Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/828860c7-04d3-410e-a0e6-5d8782c6c573.roa
File:                     828860c7-04d3-410e-a0e6-5d8782c6c573.roa (raw, json)
Hash identifier:          bpIep55nGW7nfit2ELENQbHfNNephhKIlmVGJVx71rA=
Subject key identifier:   72:16:72:74:C4:E4:07:DA:B6:E4:C8:B9:1E:B9:7B:AB:55:D3:5F:78
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3B9062F1255021500BDC97CFA1CEF03B2AFB5684
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/828860c7-04d3-410e-a0e6-5d8782c6c573.roa
Signing time:             Sun 11 Oct 2026 15:08:15 +0000
ROA not before:           Sun 11 Oct 2026 15:08:15 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:10a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:90:62:f1:25:50:21:50:0b:dc:97:cf:a1:ce:f0:3b:2a:fb:56:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 11 15:08:15 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=a8bdc8f7d4e0498c81b971f3bbf5aafeb5f5b8779b02853ee539b02aafc9d3e7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:df:51:a8:f6:3d:cf:2e:0c:a5:7c:04:f2:ed:
                    d0:8a:d6:62:89:1b:94:0b:36:88:02:9d:c6:fe:a8:
                    bd:4c:52:63:ac:fc:80:40:55:77:18:7f:0d:0c:c3:
                    ec:b3:09:bd:1f:e8:2e:de:81:4d:1e:0a:9a:9a:ce:
                    9b:9c:a6:ab:bc:b6:33:90:c3:ae:27:75:9c:c7:59:
                    e0:4b:e7:fa:a2:93:22:07:8f:da:da:38:57:ae:bd:
                    65:ba:61:c4:12:4d:5c:ba:53:4c:3e:5c:a6:72:a3:
                    82:37:d3:3a:6a:7d:71:eb:f1:68:d3:bd:ea:53:da:
                    30:8c:ae:ee:18:64:e8:ea:85:d3:7e:ee:cf:c5:a2:
                    09:3a:1c:2c:c4:5f:55:e1:7e:f8:d2:ad:44:fe:7b:
                    d8:a3:76:36:1a:aa:04:e2:2a:1e:72:04:15:5b:d9:
                    3a:14:0b:68:7d:34:f3:da:91:66:29:af:75:4d:9f:
                    52:16:a1:5f:7c:6e:e7:0b:6a:63:79:54:01:1c:b8:
                    fb:93:3c:7d:66:80:ca:b7:16:20:cd:9e:fe:1f:f5:
                    a5:9c:28:83:51:4d:4b:8f:48:16:09:93:85:6d:5c:
                    1c:60:84:ff:3e:6c:57:01:f5:cc:1e:86:69:b9:f0:
                    0d:4b:e4:3c:fb:81:c3:d0:70:2e:a7:cf:cb:14:db:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:16:72:74:C4:E4:07:DA:B6:E4:C8:B9:1E:B9:7B:AB:55:D3:5F:78
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/828860c7-04d3-410e-a0e6-5d8782c6c573.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:10a::/47

    Signature Algorithm: sha256WithRSAEncryption
         a5:b1:a9:78:12:9b:16:b0:91:17:d5:87:5e:24:8c:62:61:51:
         ed:e1:0d:99:11:85:87:82:51:ff:d3:17:6e:c4:4b:85:f6:cd:
         34:ba:b8:dd:02:40:17:bd:ff:c2:fd:9b:d4:bd:6a:4c:18:3d:
         c6:b1:a1:c0:26:12:c6:59:43:41:d8:fa:b5:a8:f0:0c:12:d6:
         31:cd:1c:74:7f:8b:49:84:c3:df:e8:77:8e:63:0b:bf:0c:b3:
         4f:6a:21:77:3e:63:84:f2:79:90:5f:25:37:37:07:17:c0:6c:
         3a:a0:ae:25:a8:8f:b3:40:61:6d:59:92:aa:3f:b5:cb:ba:a6:
         1a:0d:1c:f0:2b:4f:a4:d4:e1:98:16:77:1e:14:36:78:bc:af:
         cd:ae:55:f9:f1:a8:50:1c:c0:9d:1d:44:b8:46:00:fb:a5:3c:
         9d:3c:6e:5b:31:9b:3d:5c:4f:45:48:a8:17:cf:d9:fa:85:9b:
         97:f0:e2:ba:b1:26:cc:86:ad:91:21:ee:d0:26:ce:bd:4c:b0:
         6a:ba:b1:6a:74:b0:9d:fc:23:e5:47:44:a6:02:84:34:c0:b1:
         9c:9b:a1:ed:8f:dc:ad:e8:f7:85:91:6e:fc:80:f3:90:4a:1b:
         09:a6:da:dc:8f:6e:f4:94:15:f0:9e:c3:36:7e:db:d2:77:5e:
         13:ef:05:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 8 17:11:45 2026 by rpki-client