Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc882972-2da5-4c53-a9e6-a34bfb909ce0.roa
File:                     fc882972-2da5-4c53-a9e6-a34bfb909ce0.roa (raw, json)
Hash identifier:          qXp/1zvmuTnbj4x/u/WszlQVDK6ZqcxqZa17+cvYwvw=
Subject key identifier:   B3:75:54:33:17:E8:DD:FD:A9:BC:A3:D0:CA:55:16:3D:D5:8D:1A:56
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       0153F091E62F9E43D8F1EFB7C91BE480B69E01E2
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc882972-2da5-4c53-a9e6-a34bfb909ce0.roa
Signing time:             Sat 09 May 2026 00:10:06 +0000
ROA not before:           Sat 09 May 2026 00:10:06 +0000
ROA not after:            Fri 07 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f3:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:53:f0:91:e6:2f:9e:43:d8:f1:ef:b7:c9:1b:e4:80:b6:9e:01:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May  9 00:10:06 2026 GMT
            Not After : Aug  7 23:59:59 2026 GMT
        Subject: serialNumber=239889f71a64f71a93a500a7d3c42fd0474b7a8e414259f0ef52635a4c467120, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:36:b9:48:ba:d6:12:1a:d6:c0:bd:e3:6d:
                    ae:3e:a7:ea:bb:38:e6:18:70:28:6c:76:d8:e1:49:
                    b0:51:df:86:d2:c8:d3:64:2c:97:a2:15:f1:05:ab:
                    b8:6d:fc:a2:00:4f:00:ca:51:45:ea:17:f7:09:73:
                    c2:c3:eb:d8:a4:e7:a6:de:a2:f7:42:d2:6e:73:97:
                    76:35:ed:a6:6e:a1:18:21:27:7f:74:b5:51:21:bc:
                    e7:43:96:3a:ff:88:d6:d0:c7:83:bf:59:bf:4b:2f:
                    bc:98:55:55:72:50:88:de:55:d8:a5:12:65:39:b6:
                    38:2e:62:bd:ca:ba:d1:38:66:9d:71:41:aa:df:ad:
                    b6:9e:ee:75:1d:a0:03:ba:25:74:cc:1d:d2:59:27:
                    23:f7:8b:52:1b:ac:ab:c2:a8:32:7c:e4:b3:29:bf:
                    72:51:52:5c:ee:ad:54:04:0f:0f:4c:1a:86:8f:c0:
                    fb:b4:1f:f0:b3:5d:6a:45:40:5c:07:96:13:4f:67:
                    84:16:a4:3f:66:6d:32:76:b6:56:74:c9:eb:13:ec:
                    bd:08:82:e2:26:23:db:19:f4:55:8a:83:91:51:67:
                    e9:9a:4c:1a:98:85:cd:23:6a:02:cf:b4:d0:71:59:
                    ac:a8:53:09:a3:d7:c7:ba:ea:5e:22:5d:c6:3e:61:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:75:54:33:17:E8:DD:FD:A9:BC:A3:D0:CA:55:16:3D:D5:8D:1A:56
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc882972-2da5-4c53-a9e6-a34bfb909ce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f3:f000::/44

    Signature Algorithm: sha256WithRSAEncryption
         43:b0:49:c5:a0:3f:ef:60:77:c8:c2:75:f4:a0:db:2b:f9:29:
         f7:1c:1f:8e:34:a3:a4:83:94:20:0b:95:1c:7b:a4:95:bf:f8:
         70:76:84:93:ec:0f:c4:86:03:42:fb:4c:46:79:99:db:2e:19:
         04:2a:9e:da:25:cc:b5:2d:a1:45:1f:74:ac:50:79:87:72:b1:
         70:6a:7b:53:1f:75:fe:4a:be:88:6e:0b:36:97:51:6e:ca:1b:
         ee:80:7e:9e:16:25:ff:8e:75:18:38:6c:f7:8f:dc:b9:0b:a7:
         c1:ea:a9:d7:ee:33:73:19:ac:88:92:9a:cc:d2:cf:88:e9:10:
         d4:08:1a:22:1f:9b:7a:02:4e:5c:51:05:2e:e2:d5:b8:3b:df:
         bb:07:17:41:92:7e:02:93:7a:c2:51:8b:eb:40:bb:e1:7f:23:
         dc:db:c4:37:37:55:6c:bb:39:8d:e2:9c:6a:e4:78:b3:f2:f7:
         1b:8a:cb:5e:9b:e6:a8:ec:85:c3:d4:c0:c2:77:ac:e7:64:38:
         e7:b1:75:d7:c9:b4:fb:94:35:28:d7:66:a5:9b:56:d5:eb:69:
         d1:70:ec:a5:14:20:80:31:1b:5f:4e:1c:dd:c3:33:b1:6e:68:
         27:21:d8:44:87:3a:ce:43:59:b9:6d:98:56:b5:35:de:0c:01:
         5e:2b:7f:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:25:04 2026 by rpki-client