Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/93bd8041-4018-45ab-ad29-ec9c12c01fe3.roa
File:                     93bd8041-4018-45ab-ad29-ec9c12c01fe3.roa (raw, json)
Hash identifier:          jSJDy1YVVTkLb5AeQMw7LfotadoN1DQdoWqAaRG90sg=
Subject key identifier:   93:04:03:BD:D9:20:AC:87:B5:72:91:F1:0B:B9:A9:31:B3:E5:D2:2C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       05167A3F8F8F0852790CDB5F6C0B084C14F76E4D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/93bd8041-4018-45ab-ad29-ec9c12c01fe3.roa
Signing time:             Thu 23 Jul 2026 15:10:37 +0000
ROA not before:           Thu 23 Jul 2026 15:10:37 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:16:7a:3f:8f:8f:08:52:79:0c:db:5f:6c:0b:08:4c:14:f7:6e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 23 15:10:37 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=ec20b12804d065199b33e38c3a2d55ec0d262feac8dcb9cba9a607913eddf7d1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:77:82:9e:3e:6d:e5:e1:66:3f:95:05:10:
                    62:8d:a6:17:f1:45:be:32:8d:57:a1:01:8b:a1:ec:
                    1a:ed:99:1d:56:1b:8b:85:3a:bd:ee:02:90:01:25:
                    32:0b:a8:51:f6:b5:c0:12:80:47:f6:a8:04:39:e7:
                    36:f8:19:44:11:7d:dd:9a:10:fd:c0:bb:0e:5d:05:
                    0a:34:f7:31:8a:b1:66:8d:cf:af:8f:6c:b3:e9:e2:
                    04:94:47:79:a2:22:a2:c0:8f:6f:78:ff:32:1c:15:
                    a7:46:a6:db:68:e5:a1:cf:89:6a:84:be:6c:e6:1d:
                    0c:07:9c:38:5c:fa:f6:4e:49:5e:5b:d9:18:68:b4:
                    73:d5:46:f1:a4:93:f4:71:d0:35:08:1c:e7:a2:25:
                    b1:43:c3:e5:90:3a:f1:95:33:e9:76:67:78:2f:8c:
                    16:77:68:4f:27:cc:75:fb:b2:8e:e8:78:7b:7d:8d:
                    d2:00:5c:4c:a8:90:9d:ec:1b:46:e7:6f:e5:58:99:
                    e2:09:73:34:66:d3:bb:4e:ec:5c:59:b5:3d:c0:88:
                    ac:9b:97:08:4a:a3:48:4e:ae:da:3e:af:99:e3:f3:
                    05:82:03:ae:ef:a5:84:f4:a0:db:99:53:f8:cb:6b:
                    24:6f:3d:77:0e:b9:86:b9:73:81:f5:39:4f:72:41:
                    84:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:04:03:BD:D9:20:AC:87:B5:72:91:F1:0B:B9:A9:31:B3:E5:D2:2C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/93bd8041-4018-45ab-ad29-ec9c12c01fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6104::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:d6:53:04:bf:d8:6e:b2:a0:d2:d5:be:88:9d:ff:a9:fa:40:
         09:d8:42:ab:56:36:54:4f:3e:73:33:8e:86:f4:0a:4d:7f:90:
         d0:db:f6:25:af:23:5b:25:d9:3e:ba:19:d1:50:5c:bc:76:a3:
         b3:e2:c1:2b:65:1e:c4:31:18:61:2f:be:4c:34:64:53:b9:e9:
         ec:fb:3d:06:29:94:62:e6:cd:03:5a:4c:1c:af:5b:d6:ac:af:
         53:bb:67:db:d6:49:4d:e9:7c:d0:bd:48:54:9f:2c:08:58:19:
         11:46:56:24:31:1d:f0:d0:14:9d:d1:fa:63:ac:e8:21:3c:8f:
         0c:4e:86:28:ef:d9:9b:d4:4c:35:02:ea:ed:26:3e:c9:61:e8:
         55:17:14:8c:de:88:3a:01:3f:d2:fa:50:4e:b0:a6:c9:29:db:
         71:03:c3:89:ea:af:27:84:e0:68:78:b2:2d:4b:e9:2a:24:6d:
         2c:f6:0a:23:7c:14:f3:ff:55:ee:7f:49:a3:2b:ec:5e:39:1f:
         23:53:20:c8:96:07:45:67:70:46:52:3a:d4:90:34:13:33:d0:
         43:d4:b5:b2:8d:d2:b0:9a:a6:f1:cb:5c:8e:df:91:c1:21:c8:
         d2:ee:d7:76:c1:7e:c2:e6:bd:2f:72:af:93:49:62:46:2a:b0:
         32:cf:64:c1
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUBRZ6P4+PCFJ5DNtfbAsITBT3bk0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDM3WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzIwYjEyODA0ZDA2NTE5OWIzM2UzOGMzYTJkNTVlYzBk
MjYyZmVhYzhkY2I5Y2JhOWE2MDc5MTNlZGRmN2QxMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9K3eCnj5t5eFmP5UFEGKNphfxRb4yjVehAYuh7BrtmR1W
G4uFOr3uApABJTILqFH2tcASgEf2qAQ55zb4GUQRfd2aEP3Auw5dBQo09zGKsWaN
z6+PbLPp4gSUR3miIqLAj294/zIcFadGptto5aHPiWqEvmzmHQwHnDhc+vZOSV5b
2RhotHPVRvGkk/Rx0DUIHOeiJbFDw+WQOvGVM+l2Z3gvjBZ3aE8nzHX7so7oeHt9
jdIAXEyokJ3sG0bnb+VYmeIJczRm07tO7FxZtT3AiKyblwhKo0hOrto+r5nj8wWC
A67vpYT0oNuZU/jLayRvPXcOuYa5c4H1OU9yQYQfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUkwQDvdkgrIe1cpHxC7mpMbPl0iwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzkzYmQ4MDQxLTQwMTgtNDVhYi1hZDI5LWVjOWMxMmMwMWZlMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYQQwDQYJKoZIhvcNAQELBQADggEBACfWUwS/2G6yoNLVvoid/6n6
QAnYQqtWNlRPPnMzjob0Ck1/kNDb9iWvI1sl2T66GdFQXLx2o7PiwStlHsQxGGEv
vkw0ZFO56ez7PQYplGLmzQNaTByvW9asr1O7Z9vWSU3pfNC9SFSfLAhYGRFGViQx
HfDQFJ3R+mOs6CE8jwxOhijv2ZvUTDUC6u0mPslh6FUXFIzeiDoBP9L6UE6wpskp
23EDw4nqryeE4Gh4si1L6SokbSz2CiN8FPP/Ve5/SaMr7F45HyNTIMiWB0VncEZS
OtSQNBMz0EPUtbKN0rCapvHLXI7fkcEhyNLu13bBfsLmvS9yr5NJYkYqsDLPZME=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:35:49 2026 by rpki-client