Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75c1ad27-f269-4ce6-80db-a3279c123941.roa
File:                     75c1ad27-f269-4ce6-80db-a3279c123941.roa (raw, json)
Hash identifier:          tPBK784kUOrIcGbN4583IhK5JN/MDvKaI4SoOqjXd9A=
Subject key identifier:   3E:AB:FB:52:24:97:53:B5:B7:3B:AA:7E:7F:63:4D:BC:89:35:50:F1
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       70FF054B0DDF9DA9923441158898B5018411A177
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75c1ad27-f269-4ce6-80db-a3279c123941.roa
Signing time:             Thu 23 Jul 2026 15:00:04 +0000
ROA not before:           Thu 23 Jul 2026 15:00:04 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:610d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ff:05:4b:0d:df:9d:a9:92:34:41:15:88:98:b5:01:84:11:a1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 23 15:00:04 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=af565ae4e40eb1fdcf4e8bfe795e4e4870ee63c498cef6c7e1b6b524e5ad5e23, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:be:f6:8b:b7:d8:6d:43:63:82:13:3f:2b:
                    60:56:10:04:be:f5:14:a7:67:cc:f2:63:a2:37:a8:
                    18:26:92:23:81:ab:53:66:af:75:60:90:1c:3e:59:
                    5b:4b:12:48:78:d6:f0:56:b9:64:fe:a8:8b:53:71:
                    60:4d:e7:d5:32:8a:60:8f:bd:ce:0b:a2:9a:9f:e1:
                    c2:43:2d:62:f2:f7:bb:6b:7d:e6:31:e6:a4:e7:8d:
                    06:e7:0e:b0:f7:14:f4:f2:f6:b4:19:fd:8a:ee:12:
                    c5:49:aa:f8:d0:ca:36:3b:79:8e:20:33:b4:ee:32:
                    40:c3:e0:63:1b:23:e0:4c:5c:3a:9e:f5:a6:0b:0e:
                    ac:46:d5:e4:dc:3e:a9:da:78:d7:2e:7f:3d:ce:ff:
                    39:da:9f:aa:cd:38:92:bc:d2:4e:e7:e7:f7:d5:0c:
                    8f:11:14:62:ef:d6:4b:70:8d:84:bd:43:3e:f5:16:
                    85:50:64:39:62:be:01:cc:de:6a:f7:e2:73:93:69:
                    0d:f4:4f:6a:76:92:5f:16:a8:a6:f0:54:45:e5:0b:
                    ae:c8:86:d4:d5:f5:b2:92:06:91:35:ae:2b:c3:8f:
                    89:18:af:f3:6f:31:c2:ea:ac:0c:2e:6d:57:76:19:
                    dd:ce:0e:f4:bb:6e:54:8a:f8:1a:80:c4:c2:ab:be:
                    11:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AB:FB:52:24:97:53:B5:B7:3B:AA:7E:7F:63:4D:BC:89:35:50:F1
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75c1ad27-f269-4ce6-80db-a3279c123941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:610d::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:c5:40:4e:16:47:72:1c:e2:92:e0:1d:51:a2:6a:d4:78:b2:
         df:45:e7:04:bc:73:f5:f8:24:5b:55:e1:27:57:7e:64:2d:ec:
         03:c7:01:2f:3b:4c:8e:40:af:12:ac:4d:20:9a:02:f0:0d:7f:
         f6:61:33:1c:0e:1a:eb:e9:ec:46:5d:d9:d9:79:90:bf:af:34:
         d6:b9:a4:11:97:03:a7:dd:24:a9:4d:de:ca:8e:f3:83:d9:73:
         e1:a4:e2:98:42:32:0d:d8:48:21:e8:52:a7:c8:cb:48:11:e4:
         86:bd:5c:65:3a:87:ae:78:10:35:31:c8:6f:49:c1:05:79:d6:
         05:8e:e8:0c:6b:b2:60:d7:4c:e0:27:90:cd:ec:d6:1a:48:65:
         7f:8a:d6:d1:e2:ad:b4:00:7c:62:9f:96:37:97:e1:71:2b:02:
         5c:55:ce:d4:8f:64:02:95:aa:7b:b1:97:97:2c:e9:62:64:35:
         83:85:57:e1:f3:82:21:bf:79:01:16:c9:68:8e:2a:86:22:9d:
         35:ec:b8:7f:90:a5:9a:31:c5:8d:80:d8:ea:b6:8c:66:3e:1c:
         35:c2:03:8b:93:b5:31:9b:27:7c:33:ba:a8:02:7d:d2:8d:60:
         a8:e4:03:d8:d9:88:45:a1:71:29:02:35:9d:73:a2:d7:be:fa:
         a0:11:1e:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:47 2026 by rpki-client