Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c14c44b6-0c28-4093-ae5c-7b5be88653a3.roa
File:                     c14c44b6-0c28-4093-ae5c-7b5be88653a3.roa (raw, json)
Hash identifier:          9WBpYQL0BQwJcg1kz+9JYSgDqA42hgU3dUrBZaLWGUw=
Subject key identifier:   46:DA:FC:44:D9:A9:B6:21:CB:4C:0B:AB:CE:FD:B0:BC:9F:79:42:C8
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7CF71510C4B1C1BFFD452DED32F8E0169A495764
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c14c44b6-0c28-4093-ae5c-7b5be88653a3.roa
Signing time:             Mon 06 Oct 2025 17:38:12 +0000
ROA not before:           Mon 06 Oct 2025 17:38:12 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:610a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f7:15:10:c4:b1:c1:bf:fd:45:2d:ed:32:f8:e0:16:9a:49:57:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct  6 17:38:12 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=1b6e8b964edac264f4cb194351f9219fabae2f796363063b72920d757dd92559, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:57:78:c9:93:13:5b:d4:5f:ef:7f:af:aa:c0:
                    a3:e9:c8:53:72:80:24:16:d8:ad:df:8d:96:29:7e:
                    cf:8c:7d:8f:64:51:00:90:af:82:b0:7b:27:31:c5:
                    5e:ab:ff:dc:f7:a4:2f:ec:94:46:45:1f:bf:71:b4:
                    1e:d1:f6:57:fc:f5:88:8f:b0:89:0f:92:0a:10:4e:
                    cc:cf:1c:35:b7:81:2a:03:d3:60:8a:e3:22:1c:91:
                    9b:71:03:8c:7b:40:49:05:60:b9:2d:28:3d:f9:1f:
                    2f:fa:06:e7:e3:40:c4:f1:e7:09:4b:9b:1a:95:10:
                    b9:75:9c:65:48:e3:22:e5:b2:11:0d:10:c4:50:20:
                    d4:59:6f:c1:5b:7b:c7:99:82:38:d7:3f:3c:5c:7d:
                    ab:84:63:ac:17:5a:d2:9f:c9:29:c7:08:0c:63:4d:
                    0d:0d:ec:e5:5f:73:a3:f4:9e:85:91:2b:21:3d:88:
                    7d:e4:c6:16:77:c5:82:28:19:c2:75:1d:71:db:7e:
                    34:9d:e7:be:bc:9a:d2:7b:8c:9b:95:b5:a5:ed:d5:
                    5a:de:12:a7:71:84:70:8a:81:ba:cb:6f:b0:05:d8:
                    6c:13:98:46:74:ea:c5:b7:75:67:09:32:c6:94:03:
                    40:47:22:6e:9e:1f:9a:0e:fd:23:72:51:0a:b7:db:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DA:FC:44:D9:A9:B6:21:CB:4C:0B:AB:CE:FD:B0:BC:9F:79:42:C8
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c14c44b6-0c28-4093-ae5c-7b5be88653a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:610a::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:74:ab:99:47:5e:d8:07:94:d6:1e:2f:8b:67:97:fd:c9:e0:
         08:5b:c9:b9:79:97:9f:59:fd:29:e1:1d:bf:e2:b5:68:1c:da:
         7c:9b:99:7f:96:f5:1f:a2:90:60:54:36:7f:ca:89:af:4b:6d:
         37:84:14:e3:ab:9f:b4:4b:2f:49:c7:f0:b5:16:d5:c6:2d:dc:
         b7:04:e7:98:0e:7f:c2:c8:26:5a:66:f7:25:ee:13:d5:55:d5:
         52:81:c8:9c:c9:a9:57:ad:66:13:fe:2c:58:b1:a3:2c:7e:98:
         4a:a9:a5:2a:ab:50:be:b9:f4:3f:7b:59:df:54:fd:6e:6d:bc:
         74:e3:ab:06:ad:f5:a1:52:79:05:12:ea:1c:5e:c9:d5:e6:b0:
         34:e6:58:4f:47:7e:b0:59:d1:76:21:91:6d:8b:16:6d:78:af:
         66:44:83:c4:de:b8:7e:10:89:78:f9:bb:ba:68:40:94:cf:75:
         79:a5:cf:f1:08:33:77:fb:f6:89:85:85:f2:e6:84:5c:85:20:
         e0:99:d0:65:af:60:c4:8b:74:95:95:ad:e5:84:a4:49:95:42:
         71:ff:b0:d7:54:96:b1:78:ae:16:e6:75:0d:4e:cd:ba:fa:3f:
         d5:eb:b3:16:91:67:31:6c:5e:2d:d9:91:78:1a:2a:eb:27:7c:
         c4:f5:5e:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:13:17 2025 by rpki-client