Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d06686-7c7d-4965-ac02-b45964ae75d6.roa
File:                     f5d06686-7c7d-4965-ac02-b45964ae75d6.roa (raw, json)
Hash identifier:          VuFYB6gEycU2Ygdy5ck6aHeHTBXt66TlCH+Le/hG5Vc=
Subject key identifier:   83:0E:C3:C5:2A:6F:E7:D3:FA:68:D3:4F:15:06:90:46:78:C0:83:69
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       58A15055697A2FBD47160C9AFCBCA14792D7E758
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d06686-7c7d-4965-ac02-b45964ae75d6.roa
Signing time:             Wed 15 Apr 2026 19:51:41 +0000
ROA not before:           Wed 15 Apr 2026 19:51:41 +0000
ROA not after:            Tue 14 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f1:14::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a1:50:55:69:7a:2f:bd:47:16:0c:9a:fc:bc:a1:47:92:d7:e7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Apr 15 19:51:41 2026 GMT
            Not After : Jul 14 23:59:59 2026 GMT
        Subject: serialNumber=d7739abf43b865979e51619e71480d585512e1ff4b842802e2d60660ec839f26, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:18:45:97:86:ae:64:b8:3b:67:37:6e:3d:
                    e1:32:ef:1b:d0:c8:83:a8:c4:09:4a:99:49:67:4d:
                    74:5f:bf:6f:00:bd:5a:fa:ee:df:7e:c1:7a:3c:13:
                    17:cf:16:b6:45:bb:88:94:67:f4:a3:70:f7:e4:54:
                    82:5f:f8:78:ad:01:c3:9d:af:a3:f2:d2:fb:2e:a7:
                    3f:58:e7:2a:59:c5:9c:29:1c:1a:95:51:f3:56:f5:
                    d5:f1:2d:e2:80:0f:f3:c7:e3:fa:1d:e2:12:78:06:
                    74:ca:9d:79:6f:c1:1d:3a:52:01:13:54:96:09:bf:
                    01:9b:d1:1c:db:bb:86:fd:c9:4c:34:c4:5a:91:8d:
                    bf:f0:e8:e9:46:43:b0:46:8f:71:ff:ff:85:3d:2e:
                    50:97:0b:d9:e9:74:b2:54:1b:c1:b3:60:f1:f6:a9:
                    dc:dc:74:b6:e9:f9:06:de:9e:7e:12:65:46:be:2d:
                    6f:a9:46:d3:86:f9:fe:5e:c9:85:5f:e3:cc:2a:6f:
                    e3:9c:23:a2:e8:08:4a:02:b7:c2:e0:4c:b9:7f:c5:
                    68:35:5b:62:ba:36:4f:5d:1c:10:ea:0c:3f:80:f4:
                    18:c4:bb:91:d5:50:7f:36:58:b1:8f:18:6a:e4:99:
                    45:08:e7:8d:40:d7:6f:f8:7a:e8:aa:e4:31:3a:ae:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0E:C3:C5:2A:6F:E7:D3:FA:68:D3:4F:15:06:90:46:78:C0:83:69
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f5d06686-7c7d-4965-ac02-b45964ae75d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:14::/46

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:93:24:16:ce:62:4f:7b:87:24:54:7d:30:64:54:10:3b:
         eb:9b:17:ac:88:8f:e2:e6:fc:8c:d3:63:2b:ec:ab:7d:6d:eb:
         00:7d:f6:10:2a:bb:77:27:5c:73:d3:49:9c:b2:6b:d8:96:9d:
         ad:aa:0c:62:80:20:46:ee:3b:e7:83:ed:55:fe:17:79:da:d5:
         aa:48:0e:a6:bf:ed:53:7f:07:f7:aa:9d:38:83:62:2a:d0:45:
         f5:35:8e:73:e9:06:94:34:fa:b4:98:20:58:b1:55:a0:74:77:
         61:e1:68:8b:03:05:31:8b:32:8a:67:be:82:ae:91:9e:ce:b4:
         f3:dd:61:3c:73:84:be:38:7f:c6:66:c5:e0:70:19:fc:b6:01:
         fd:85:6f:39:b6:fd:13:2b:59:e0:75:fe:94:33:77:1d:53:ed:
         80:42:ff:f4:df:54:03:62:e1:b2:4d:aa:ec:5e:e1:18:59:0a:
         7b:16:58:a4:d8:01:c1:a7:79:d2:74:44:06:98:df:96:cf:5b:
         76:5f:c6:54:4b:9c:b0:f7:97:73:dc:87:a2:ef:2a:41:ce:e7:
         cf:83:ac:68:e7:6f:58:59:3b:01:13:24:d4:a0:b6:bb:49:0d:
         ba:32:df:9c:c5:76:56:75:1a:ea:e1:e7:ad:86:46:0c:90:3a:
         93:12:ef:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:58:00 2026 by rpki-client