Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ee334bd-d86b-455a-ac15-6e83b3b11d16.roa
File:                     4ee334bd-d86b-455a-ac15-6e83b3b11d16.roa (raw, json)
Hash identifier:          RmP/y0gVLT9+41l623fIJC3BNzsaP7c/efXZBQ7BZsQ=
Subject key identifier:   55:8D:21:BF:13:9A:A8:BB:51:1A:46:F0:FE:E7:6C:C5:C2:B4:71:0B
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       64C6FB4DED91E72FB8193731BE6C8C8F6A820AB5
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ee334bd-d86b-455a-ac15-6e83b3b11d16.roa
Signing time:             Fri 03 Apr 2026 02:30:11 +0000
ROA not before:           Fri 03 Apr 2026 02:30:11 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:e11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c6:fb:4d:ed:91:e7:2f:b8:19:37:31:be:6c:8c:8f:6a:82:0a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Apr  3 02:30:11 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=285a3878939c5b05ff0b8a638e2989dec2f5a0659d40fdd07550e4c9b3197e0d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:15:d6:b3:87:71:a0:e9:d6:11:3d:fe:72:
                    2e:f5:b3:e5:6a:d6:58:35:c9:4b:b9:f5:d3:ec:89:
                    f1:31:94:1c:23:06:5f:96:92:c2:57:03:c8:08:06:
                    32:87:7c:4e:27:81:60:8a:95:23:e9:f8:5b:be:97:
                    fe:20:3f:39:fe:e8:21:f7:2d:04:e9:33:66:d0:50:
                    67:1a:8f:91:1f:03:fb:b5:20:2b:72:68:7c:27:0e:
                    58:87:58:c8:16:0b:3a:ff:05:ce:6d:f8:f6:81:db:
                    07:56:60:5a:d3:ed:64:cb:d4:f6:83:dd:32:41:b6:
                    09:99:0b:fe:84:e8:87:94:f7:36:e6:ce:1f:0d:0b:
                    a1:94:19:3d:a5:1a:d7:fb:76:73:ef:2b:eb:8a:33:
                    21:5c:4b:2d:db:0b:45:d6:f0:f2:97:12:5e:1a:1f:
                    5c:6d:f2:eb:9c:50:30:6e:46:c9:3e:7d:e7:56:66:
                    a3:57:31:e0:35:e8:d8:4c:01:95:12:d7:1d:19:1c:
                    8c:49:87:da:c2:3c:04:0c:51:b5:89:51:d6:41:0e:
                    e8:5a:91:32:cf:38:ef:99:a3:f2:0b:c4:7a:7b:75:
                    1b:6b:f2:3a:0d:33:59:a9:08:8e:e4:f8:93:24:19:
                    8d:98:db:d6:5a:e2:ca:49:c4:c6:7f:4f:bd:5b:ff:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8D:21:BF:13:9A:A8:BB:51:1A:46:F0:FE:E7:6C:C5:C2:B4:71:0B
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ee334bd-d86b-455a-ac15-6e83b3b11d16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:e11::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:21:ac:bd:26:a0:cb:09:29:5a:bd:dc:be:95:1b:30:c1:28:
         a9:1a:95:2c:d9:e1:54:e9:1c:28:0f:31:13:51:26:71:9a:59:
         ed:ed:76:62:79:12:60:1b:85:c0:f3:62:4a:f9:ea:4a:38:26:
         5a:ae:74:5f:28:67:d3:6f:af:1a:9c:15:91:44:ea:21:47:88:
         6a:78:38:bf:7f:2e:04:c2:18:dc:1e:2d:c9:6c:40:89:a9:71:
         a2:f8:bb:f5:b4:6b:a7:02:ea:25:9a:6d:d7:93:1e:9f:0b:56:
         72:08:f0:d4:12:a1:2b:2c:5a:68:da:4a:5a:80:f9:a2:7b:1c:
         74:1a:c6:6b:2b:b3:50:15:3c:37:0a:0f:19:42:4b:25:dc:52:
         b7:44:41:a4:eb:80:39:4c:69:d7:87:79:3c:bf:f9:fd:29:13:
         12:44:4b:31:e7:5b:ae:8f:a6:f5:8c:c5:d5:61:53:aa:c6:3b:
         cd:1e:19:5e:39:6b:ab:be:9f:f0:94:8b:86:9f:d0:a1:41:3d:
         68:75:94:14:2a:c7:83:e0:ab:5e:e2:6d:d6:91:3c:f9:4d:be:
         fb:ab:98:67:6e:ea:fb:80:e8:8c:54:6c:a8:18:cb:23:b9:7a:
         e8:d9:d6:fd:7f:31:29:e5:64:fa:dd:1b:8e:0b:1f:a3:cf:f4:
         42:1f:b6:8d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZMb7Te2R5y+4GTcxvmyMj2qCCrUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDAzMDIzMDExWhcNMjYwNzAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyODVhMzg3ODkzOWM1YjA1ZmYwYjhhNjM4ZTI5ODlkZWMy
ZjVhMDY1OWQ0MGZkZDA3NTUwZTRjOWIzMTk3ZTBkMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDP5RXWs4dxoOnWET3+ci71s+Vq1lg1yUu59dPsifExlBwj
Bl+WksJXA8gIBjKHfE4ngWCKlSPp+Fu+l/4gPzn+6CH3LQTpM2bQUGcaj5EfA/u1
ICtyaHwnDliHWMgWCzr/Bc5t+PaB2wdWYFrT7WTL1PaD3TJBtgmZC/6E6IeU9zbm
zh8NC6GUGT2lGtf7dnPvK+uKMyFcSy3bC0XW8PKXEl4aH1xt8uucUDBuRsk+fedW
ZqNXMeA16NhMAZUS1x0ZHIxJh9rCPAQMUbWJUdZBDuhakTLPOO+Zo/ILxHp7dRtr
8joNM1mpCI7k+JMkGY2Y29Za4spJxMZ/T71b/wCTAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUVY0hvxOaqLtRGkbw/udsxcK0cQswHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzRlZTMzNGJkLWQ4NmItNDU1YS1hYzE1LTZlODNiM2IxMWQxNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwDhEwDQYJKoZIhvcNAQELBQADggEBAI0hrL0moMsJKVq93L6VGzDB
KKkalSzZ4VTpHCgPMRNRJnGaWe3tdmJ5EmAbhcDzYkr56ko4JlqudF8oZ9Nvrxqc
FZFE6iFHiGp4OL9/LgTCGNweLclsQImpcaL4u/W0a6cC6iWabdeTHp8LVnII8NQS
oSssWmjaSlqA+aJ7HHQaxmsrs1AVPDcKDxlCSyXcUrdEQaTrgDlMadeHeTy/+f0p
ExJESzHnW66PpvWMxdVhU6rGO80eGV45a6u+n/CUi4af0KFBPWh1lBQqx4Pgq17i
bdaRPPlNvvurmGdu6vuA6IxUbKgYyyO5eujZ1v1/MSnlZPrdG44LH6PP9EIfto0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:21 2026 by rpki-client