Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7a7e88fd-a920-41bc-8fe7-4e4652bf70f5.roa
File:                     7a7e88fd-a920-41bc-8fe7-4e4652bf70f5.roa (raw, json)
Hash identifier:          72pkPiBkrR/tiNApgyhW22bJJdZ3ssfmP4KKbCLda2k=
Subject key identifier:   64:9F:57:16:76:17:59:A0:4B:C5:86:1C:FC:4F:44:A8:6E:2D:89:88
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       64E64ED5B9E7F1EC594BE5A618EAADAF22F06DEE
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7a7e88fd-a920-41bc-8fe7-4e4652bf70f5.roa
Signing time:             Wed 07 Oct 2026 21:01:54 +0000
ROA not before:           Wed 07 Oct 2026 21:01:54 +0000
ROA not after:            Tue 05 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f2:740e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e6:4e:d5:b9:e7:f1:ec:59:4b:e5:a6:18:ea:ad:af:22:f0:6d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct  7 21:01:54 2026 GMT
            Not After : Jan  5 23:59:59 2027 GMT
        Subject: serialNumber=3dcc6826d4a03925aa36743dddc0899a593dc5b05a812994e436e425caa1b072, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:26:30:d7:01:91:76:d2:db:61:c5:90:bf:
                    81:13:ae:29:e7:98:55:e6:9b:d1:0b:3b:43:b4:a1:
                    4d:35:e5:d7:17:6a:22:72:e4:ac:54:be:f2:ef:39:
                    00:2b:a2:e4:bb:46:46:89:f0:54:f1:45:ba:a4:29:
                    33:de:da:4a:0a:f8:11:10:2e:3b:06:b3:c5:fc:20:
                    1b:2f:7b:14:43:32:80:e1:e1:85:0d:d0:a9:7f:21:
                    8e:db:7d:d6:36:ee:21:1e:96:c6:f6:f8:b1:20:99:
                    f7:9c:29:4a:bf:bc:fd:37:d0:2b:98:bd:10:5e:cd:
                    9a:87:21:ad:ab:a8:d3:e9:c3:63:6d:d3:71:19:f4:
                    28:32:ab:be:be:db:ab:c8:ae:f5:c1:a3:7c:af:a3:
                    10:bf:79:91:d2:57:3e:90:4b:6e:27:29:b3:52:51:
                    3d:45:15:23:95:a5:c9:61:13:7b:84:6c:67:84:2c:
                    89:22:88:fc:87:59:34:d1:23:71:c5:e6:a9:a3:92:
                    bd:85:24:03:b0:e8:09:3c:7a:0f:85:3d:c9:c2:e2:
                    98:f1:c8:48:4b:2c:85:06:28:4c:bd:f9:f1:f1:8a:
                    60:a9:e6:45:91:b2:2c:6d:ef:10:9d:92:34:71:68:
                    2a:8e:28:f1:20:36:6b:5f:56:a3:bf:6d:14:1c:bf:
                    b7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9F:57:16:76:17:59:A0:4B:C5:86:1C:FC:4F:44:A8:6E:2D:89:88
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7a7e88fd-a920-41bc-8fe7-4e4652bf70f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:740e::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:2c:9a:6c:8f:e0:50:ed:26:29:a1:96:f8:80:97:1c:23:56:
         af:ad:bd:9a:e4:76:70:dd:98:0e:26:4e:cc:d4:ed:f1:bd:d2:
         6a:be:cb:12:ff:b3:52:37:d4:c7:2d:60:21:9f:fe:b2:11:26:
         73:1e:5c:45:cf:9d:c3:46:f3:b4:33:d7:0a:21:06:17:2c:16:
         93:c5:3c:0e:b6:95:56:7d:96:98:0d:97:f4:3e:07:43:af:c2:
         9e:d1:fe:4b:02:e6:8b:e5:b1:f4:e3:dc:45:b2:bd:a8:01:04:
         f2:be:56:93:12:ec:a0:41:c3:9f:a0:43:b0:94:74:80:dd:ec:
         ba:e7:70:aa:81:31:07:76:c1:0e:f0:d6:28:1f:cd:26:57:2c:
         b4:6f:d2:ff:a5:05:ed:c5:26:3e:d6:a8:c2:c1:d9:fb:a5:d7:
         fd:01:66:2f:7b:fb:0e:3f:ca:ce:90:3f:8b:20:fc:dd:75:9c:
         9d:58:a2:9e:3f:80:ee:d1:0b:d0:69:df:03:1f:7c:37:8c:78:
         a4:6c:bf:7b:56:ce:a2:bf:70:e0:09:20:c8:36:e4:97:eb:54:
         b4:9e:8a:fb:33:50:93:1c:dc:03:5e:d1:59:67:e1:09:54:3b:
         76:4e:39:f6:b3:76:99:a2:6f:9b:f4:45:fa:5b:47:8e:a0:a6:
         a4:81:41:db
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZOZO1bnn8exZS+WmGOqtryLwbe4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA3MjEwMTU0WhcNMjcwMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzZGNjNjgyNmQ0YTAzOTI1YWEzNjc0M2RkZGMwODk5YTU5
M2RjNWIwNWE4MTI5OTRlNDM2ZTQyNWNhYTFiMDcyMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2uCYw1wGRdtLbYcWQv4ETrinnmFXmm9ELO0O0oU015dcX
aiJy5KxUvvLvOQArouS7RkaJ8FTxRbqkKTPe2koK+BEQLjsGs8X8IBsvexRDMoDh
4YUN0Kl/IY7bfdY27iEelsb2+LEgmfecKUq/vP030CuYvRBezZqHIa2rqNPpw2Nt
03EZ9Cgyq76+26vIrvXBo3yvoxC/eZHSVz6QS24nKbNSUT1FFSOVpclhE3uEbGeE
LIkiiPyHWTTRI3HF5qmjkr2FJAOw6Ak8eg+FPcnC4pjxyEhLLIUGKEy9+fHximCp
5kWRsixt7xCdkjRxaCqOKPEgNmtfVqO/bRQcv7dxAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUZJ9XFnYXWaBLxYYc/E9EqG4tiYgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzdhN2U4OGZkLWE5MjAtNDFiYy04ZmU3LTRlNDY1MmJmNzBmNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDydA4wDQYJKoZIhvcNAQELBQADggEBAG0smmyP4FDtJimhlviAlxwj
Vq+tvZrkdnDdmA4mTszU7fG90mq+yxL/s1I31MctYCGf/rIRJnMeXEXPncNG87Qz
1wohBhcsFpPFPA62lVZ9lpgNl/Q+B0Ovwp7R/ksC5ovlsfTj3EWyvagBBPK+VpMS
7KBBw5+gQ7CUdIDd7LrncKqBMQd2wQ7w1igfzSZXLLRv0v+lBe3FJj7WqMLB2ful
1/0BZi97+w4/ys6QP4sg/N11nJ1Yop4/gO7RC9Bp3wMffDeMeKRsv3tWzqK/cOAJ
IMg25JfrVLSeivszUJMc3ANe0Vln4QlUO3ZOOfazdpmib5v0RfpbR46gpqSBQds=
-----END CERTIFICATE-----
Generated at Sun Oct 11 09:21:15 2026 by rpki-client