Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa
File:                     765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa (raw, json)
Hash identifier:          QT01Ym0FPK57wb1qOmbHtfVrinYowQo4wgHoHTqxtRU=
Subject key identifier:   B2:93:14:9B:E4:A2:99:53:AC:4B:70:73:9E:00:36:27:DA:A1:91:60
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       07FF16D3BAF7DE9F50F69EA908351272A478AFD5
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa
Signing time:             Mon 26 Oct 2026 04:20:10 +0000
ROA not before:           Mon 26 Oct 2026 04:20:10 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ff:16:d3:ba:f7:de:9f:50:f6:9e:a9:08:35:12:72:a4:78:af:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 26 04:20:10 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=e6a12a1711e4f4e51c6de4d3c40f5079778b3c79fbc0f8fa90643d7c587aa2c0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:eb:fe:46:04:e1:da:58:82:21:1c:7e:20:
                    d6:de:c3:77:33:fa:48:8f:19:99:38:41:79:66:d8:
                    09:16:60:cd:2c:d9:7a:c1:46:89:08:22:97:a5:bb:
                    86:14:fc:ca:ef:2a:77:ca:01:e7:a9:49:a9:65:f5:
                    9a:54:ae:ef:a1:52:c2:a2:46:48:66:4a:15:8d:0f:
                    1c:98:a6:1b:20:ac:08:62:f7:39:53:38:c1:3c:7a:
                    72:86:a9:3b:98:ed:17:86:61:e1:8e:1e:aa:9f:02:
                    33:5d:9c:25:30:f7:4d:70:79:db:8a:a4:37:03:4e:
                    2c:71:e3:46:27:52:27:75:0b:54:9a:c6:87:e0:a7:
                    3e:c4:be:2b:67:e9:ae:11:2d:e1:b5:11:b0:3c:36:
                    6b:1e:37:a2:7e:3d:64:d9:fa:d9:6d:6a:e9:9b:aa:
                    cd:bd:b6:bd:44:8d:a5:9b:a1:4c:53:e8:75:dc:95:
                    b9:d4:39:70:fd:53:4d:27:b0:56:79:47:f5:51:26:
                    d6:ad:e2:e1:a9:fe:46:ea:1a:2f:a9:9f:69:4b:a5:
                    9e:d6:5f:1a:10:e4:cc:44:da:9b:cb:c6:5a:71:45:
                    1b:ad:f8:87:71:33:86:2b:af:93:6e:82:0e:a5:7b:
                    f1:8c:f1:29:c6:e9:95:64:94:bc:9a:69:7a:3b:e9:
                    d4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:93:14:9B:E4:A2:99:53:AC:4B:70:73:9E:00:36:27:DA:A1:91:60
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:68:34:5e:26:47:8e:ea:ff:68:38:b1:2e:a0:8f:1e:27:1a:
         81:03:fe:4b:55:a5:68:53:7a:30:1b:01:ea:02:1b:20:e2:30:
         73:dd:9e:01:41:b5:ac:40:20:a2:ed:2c:c8:1b:25:5d:e5:93:
         66:83:16:86:0f:d9:06:b6:b5:28:ab:eb:ca:66:7c:ac:6f:b7:
         d9:ed:df:9f:c2:7d:03:d0:1b:61:e9:09:ca:48:23:32:d3:cd:
         18:29:e9:2b:e5:90:5c:63:38:17:44:4c:3b:48:d8:2e:cb:6e:
         6c:b8:e7:f4:3d:0d:95:45:dc:59:a2:16:0b:41:5f:ac:d7:61:
         81:a1:a8:b3:eb:ee:7f:13:db:8d:e5:5b:3c:cd:e1:81:59:be:
         58:c1:85:d1:b1:ed:e5:34:cb:b8:84:0d:1f:75:b4:7e:ca:47:
         13:a7:4b:b7:4d:01:48:52:bb:30:31:34:bf:f0:15:46:d9:b8:
         a7:fe:d9:0d:85:92:b2:dc:8f:36:dd:2b:3c:c1:40:f0:60:63:
         5e:4e:1a:65:1f:9f:66:85:0d:8e:62:15:9c:64:b7:55:b3:32:
         b4:4a:06:ee:27:93:19:c1:c3:73:67:08:dc:31:f9:21:21:e6:
         3d:50:94:e8:d8:fd:ab:c1:43:66:6c:15:cf:2f:52:8e:9f:8f:
         29:5c:da:2f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUB/8W07r33p9Q9p6pCDUScqR4r9UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDEwWhcNMjcwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNmExMmExNzExZTRmNGU1MWM2ZGU0ZDNjNDBmNTA3OTc3
OGIzYzc5ZmJjMGY4ZmE5MDY0M2Q3YzU4N2FhMmMwMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC68ev+RgTh2liCIRx+INbew3cz+kiPGZk4QXlm2AkWYM0s
2XrBRokIIpelu4YU/MrvKnfKAeepSall9ZpUru+hUsKiRkhmShWNDxyYphsgrAhi
9zlTOME8enKGqTuY7ReGYeGOHqqfAjNdnCUw901weduKpDcDTixx40YnUid1C1Sa
xofgpz7Evitn6a4RLeG1EbA8NmseN6J+PWTZ+tltaumbqs29tr1EjaWboUxT6HXc
lbnUOXD9U00nsFZ5R/VRJtat4uGp/kbqGi+pn2lLpZ7WXxoQ5MxE2pvLxlpxRRut
+IdxM4Yrr5Nugg6le/GM8SnG6ZVklLyaaXo76dSbAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUspMUm+SimVOsS3BzngA2J9qhkWAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2Lzc2NWRmYTZjLTM1ZDEtNDJjZi1iYTg5LWVhZjg4NTc3ZTRmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwAAgwDQYJKoZIhvcNAQELBQADggEBAEhoNF4mR47q/2g4sS6gjx4n
GoED/ktVpWhTejAbAeoCGyDiMHPdngFBtaxAIKLtLMgbJV3lk2aDFoYP2Qa2tSir
68pmfKxvt9nt35/CfQPQG2HpCcpIIzLTzRgp6SvlkFxjOBdETDtI2C7Lbmy45/Q9
DZVF3FmiFgtBX6zXYYGhqLPr7n8T243lWzzN4YFZvljBhdGx7eU0y7iEDR91tH7K
RxOnS7dNAUhSuzAxNL/wFUbZuKf+2Q2FkrLcjzbdKzzBQPBgY15OGmUfn2aFDY5i
FZxkt1WzMrRKBu4nkxnBw3NnCNwx+SEh5j1QlOjY/avBQ2ZsFc8vUo6fjylc2i8=
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:18:57 2026 by rpki-client