Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/332b30d9-b6cd-4931-94c2-b827ba9c7d7b.roa
File:                     332b30d9-b6cd-4931-94c2-b827ba9c7d7b.roa (raw, json)
Hash identifier:          5Bn3bL718v5T54eiUqHJT0vjTHvZYZEKSQLkJGWQESw=
Subject key identifier:   60:6F:F2:BE:C2:8A:CD:B8:93:15:23:DF:69:A4:94:AF:80:DB:27:CF
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       50730DA4E9CACD1B04E9546DDF06D05EB6DFFB99
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/332b30d9-b6cd-4931-94c2-b827ba9c7d7b.roa
Signing time:             Sun 27 Sep 2026 00:00:09 +0000
ROA not before:           Sun 27 Sep 2026 00:00:09 +0000
ROA not after:            Sat 26 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f1:8a00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:73:0d:a4:e9:ca:cd:1b:04:e9:54:6d:df:06:d0:5e:b6:df:fb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Sep 27 00:00:09 2026 GMT
            Not After : Dec 26 23:59:59 2026 GMT
        Subject: serialNumber=5af3dab520212fdfeda5099784b2d0f560b8e67de5d5e81311c82394ec9acc39, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:70:86:59:e1:fa:7d:a9:1f:44:6f:2a:58:
                    5f:f4:05:82:89:2d:a8:15:00:61:e0:b1:51:e3:bb:
                    4e:d6:b6:14:a8:80:ec:6c:54:67:ff:e3:cc:b8:db:
                    29:a2:69:b5:47:fe:82:60:8d:51:47:56:67:9f:2b:
                    21:fc:be:5f:dd:36:10:ea:06:38:4d:92:d6:da:5b:
                    a5:02:84:20:79:13:79:44:1a:d6:9c:56:f8:cf:10:
                    e5:ad:e1:4b:3c:ca:13:67:54:95:31:5b:42:a5:a2:
                    d5:68:a6:d0:b8:38:3e:2e:46:66:24:52:39:45:07:
                    ed:42:98:1b:27:42:59:d2:cc:2e:e9:c2:2a:70:d3:
                    b3:d2:15:b5:b6:35:ea:9b:07:f2:c4:23:9c:2e:b9:
                    52:80:c2:9f:53:d0:c0:08:56:d7:e6:d6:f1:3b:a3:
                    f7:20:1e:36:88:c5:ec:48:b0:d3:85:01:14:d8:5e:
                    a6:8f:07:97:1f:b9:fd:fc:a9:5f:f4:80:6b:2e:d8:
                    89:d8:4c:79:d6:fc:3e:0d:88:50:f9:31:17:82:5f:
                    40:70:01:a0:ae:e1:b1:55:2a:35:0c:9d:4e:6d:a7:
                    d0:0b:81:9f:f9:ef:ab:39:a2:0d:10:08:08:90:f0:
                    ae:8c:26:33:34:96:c9:fb:d6:99:78:74:ed:7c:d2:
                    c6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6F:F2:BE:C2:8A:CD:B8:93:15:23:DF:69:A4:94:AF:80:DB:27:CF
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/332b30d9-b6cd-4931-94c2-b827ba9c7d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:8a00::/44

    Signature Algorithm: sha256WithRSAEncryption
         7c:63:c0:55:d2:17:c2:2a:36:37:20:fd:3e:a0:71:43:4d:1e:
         53:f9:ca:4a:ec:50:e1:cb:f4:92:90:a7:d5:c6:9c:05:48:fd:
         8f:ac:ed:46:44:24:bf:76:51:be:34:27:9b:a7:23:19:1d:3d:
         65:c6:7d:d8:32:a5:96:34:15:50:b5:65:b1:41:67:60:bc:ca:
         e0:d8:11:f7:58:92:c1:5d:28:d6:1d:ac:5a:bb:14:83:e9:54:
         88:e8:1b:83:93:08:14:6d:1d:cc:46:c1:37:04:f6:98:94:fd:
         c9:29:57:72:59:70:3a:f0:e4:8d:64:8e:2a:9d:29:a4:8d:9c:
         f8:ba:f4:de:30:63:2d:0c:13:37:e2:9f:95:18:a3:26:19:04:
         e3:f7:70:5d:95:70:44:8e:74:25:62:4f:89:15:6a:ea:3e:9e:
         39:b1:cd:a1:42:71:75:cd:a4:e1:15:77:3e:aa:ce:f9:9e:c9:
         bb:90:34:66:3c:b0:15:d4:4d:df:ba:c2:1b:c9:d5:69:e8:f2:
         4e:6f:5d:c5:29:3a:28:ac:7f:8a:dc:3e:5e:c9:d7:17:a4:49:
         ab:ea:19:98:45:ea:52:4d:a1:b9:00:fe:97:c8:d3:8c:1b:03:
         c9:53:7c:0a:7b:1d:53:6b:6d:f7:2f:ed:ae:e4:78:35:2c:66:
         31:d1:cb:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 8 16:47:30 2026 by rpki-client