Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5f9da082-c31f-421c-897d-e746677541ef.roa
File:                     5f9da082-c31f-421c-897d-e746677541ef.roa (raw, json)
Hash identifier:          ml9RacgiIC+vrA2B5SSZ8Z2P7aOg8lFG0bcVZR9MUFw=
Subject key identifier:   FB:95:24:DC:D7:67:ED:99:F4:A3:69:C4:9B:51:06:12:BC:8C:EB:3A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       63B19463EF478FA8D79F93C6727D20D362829FB9
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5f9da082-c31f-421c-897d-e746677541ef.roa
Signing time:             Mon 27 Jul 2026 03:10:12 +0000
ROA not before:           Mon 27 Jul 2026 03:10:12 +0000
ROA not after:            Sun 25 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:400::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b1:94:63:ef:47:8f:a8:d7:9f:93:c6:72:7d:20:d3:62:82:9f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jul 27 03:10:12 2026 GMT
            Not After : Oct 25 23:59:59 2026 GMT
        Subject: serialNumber=1b97927ba7c76c2f86537bb343a23c82061dd718cb68e3a15f71aa5240690af9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e5:e0:4a:60:86:3b:93:09:0f:5f:b0:47:7b:
                    78:94:3f:f0:e7:8a:93:84:4a:32:2c:aa:63:17:b4:
                    2e:a4:b4:01:fc:85:bd:83:03:26:b4:41:20:87:84:
                    b0:78:2c:b8:fe:b8:5d:59:cf:5f:72:14:d8:bc:a9:
                    94:8e:9d:c6:a0:4d:78:a9:7f:8c:ce:3b:e7:3b:f6:
                    59:db:0c:c9:87:07:b6:11:92:8d:a1:90:06:16:e6:
                    97:62:b3:15:a5:97:68:5a:df:67:36:fe:91:02:b4:
                    a2:01:5b:ff:df:2c:f9:b5:ac:27:a4:be:a8:6a:f5:
                    01:94:09:21:8e:a7:78:0b:df:c3:3f:c0:19:76:ec:
                    9b:3f:3a:f6:1e:3a:94:ad:a4:5d:4f:f0:91:b4:f8:
                    47:ac:32:2c:d3:84:9b:7a:29:13:6b:b8:57:51:85:
                    f8:19:2c:89:10:2f:2d:37:88:59:3d:b0:60:2b:cf:
                    ae:f4:a2:dd:ba:9c:58:2c:2b:93:41:d3:0c:c1:10:
                    88:d6:e1:3f:77:a1:f3:87:69:e5:68:60:bf:37:81:
                    4b:4d:3f:c7:49:88:91:84:2f:a6:17:f3:f9:42:9e:
                    61:b8:c2:c4:09:74:d4:ee:64:3a:ff:fb:6f:c2:0a:
                    41:68:e5:4b:26:4d:3c:67:a8:65:db:d6:09:20:70:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:95:24:DC:D7:67:ED:99:F4:A3:69:C4:9B:51:06:12:BC:8C:EB:3A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5f9da082-c31f-421c-897d-e746677541ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:400::/44

    Signature Algorithm: sha256WithRSAEncryption
         53:2c:1d:88:ab:71:41:66:3a:68:94:58:a3:1a:45:05:fa:f1:
         69:98:4e:cd:9f:16:57:83:f1:93:62:d7:f4:0d:6b:db:3c:b4:
         a1:0a:36:c7:cf:d6:f7:b4:ff:5e:3e:59:84:b8:4c:ae:fe:d4:
         a3:18:25:91:fe:b9:6b:75:fa:6e:0b:c1:a8:08:b3:41:5f:36:
         14:41:2e:15:3f:24:c5:a8:c0:49:a7:0e:ed:09:b7:92:ed:5d:
         a7:56:dc:25:36:4e:03:7a:5a:71:a2:b2:e5:4a:ae:3a:44:6d:
         25:11:ab:33:5f:53:fa:94:44:6c:33:11:43:8a:8f:cc:e0:52:
         d4:df:c1:4a:dd:14:de:84:40:c4:ab:59:1b:66:8e:96:e9:03:
         97:53:0b:af:33:90:07:a9:bd:74:47:d8:70:59:d7:d4:6f:bb:
         ff:43:d7:6b:56:35:c2:85:6e:66:02:ba:58:b4:36:69:b9:3d:
         d1:7e:6d:21:cb:de:45:a8:50:bb:57:64:7c:4c:6d:ce:12:72:
         38:b9:7e:09:d6:0e:04:43:92:35:0f:8e:78:2c:b1:f1:5b:7d:
         8a:d0:42:2b:3e:1e:e0:ab:63:fb:f1:86:ea:75:84:52:ae:1e:
         81:4a:1b:cc:41:24:28:1d:6c:62:5f:3a:cf:bc:74:b1:ac:30:
         b4:d6:79:df
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUY7GUY+9Hj6jXn5PGcn0g02KCn7kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzI3MDMxMDEyWhcNMjYxMDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYjk3OTI3YmE3Yzc2YzJmODY1MzdiYjM0M2EyM2M4MjA2
MWRkNzE4Y2I2OGUzYTE1ZjcxYWE1MjQwNjkwYWY5MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDZ5eBKYIY7kwkPX7BHe3iUP/DnipOESjIsqmMXtC6ktAH8
hb2DAya0QSCHhLB4LLj+uF1Zz19yFNi8qZSOncagTXipf4zOO+c79lnbDMmHB7YR
ko2hkAYW5pdisxWll2ha32c2/pECtKIBW//fLPm1rCekvqhq9QGUCSGOp3gL38M/
wBl27Js/OvYeOpStpF1P8JG0+EesMizThJt6KRNruFdRhfgZLIkQLy03iFk9sGAr
z670ot26nFgsK5NB0wzBEIjW4T93ofOHaeVoYL83gUtNP8dJiJGEL6YX8/lCnmG4
wsQJdNTuZDr/+2/CCkFo5UsmTTxnqGXb1gkgcGvNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU+5Uk3Ndn7Zn0o2nEm1EGEryM6zowHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzVmOWRhMDgyLWMzMWYtNDIxYy04OTdkLWU3NDY2Nzc1NDFlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAPDwBAAwDQYJKoZIhvcNAQELBQADggEBAFMsHYircUFmOmiUWKMaRQX6
8WmYTs2fFleD8ZNi1/QNa9s8tKEKNsfP1ve0/14+WYS4TK7+1KMYJZH+uWt1+m4L
wagIs0FfNhRBLhU/JMWowEmnDu0Jt5LtXadW3CU2TgN6WnGisuVKrjpEbSURqzNf
U/qURGwzEUOKj8zgUtTfwUrdFN6EQMSrWRtmjpbpA5dTC68zkAepvXRH2HBZ19Rv
u/9D12tWNcKFbmYCuli0Nmm5PdF+bSHL3kWoULtXZHxMbc4Scji5fgnWDgRDkjUP
jngssfFbfYrQQis+HuCrY/vxhup1hFKuHoFKG8xBJCgdbGJfOs+8dLGsMLTWed8=
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:21:00 2026 by rpki-client