Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef49247f-e1bb-4e0e-9df0-6edb97404f9e.roa
File:                     ef49247f-e1bb-4e0e-9df0-6edb97404f9e.roa (raw, json)
Hash identifier:          VTZWc/DDvn0sqWUMZYvAdzQKRlYmBY2AfSywcg9t1Is=
Subject key identifier:   AE:04:97:7C:CD:92:97:43:76:8F:0E:6F:42:E5:47:36:9D:53:A3:AB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2563AF2E5024311FFAAC4A9E548764AD69C3DD49
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef49247f-e1bb-4e0e-9df0-6edb97404f9e.roa
Signing time:             Sat 28 Feb 2026 05:10:43 +0000
ROA not before:           Sat 28 Feb 2026 05:10:43 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e300::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:63:af:2e:50:24:31:1f:fa:ac:4a:9e:54:87:64:ad:69:c3:dd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 28 05:10:43 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=75f0df9c5227fca2c36ddeff42b8755b8ac8bc413010ad40f9be898f609566a0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:ac:a9:1a:9b:a2:17:57:66:80:e0:ee:bc:
                    b4:1b:b8:77:5d:09:df:82:04:79:70:79:26:1b:4f:
                    74:67:61:9a:f4:c7:e9:49:81:19:a2:eb:26:a1:8d:
                    17:b0:58:83:66:89:a9:ff:c6:09:3d:b7:16:f4:89:
                    c1:8b:b0:d4:4e:4d:b7:56:3b:32:f3:d8:01:53:82:
                    34:db:97:1d:b3:b4:2a:e5:47:32:dc:84:83:17:5c:
                    7d:f7:53:6d:3e:7d:df:43:43:9f:dc:dd:ae:ad:a2:
                    a0:c3:14:9f:28:c6:f9:9d:dd:cc:73:da:3c:51:a8:
                    86:3c:55:96:23:0e:12:38:be:d2:bf:b4:6c:67:e8:
                    e4:b3:3e:74:8c:a2:60:78:b9:a4:13:aa:35:93:0f:
                    07:4a:62:05:c5:17:74:d8:9e:e3:87:4c:60:53:99:
                    31:ef:54:31:4b:d7:f7:b8:b4:91:db:66:cf:35:7d:
                    18:4e:0a:9f:d5:dd:d0:a2:60:23:d6:68:ba:e6:a5:
                    89:6d:91:0a:e3:82:e9:ca:07:55:95:e0:ad:2c:fc:
                    3a:e6:87:7e:66:98:34:08:c6:b9:6b:00:4a:93:c8:
                    7d:0c:1e:c4:b8:7e:09:a1:cb:5a:7b:8d:2a:70:56:
                    06:c3:f8:21:0e:fb:41:5b:da:b8:b2:03:7d:50:cd:
                    82:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:04:97:7C:CD:92:97:43:76:8F:0E:6F:42:E5:47:36:9D:53:A3:AB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ef49247f-e1bb-4e0e-9df0-6edb97404f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e300::/42

    Signature Algorithm: sha256WithRSAEncryption
         58:e3:c1:6d:24:47:73:c1:7e:e5:8d:64:6a:bb:39:a5:a3:ae:
         3c:92:d8:3a:fa:ac:6d:4b:17:c2:a9:15:57:d0:66:67:09:92:
         b2:79:52:e4:40:b4:65:da:46:0b:95:1c:aa:85:58:ac:bb:71:
         83:d7:43:11:42:89:83:80:7c:ca:fe:9e:90:2a:5e:f8:56:6f:
         df:7b:c6:27:82:68:18:c3:9b:40:a4:ed:a1:c9:9a:04:cd:de:
         af:8b:52:67:68:01:44:90:bd:6f:2f:13:c1:7d:7d:01:94:c1:
         1a:80:3e:1e:e8:d9:a2:f3:92:e7:aa:ba:88:cc:9a:bb:90:a0:
         60:63:26:a9:0b:6e:fb:11:3a:4c:33:5b:ea:68:d5:07:18:35:
         c8:d4:87:73:ad:b8:ca:5f:51:02:87:a3:77:e8:1e:60:04:f7:
         6d:84:7c:d9:18:0b:40:7b:bd:6c:68:0d:da:45:aa:5c:a1:4f:
         a8:86:5f:70:a1:99:a2:18:57:1d:a3:ed:b6:da:39:45:c5:28:
         c0:8e:4c:09:c8:a9:2b:0d:3d:b0:63:ab:70:e3:49:b9:0f:f8:
         8f:1a:4d:de:84:59:23:63:67:89:0c:8c:a8:e9:42:04:4a:ff:
         aa:74:79:de:eb:f7:20:1a:5b:d2:1e:23:21:16:35:6b:71:39:
         3e:69:d3:c5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUJWOvLlAkMR/6rEqeVIdkrWnD3UkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjI4MDUxMDQzWhcNMjYwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NWYwZGY5YzUyMjdmY2EyYzM2ZGRlZmY0MmI4NzU1Yjhh
YzhiYzQxMzAxMGFkNDBmOWJlODk4ZjYwOTU2NmEwMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSLqypGpuiF1dmgODuvLQbuHddCd+CBHlweSYbT3RnYZr0
x+lJgRmi6yahjRewWINmian/xgk9txb0icGLsNROTbdWOzLz2AFTgjTblx2ztCrl
RzLchIMXXH33U20+fd9DQ5/c3a6toqDDFJ8oxvmd3cxz2jxRqIY8VZYjDhI4vtK/
tGxn6OSzPnSMomB4uaQTqjWTDwdKYgXFF3TYnuOHTGBTmTHvVDFL1/e4tJHbZs81
fRhOCp/V3dCiYCPWaLrmpYltkQrjgunKB1WV4K0s/Drmh35mmDQIxrlrAEqTyH0M
HsS4fgmhy1p7jSpwVgbD+CEO+0Fb2riyA31QzYI9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUrgSXfM2Sl0N2jw5vQuVHNp1To6swHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2VmNDkyNDdmLWUxYmItNGUwZS05ZGYwLTZlZGI5NzQwNGY5ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwYmAPD74wAwDQYJKoZIhvcNAQELBQADggEBAFjjwW0kR3PBfuWNZGq7OaWj
rjyS2Dr6rG1LF8KpFVfQZmcJkrJ5UuRAtGXaRguVHKqFWKy7cYPXQxFCiYOAfMr+
npAqXvhWb997xieCaBjDm0Ck7aHJmgTN3q+LUmdoAUSQvW8vE8F9fQGUwRqAPh7o
2aLzkuequojMmruQoGBjJqkLbvsROkwzW+po1QcYNcjUh3OtuMpfUQKHo3foHmAE
922EfNkYC0B7vWxoDdpFqlyhT6iGX3ChmaIYVx2j7bbaOUXFKMCOTAnIqSsNPbBj
q3DjSbkP+I8aTd6EWSNjZ4kMjKjpQgRK/6p0ed7r9yAaW9IeIyEWNWtxOT5p08U=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:42 2026 by rpki-client