Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a37af6d7-0b31-4a46-b8d9-08efcf8fef53.roa
File:                     a37af6d7-0b31-4a46-b8d9-08efcf8fef53.roa (raw, json)
Hash identifier:          jUI80ns4r1dAdjy0nimNVv1VZ95bw5hMb7R9QE8MYYE=
Subject key identifier:   AE:1D:F4:D6:DB:96:F3:7F:E7:A0:61:94:2D:B4:4E:BF:C3:74:22:2F
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       70BF2153BDB527DB4FA1AF41DD3849B3F66167DA
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a37af6d7-0b31-4a46-b8d9-08efcf8fef53.roa
Signing time:             Sat 28 Feb 2026 05:00:07 +0000
ROA not before:           Sat 28 Feb 2026 05:00:07 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e600::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bf:21:53:bd:b5:27:db:4f:a1:af:41:dd:38:49:b3:f6:61:67:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 28 05:00:07 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=77155d3f0b64b3e925d1db1f8660445d597c552e743c204d39967e31f4759b38, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:50:05:c2:00:a1:9f:6c:95:07:20:58:87:9a:
                    7f:26:26:38:58:4c:cf:79:2f:41:44:0b:ee:f2:b8:
                    17:7e:95:bd:5e:53:42:34:45:b7:45:b4:bb:bf:df:
                    fc:fc:45:e5:f4:ac:c2:48:90:54:c9:56:de:8f:a4:
                    ef:6c:f0:93:6f:9d:3b:a7:e9:e0:f6:0e:61:ac:e6:
                    09:43:8d:45:1a:75:45:6c:07:7f:bb:14:64:17:71:
                    f2:73:56:9c:bc:36:4c:8a:d1:52:ea:b6:d7:9a:7b:
                    ce:54:4e:d0:dd:80:b0:99:bd:eb:8c:4b:55:bf:2b:
                    6f:e0:78:29:b7:3c:d3:c8:40:75:4d:91:3a:32:3c:
                    4f:dc:94:11:f3:d2:33:26:c9:1d:39:e7:3a:23:cd:
                    14:0f:73:7a:9c:b0:19:7d:16:a4:57:2a:c1:83:17:
                    e2:68:53:70:c6:d2:64:39:2e:5f:3c:56:5b:e9:4b:
                    0f:c9:27:09:26:0a:6c:f7:29:7f:78:f9:32:82:8d:
                    02:f5:4e:97:4b:81:0f:a4:7d:f5:b7:5a:6c:b1:e9:
                    f4:a9:5b:2e:cf:9f:0b:98:28:49:2d:4e:b4:4b:f6:
                    57:b4:4c:a6:eb:c7:42:b0:28:fe:43:7d:b5:22:43:
                    d8:ee:f4:ee:5a:73:3b:fe:cc:08:df:8e:61:9d:89:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1D:F4:D6:DB:96:F3:7F:E7:A0:61:94:2D:B4:4E:BF:C3:74:22:2F
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a37af6d7-0b31-4a46-b8d9-08efcf8fef53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e600::/42

    Signature Algorithm: sha256WithRSAEncryption
         1c:80:94:44:a2:3b:88:66:e0:36:8d:d0:bb:2d:73:18:13:e9:
         bf:06:0a:c6:06:28:da:f9:f9:d1:6f:4c:05:11:cc:71:78:b9:
         04:cb:23:c4:55:0c:10:da:bf:be:ef:b7:8e:a5:5e:b5:13:7b:
         3b:85:4f:26:4a:9c:db:3d:4b:8c:fd:5a:d6:d0:b6:14:7c:6c:
         d6:cd:aa:0d:90:4d:05:b5:a0:86:0c:2c:d4:df:4a:86:25:34:
         a0:c6:89:8b:d1:a5:94:7a:9d:4a:e0:12:8b:2d:5b:84:dd:c2:
         83:bb:e1:35:c8:e0:cf:dd:40:32:63:ae:d8:5a:c2:ee:2b:c8:
         00:f5:47:ac:9e:57:bb:54:ff:60:8a:76:78:55:53:8a:26:de:
         6b:08:97:59:4d:cb:2d:83:76:c4:78:1d:83:94:ca:45:d1:1c:
         03:8f:80:34:6f:14:80:c5:6c:10:2c:f8:42:3e:cf:4e:31:cd:
         99:f4:8c:1e:42:02:b3:86:32:c7:29:eb:8f:c6:8f:5e:86:b3:
         aa:72:68:9e:b4:58:48:4a:62:aa:87:11:c9:76:0d:0f:61:05:
         86:b3:7c:4d:1b:02:34:e6:a2:5f:f3:c3:23:22:61:30:f1:11:
         7f:b4:7d:3d:78:57:8d:59:0b:df:09:06:9b:57:ab:f9:42:6e:
         e0:55:c1:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:47:41 2026 by rpki-client