhkOxzIy9wpNOQJKfKjnMJtvztOj9q2uRSj
EZQ6qJ1WNax+VHjcZoVqSfIn4z9gECF5oQGBvpTPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUxrQTfNXvk4YrvX0UH8PmqgK2/4cwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2ZiMWViYWQyLWU4NmQtNDUxNS05NTc2LWEwNzVlOTgyN2U3MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwBwAwDQYJKoZIhvcNAQELBQADggEBACW/8VJL/WfkGdpCELRPglp4
LfgzBlJU+yVvoePtZ/sLHByTbUOmv0qnWkhX+PJ5Td6nbRSyh+HEVlf2zddCt9WJ
IhTpmJ/G2RXzl4SPy9icbwmhel6OhfgVcIcuVIy9EsJ6S76q0FoBo7U3WXeyfsmf
YeRXa0HzZgZF848l5sryfYVsPdUdpuhjZGuFr9T0VWKyqIRgBKqA48pmVoeK0F9X
30VFACYfnFmHUw/OQhyeJNZ5YUDw/CGRop3amDZuEOL3Cebjpg9263QpII93+hXP
caSgmTE8g8wwN3+eEWaDJ0AlVhyiNpAsrguvBxcToW2uMQgxO+YYoHCHmDEu6ms=
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:09:59 2026 by rpki-client