Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1496d3d5-b503-4b50-8e35-a5d8f438d5a7.roa
File:                     1496d3d5-b503-4b50-8e35-a5d8f438d5a7.roa (raw, json)
Hash identifier:          iCMYvxetwdycfK9chVjVXWaY5ldwN0ufd5y94fi3k4A=
Subject key identifier:   CE:1F:34:73:A5:60:0F:D3:A5:AE:AE:13:14:7D:90:C2:84:3D:80:4D
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3F33FC15E15452B9B2196D1B05CDCA51946D8AEC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1496d3d5-b503-4b50-8e35-a5d8f438d5a7.roa
Signing time:             Thu 24 Sep 2026 00:00:10 +0000
ROA not before:           Thu 24 Sep 2026 00:00:10 +0000
ROA not after:            Wed 23 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f2:7400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:33:fc:15:e1:54:52:b9:b2:19:6d:1b:05:cd:ca:51:94:6d:8a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Sep 24 00:00:10 2026 GMT
            Not After : Dec 23 23:59:59 2026 GMT
        Subject: serialNumber=e5f1b6a1b4d666151c4a8e20584b20c7231bc3b363e25ec256cdf3e8805d1683, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:12:bf:79:45:2b:8c:db:53:35:83:db:8e:05:
                    49:c4:d6:cd:64:fc:20:9b:f8:85:2c:a9:07:ff:59:
                    a9:b8:4e:c0:f7:d3:1a:96:39:42:c1:ef:87:c5:db:
                    0e:0c:61:df:80:40:91:3c:4c:24:86:0a:d9:b3:eb:
                    fe:ee:e8:e2:82:83:c3:09:da:f5:dd:c9:6f:c6:1f:
                    1c:f1:ac:12:54:be:c1:70:70:16:05:40:15:fb:ed:
                    ec:13:e4:e9:9a:ec:46:12:b3:20:ac:d8:4a:51:38:
                    5a:5d:e0:f9:01:ba:42:81:23:d3:fc:d9:67:3b:9e:
                    e6:e9:ef:0b:d2:4a:d1:e7:d0:b0:3f:ea:cd:dd:88:
                    39:b1:bb:f4:33:cb:9b:87:e5:74:ff:ac:4c:2a:6f:
                    cb:10:c3:20:04:4c:84:2b:f6:f6:3b:e2:bf:7b:d7:
                    74:8e:b6:73:46:6c:7b:2f:4d:81:c5:af:07:09:64:
                    b4:34:cf:73:b2:37:ae:0a:a1:e5:16:5f:ca:c8:56:
                    5f:77:74:27:d0:7e:02:de:69:08:14:ec:59:ed:75:
                    c6:34:aa:08:de:0a:9f:a1:71:70:c7:8f:35:5e:12:
                    f5:a3:d7:f6:46:f1:69:a3:a5:f2:62:6a:23:ed:a8:
                    02:09:26:be:d7:74:c2:d2:1c:bd:07:99:c5:9e:cb:
                    30:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1F:34:73:A5:60:0F:D3:A5:AE:AE:13:14:7D:90:C2:84:3D:80:4D
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/1496d3d5-b503-4b50-8e35-a5d8f438d5a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7400::/38

    Signature Algorithm: sha256WithRSAEncryption
         7b:e3:7a:c6:39:f1:02:e8:47:22:1f:53:7c:05:be:d6:ee:10:
         7b:e9:d0:dc:62:95:ff:b0:bd:fb:af:19:05:df:68:8c:5e:00:
         7b:72:8f:c0:67:38:a6:34:5d:27:b0:d0:aa:29:56:13:97:07:
         be:01:20:9e:fb:2e:fa:de:5e:9e:e5:5f:c8:03:70:b8:85:07:
         d6:1e:00:fc:17:67:cc:77:73:0e:de:ce:7c:1b:02:37:26:ec:
         23:dd:aa:f7:35:56:81:1a:61:0f:4b:01:8e:68:83:9d:39:2b:
         2d:8f:f0:6f:df:d3:c2:f6:66:1e:b3:3e:38:48:65:13:fe:e9:
         09:07:ef:08:da:aa:24:a0:a6:04:b9:4c:3c:a2:49:79:b6:f7:
         19:25:b4:0a:5e:59:cc:44:ec:0b:7b:16:e0:b8:99:fd:09:f7:
         ec:7d:94:ec:7b:70:26:95:de:93:8b:c5:b3:d9:03:a9:91:b0:
         c1:f6:e9:f9:12:f9:ff:b5:5e:47:ac:90:05:11:10:66:f8:03:
         33:87:52:f6:b0:5d:ca:2b:c2:d9:97:f1:76:73:4a:3e:5a:1a:
         9c:57:51:3d:61:56:b6:be:60:ac:b4:ec:67:4a:77:0c:3f:40:
         98:1a:31:70:71:54:64:7d:10:f8:7f:cd:dd:35:6f:00:ab:9b:
         88:7a:b3:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:13:45 2026 by rpki-client