Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e46b344-1c35-4502-912b-8ec7b80005d8.roa
File:                     1e46b344-1c35-4502-912b-8ec7b80005d8.roa (raw, json)
Hash identifier:          IcuVylNGKf3WorIxDVCkt3lH+i4gVeBVkRyz5SQPq+8=
Subject key identifier:   9F:82:8F:6A:35:BB:61:6B:C1:35:17:A6:17:1D:D4:83:E7:4E:32:01
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       6628F494F811AED66D45095D75734574B42D5DCD
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e46b344-1c35-4502-912b-8ec7b80005d8.roa
Signing time:             Thu 23 Jul 2026 15:10:32 +0000
ROA not before:           Thu 23 Jul 2026 15:10:32 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:610f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:28:f4:94:f8:11:ae:d6:6d:45:09:5d:75:73:45:74:b4:2d:5d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 23 15:10:32 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=38d451ff96aed1795dd73b898ef19e6536d29890e58eb74d3070dc20b15db2a4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:88:b5:d2:2a:52:5a:db:1b:ed:f0:a2:4f:55:
                    66:1c:bd:19:5b:62:1f:03:cc:de:8e:7d:19:82:8b:
                    0c:2f:40:42:b7:c4:97:a0:36:05:ef:5c:24:e6:4f:
                    21:d3:1b:01:8c:0b:f2:73:b2:30:35:08:97:1b:4f:
                    9e:39:05:38:a1:3e:83:ef:7d:0c:88:d9:b4:d0:9d:
                    1c:21:3a:9d:0a:68:7e:61:e0:cb:7c:c1:6b:6a:64:
                    55:72:9c:0e:52:91:ea:61:2a:5e:3e:50:e5:e2:65:
                    08:c2:88:19:7a:39:7b:28:1a:c5:d3:b4:c9:1c:f1:
                    01:c1:a0:26:83:94:6f:fe:07:6c:65:be:dd:30:cb:
                    19:d8:de:08:51:fb:a6:8c:af:4c:2b:05:61:93:02:
                    3f:0b:2a:fa:2d:bb:0f:56:9f:ce:96:96:5c:bd:69:
                    bb:bb:36:e2:ad:27:5f:5d:8b:03:3a:c2:be:aa:13:
                    a1:56:83:e6:be:1b:16:a2:d3:ea:9b:51:b8:eb:02:
                    2e:39:d9:d1:4c:77:06:2c:b3:22:0e:b2:84:5f:24:
                    9d:e3:c5:45:55:66:10:01:47:44:f3:a7:e6:a6:3e:
                    cc:ee:d8:19:ee:03:f0:52:9e:0f:54:21:9c:65:39:
                    5c:4c:26:d9:1f:4c:13:0c:c9:eb:de:d8:06:51:a5:
                    9e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:82:8F:6A:35:BB:61:6B:C1:35:17:A6:17:1D:D4:83:E7:4E:32:01
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1e46b344-1c35-4502-912b-8ec7b80005d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:610f::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:f7:36:d8:25:fa:aa:2e:79:7a:95:1a:ef:05:82:b4:14:48:
         34:52:06:67:17:77:4a:9a:72:da:48:a2:66:48:18:21:87:45:
         b2:f4:7e:f6:a7:64:ce:e1:8f:65:fd:8a:81:a3:01:35:8e:8a:
         77:31:74:c8:e3:8f:2d:cb:2d:8d:d2:55:35:27:92:3d:ce:7a:
         3e:bb:8a:a8:9c:a3:c7:94:f9:54:8d:82:55:94:bf:ff:81:ee:
         91:26:48:c9:e1:c4:29:08:97:6b:db:0c:2e:3c:a4:87:b2:1d:
         42:2f:60:ef:94:86:af:3a:4d:e7:c0:30:08:06:19:e9:8f:79:
         4d:a5:61:de:00:5f:44:4b:52:fa:46:22:ea:a2:ee:f9:b4:4b:
         12:ad:5c:16:47:49:ac:60:58:0e:d0:06:c0:93:ed:52:9c:fd:
         a0:93:48:43:4a:26:ff:eb:22:97:1e:fa:56:a0:30:ec:92:22:
         78:60:57:30:38:1a:be:4f:d5:42:66:04:30:3f:84:19:cd:e4:
         4e:26:9d:8a:aa:0f:27:54:31:b6:6d:15:37:30:57:15:cd:2f:
         ef:7f:24:ef:79:3d:2b:f9:6a:53:0f:7f:51:d2:ea:c0:5b:e4:
         8f:6f:00:a1:2b:b1:f0:a5:f4:fb:4a:6f:49:48:80:2a:21:27:
         4f:75:a8:3b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZij0lPgRrtZtRQlddXNFdLQtXc0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDMyWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzOGQ0NTFmZjk2YWVkMTc5NWRkNzNiODk4ZWYxOWU2NTM2
ZDI5ODkwZTU4ZWI3NGQzMDcwZGMyMGIxNWRiMmE0MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwiLXSKlJa2xvt8KJPVWYcvRlbYh8DzN6OfRmCiwwvQEK3
xJegNgXvXCTmTyHTGwGMC/JzsjA1CJcbT545BTihPoPvfQyI2bTQnRwhOp0KaH5h
4Mt8wWtqZFVynA5SkephKl4+UOXiZQjCiBl6OXsoGsXTtMkc8QHBoCaDlG/+B2xl
vt0wyxnY3ghR+6aMr0wrBWGTAj8LKvotuw9Wn86Wlly9abu7NuKtJ19diwM6wr6q
E6FWg+a+Gxai0+qbUbjrAi452dFMdwYssyIOsoRfJJ3jxUVVZhABR0Tzp+amPszu
2BnuA/BSng9UIZxlOVxMJtkfTBMMyeve2AZRpZ7nAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUn4KPajW7YWvBNRemFx3Ug+dOMgEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzFlNDZiMzQ0LTFjMzUtNDUwMi05MTJiLThlYzdiODAwMDVkOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYQ8wDQYJKoZIhvcNAQELBQADggEBABD3Ntgl+qoueXqVGu8FgrQU
SDRSBmcXd0qactpIomZIGCGHRbL0fvanZM7hj2X9ioGjATWOincxdMjjjy3LLY3S
VTUnkj3Oej67iqico8eU+VSNglWUv/+B7pEmSMnhxCkIl2vbDC48pIeyHUIvYO+U
hq86TefAMAgGGemPeU2lYd4AX0RLUvpGIuqi7vm0SxKtXBZHSaxgWA7QBsCT7VKc
/aCTSENKJv/rIpce+lagMOySInhgVzA4Gr5P1UJmBDA/hBnN5E4mnYqqDydUMbZt
FTcwVxXNL+9/JO95PSv5alMPf1HS6sBb5I9vAKErsfCl9PtKb0lIgCohJ091qDs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:17 2026 by rpki-client