Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eddb8990-86be-4e35-823b-2b9b4245b4ac.roa
File:                     eddb8990-86be-4e35-823b-2b9b4245b4ac.roa (raw, json)
Hash identifier:          5tBAj9ULNZdQeGYVYe9/OCyY7tgUV1IvPLmiEiy8mig=
Subject key identifier:   0E:9B:B3:43:7B:21:9B:E8:C6:4C:81:B6:6A:B4:DB:94:F6:49:98:9A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       71E602597DEA2E3099917603F267DAFF92DAE8CE
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eddb8990-86be-4e35-823b-2b9b4245b4ac.roa
Signing time:             Wed 20 May 2026 00:50:09 +0000
ROA not before:           Wed 20 May 2026 00:50:09 +0000
ROA not after:            Tue 18 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e6:02:59:7d:ea:2e:30:99:91:76:03:f2:67:da:ff:92:da:e8:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: May 20 00:50:09 2026 GMT
            Not After : Aug 18 23:59:59 2026 GMT
        Subject: serialNumber=ed62385c1ea7022cb38d671128e4f428c11c110baac6ce37ae9234edd8b08441, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bc:3e:15:d2:7f:81:6c:3c:2d:77:2f:71:5d:
                    be:74:2e:e1:ec:ac:83:46:d1:29:c3:42:88:ed:3b:
                    42:9f:fc:ad:5f:7a:05:45:1a:72:fc:f4:ac:d7:fc:
                    a5:5d:b1:04:fd:06:56:bc:8d:97:45:6c:0e:de:b7:
                    e4:57:a1:08:5d:04:72:d2:89:05:3d:c4:2d:5b:d1:
                    1e:c0:9b:23:83:05:24:c2:34:1a:07:fd:04:9f:f0:
                    db:89:ab:ea:46:62:e5:f8:86:5b:d5:2d:70:cd:f6:
                    3f:c8:9b:9a:41:d5:a5:31:da:b8:b8:22:db:eb:24:
                    81:8a:7e:bd:af:95:1c:43:c0:67:93:05:78:58:b1:
                    62:20:cd:b7:28:2a:9f:1c:97:7d:9c:a9:b6:1b:68:
                    ab:63:6c:f5:c6:68:f9:57:90:8c:39:4d:89:25:89:
                    39:82:f0:ae:3c:41:1e:74:86:91:83:49:ab:fc:d6:
                    13:31:7b:55:88:1e:4f:aa:b5:d8:9e:37:ec:08:c4:
                    8e:bb:43:f3:19:48:50:a4:c0:75:ac:bf:87:1a:3a:
                    76:54:1c:9e:af:5f:1c:71:25:8b:f5:72:78:8e:72:
                    6c:95:23:d0:07:86:82:0d:b5:ab:2c:f0:80:88:ab:
                    0a:03:0d:c0:aa:ec:fb:b1:c1:a0:a8:61:5a:8a:fd:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9B:B3:43:7B:21:9B:E8:C6:4C:81:B6:6A:B4:DB:94:F6:49:98:9A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eddb8990-86be-4e35-823b-2b9b4245b4ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6123::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:4e:e3:ef:17:73:d8:75:a8:85:1b:1a:9e:ec:5b:ea:e8:07:
         d6:62:48:6e:6c:87:af:72:d5:17:1a:e7:b5:17:c6:53:af:ad:
         13:52:77:4a:ea:0e:79:7f:90:e0:e5:cd:10:16:fe:34:78:52:
         cf:d6:a5:f0:06:6d:a3:1c:98:df:a1:b0:29:d9:3d:b5:4c:8d:
         a5:13:62:51:6b:4a:4d:09:d5:5d:71:5e:1f:13:6c:74:d3:e9:
         0a:af:30:b8:0f:6a:e7:c8:7c:f6:f3:65:41:11:9f:00:9f:62:
         1a:a7:b4:6d:21:60:f1:45:8f:66:f3:ba:e1:5e:73:77:ca:9b:
         46:cf:69:07:bb:92:1c:0e:3b:4a:f7:43:7d:c9:7a:2b:ba:48:
         be:dc:91:a0:d7:a3:94:92:39:fe:ac:44:6f:ef:e2:1b:58:42:
         3a:e8:15:0f:0f:5a:32:cc:3c:c9:3a:88:78:7d:ab:eb:01:09:
         45:28:da:26:3a:57:15:2d:80:2e:c8:37:fb:06:f9:4e:bf:fe:
         83:84:01:5b:3a:8d:b8:14:5e:87:2d:fb:55:79:92:bd:9d:05:
         aa:eb:e5:04:de:0b:58:cd:17:20:6a:bb:fa:4c:37:fe:4c:bb:
         42:bd:c2:3e:21:e8:17:ec:4b:31:d0:4d:3e:28:08:c2:13:2d:
         4c:a2:d3:82
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUceYCWX3qLjCZkXYD8mfa/5La6M4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTIwMDA1MDA5WhcNMjYwODE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlZDYyMzg1YzFlYTcwMjJjYjM4ZDY3MTEyOGU0ZjQyOGMx
MWMxMTBiYWFjNmNlMzdhZTkyMzRlZGQ4YjA4NDQxMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpvD4V0n+BbDwtdy9xXb50LuHsrING0SnDQojtO0Kf/K1f
egVFGnL89KzX/KVdsQT9Bla8jZdFbA7et+RXoQhdBHLSiQU9xC1b0R7AmyODBSTC
NBoH/QSf8NuJq+pGYuX4hlvVLXDN9j/Im5pB1aUx2ri4ItvrJIGKfr2vlRxDwGeT
BXhYsWIgzbcoKp8cl32cqbYbaKtjbPXGaPlXkIw5TYkliTmC8K48QR50hpGDSav8
1hMxe1WIHk+qtdieN+wIxI67Q/MZSFCkwHWsv4caOnZUHJ6vXxxxJYv1cniOcmyV
I9AHhoINtass8ICIqwoDDcCq7PuxwaCoYVqK/bAJAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUDpuzQ3shm+jGTIG2arTblPZJmJowHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2VkZGI4OTkwLTg2YmUtNGUzNS04MjNiLTJiOWI0MjQ1YjRhYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYSMwDQYJKoZIhvcNAQELBQADggEBAIpO4+8Xc9h1qIUbGp7sW+ro
B9ZiSG5sh69y1Rca57UXxlOvrRNSd0rqDnl/kODlzRAW/jR4Us/WpfAGbaMcmN+h
sCnZPbVMjaUTYlFrSk0J1V1xXh8TbHTT6QqvMLgPaufIfPbzZUERnwCfYhqntG0h
YPFFj2bzuuFec3fKm0bPaQe7khwOO0r3Q33Jeiu6SL7ckaDXo5SSOf6sRG/v4htY
QjroFQ8PWjLMPMk6iHh9q+sBCUUo2iY6VxUtgC7IN/sG+U6//oOEAVs6jbgUXoct
+1V5kr2dBarr5QTeC1jNFyBqu/pMN/5Mu0K9wj4h6BfsSzHQTT4oCMITLUyi04I=
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:17:53 2026 by rpki-client