Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa
File:                     0fac8622-056c-4350-9d70-b107bedf3e94.roa (raw, json)
Hash identifier:          cvC6JLPxuwi2+LOYbeHlrXweEo2t14puCcWGrQMrpW4=
Subject key identifier:   E0:B9:DA:50:A6:BF:B3:F8:8B:6F:5E:77:FD:7B:CF:A8:52:2D:DC:ED
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       43E43721B1C5B798B5F325D3EF500BBB7671F6D1
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa
Signing time:             Sun 11 Oct 2026 15:10:33 +0000
ROA not before:           Sun 11 Oct 2026 15:10:33 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e4:37:21:b1:c5:b7:98:b5:f3:25:d3:ef:50:0b:bb:76:71:f6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 11 15:10:33 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=fd6531cc53a69b21461bb1c050312a4ceb3dbc00d487d10980309e616cf88350, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cc:c8:e0:48:59:41:7f:0a:9c:5c:ac:29:4a:
                    60:fb:3a:b0:ad:a8:55:14:a9:b5:3e:bd:cd:9e:2b:
                    6b:90:41:fc:f1:4e:0d:5e:cc:b2:9b:5c:b2:3f:8c:
                    05:ef:0c:e0:dd:94:06:2a:c6:5e:27:63:11:93:2c:
                    56:17:7f:09:5b:5c:58:15:08:f0:11:df:fb:82:b7:
                    a3:57:a3:07:23:70:b4:a2:48:ae:86:9f:d9:e4:f2:
                    ca:31:40:72:80:b6:4b:78:69:93:9c:d6:df:99:6c:
                    d2:b0:11:07:6c:95:d8:c4:56:92:cf:be:71:4b:52:
                    82:10:7d:95:04:c6:ff:ff:75:86:89:c5:89:a9:11:
                    1d:a3:31:fe:57:b5:38:90:ae:b3:00:8c:c1:9f:d6:
                    7c:2d:67:be:ee:53:03:f9:6c:57:7a:c6:34:27:69:
                    22:21:63:47:d3:20:82:14:d4:4f:28:62:8e:b5:14:
                    b0:7d:a6:16:65:2b:4c:41:42:35:97:c1:52:cf:ad:
                    ad:98:0a:91:e2:ef:85:11:4f:ad:61:47:b8:bc:1f:
                    da:a2:b3:c1:9f:d7:26:f6:8b:53:7d:65:75:56:fc:
                    1e:32:fa:9a:18:ab:21:5b:3f:6f:b7:72:a4:b3:cd:
                    33:89:8d:12:dd:24:33:51:43:b4:e3:0f:a9:8b:24:
                    cc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B9:DA:50:A6:BF:B3:F8:8B:6F:5E:77:FD:7B:CF:A8:52:2D:DC:ED
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6103::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:bf:40:8b:1c:ee:25:13:c0:2a:ba:65:db:26:f6:fa:e7:fa:
         89:a9:09:41:c1:ed:14:6d:d2:46:c5:0d:c8:49:fd:18:e7:24:
         48:64:57:44:e6:59:eb:8d:09:93:4a:ed:cf:67:59:96:18:be:
         cb:a2:e5:28:bd:77:8f:47:cd:fa:6d:0c:36:59:92:9c:70:f9:
         a8:e9:00:d6:35:37:a8:50:76:b8:16:87:45:e9:1d:5d:aa:fb:
         ab:47:62:44:59:2e:89:55:c9:be:7a:fb:58:fc:ed:90:d8:38:
         ef:44:06:64:8b:cf:2f:d3:39:9c:c9:a8:86:6a:c4:dc:a4:80:
         6e:78:e0:3c:a7:24:67:b3:d5:2e:ab:5e:53:71:04:71:fc:ac:
         a1:2a:a2:e3:f6:e8:e1:b5:e3:d4:01:04:0b:fb:62:34:ee:97:
         f2:a0:fd:d1:59:cc:10:e2:1b:1a:37:cd:27:11:6e:9e:29:ff:
         c1:52:84:97:28:b4:30:63:64:a6:7d:f3:16:9d:0b:a5:68:83:
         4b:ea:c5:05:50:0b:82:aa:b1:40:5d:1d:d5:84:db:bf:8a:9c:
         e1:e5:5f:29:55:48:4d:2d:35:67:3d:a7:ad:92:d8:14:4f:2d:
         15:73:59:86:fe:6a:ae:1b:34:c5:04:4f:80:84:79:87:f0:9f:
         e0:f0:63:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:05:39 2026 by rpki-client