Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b51f360b-51dd-46ed-9df1-5d5b37dcb02b.roa
File:                     b51f360b-51dd-46ed-9df1-5d5b37dcb02b.roa (raw, json)
Hash identifier:          Q0Bj230/VerHS5pbRKrLJ6zdS2Ay5TcIiXnYI5NSvVU=
Subject key identifier:   DC:8C:C4:E6:14:53:F3:ED:B4:8F:38:A7:6D:E5:76:CD:FD:D8:38:90
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       30EC3853916477E6F36C919FE47BFEA81C6BBA27
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b51f360b-51dd-46ed-9df1-5d5b37dcb02b.roa
Signing time:             Sun 11 Oct 2026 15:10:19 +0000
ROA not before:           Sun 11 Oct 2026 15:10:19 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:611b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ec:38:53:91:64:77:e6:f3:6c:91:9f:e4:7b:fe:a8:1c:6b:ba:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 11 15:10:19 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=72fff74c17bfa7e25bdc3e3b14a99a226a0e35cd5ea68d5d307de128dc9cafd5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:5b:a4:0a:ff:df:d3:ab:75:1c:42:9d:fb:
                    d6:7f:ad:83:83:f5:9e:11:40:f2:a6:45:c2:96:d5:
                    64:b0:f2:07:de:b5:20:a2:5c:a1:6f:29:f6:b9:96:
                    c0:36:7d:27:fe:9d:a4:a3:2a:08:59:da:65:5f:ae:
                    58:4f:ef:c1:b9:c1:3f:20:c3:60:5c:46:11:29:51:
                    c1:c2:50:22:fe:f4:94:78:56:02:25:dd:56:37:97:
                    c1:d4:5f:43:62:fd:28:c0:cc:0c:89:90:a8:c7:a7:
                    b0:ea:e1:1a:14:69:08:4f:80:f6:99:9d:47:6b:1e:
                    53:03:eb:d3:eb:f7:72:df:9d:42:d2:fb:20:b3:f1:
                    6a:27:9b:3d:a9:ca:6f:42:c5:a7:9e:a8:ee:e1:e9:
                    b9:3c:06:b7:7f:9a:ce:44:93:aa:96:77:5f:05:46:
                    84:62:00:93:18:83:e2:a8:2e:cd:9c:98:72:17:79:
                    cc:7a:08:12:8f:c9:d2:61:1a:69:84:d9:d6:64:5d:
                    24:25:81:46:5e:75:52:0f:48:6c:44:25:e5:2d:1d:
                    a7:10:ab:e2:34:21:3f:ae:99:8c:85:bb:27:cd:8a:
                    2f:8d:08:cd:08:84:1c:76:f3:33:6a:ce:c0:8b:bd:
                    d4:45:7b:d6:a0:f6:86:13:e3:d2:0c:5c:cc:33:b1:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8C:C4:E6:14:53:F3:ED:B4:8F:38:A7:6D:E5:76:CD:FD:D8:38:90
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b51f360b-51dd-46ed-9df1-5d5b37dcb02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:611b::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:11:c3:ca:0a:4f:56:35:9c:4a:04:55:73:52:a8:7a:3c:0d:
         13:02:17:62:aa:51:56:c7:a1:15:ad:af:05:1d:03:cf:de:5b:
         a3:9d:22:da:6e:c9:66:0d:78:26:fb:14:1a:ab:29:d9:e6:be:
         a2:4d:ec:00:9b:e6:2d:d3:24:58:38:e2:f9:1d:cd:8a:1d:28:
         c9:eb:19:30:80:a0:91:fb:74:9d:50:45:22:2c:01:9c:2e:c3:
         14:09:ad:c8:f1:68:f8:d6:e8:5e:6b:c4:1b:93:9d:c4:cb:2c:
         e9:b4:ed:df:de:54:f3:ab:18:f2:52:84:c6:bf:c2:38:3a:71:
         a2:11:12:b4:da:57:20:15:c4:6e:2d:25:a3:ee:51:1d:af:72:
         d4:c0:6d:a6:06:f1:36:9b:6f:a4:40:71:e4:1d:e4:41:bf:ab:
         b3:1d:ba:37:ff:9c:50:a9:1c:21:c3:3e:31:89:fc:8f:37:45:
         aa:d2:e8:ea:6f:ee:35:54:d1:9f:2c:7f:31:4b:53:8a:aa:1d:
         17:7b:04:10:36:be:4b:ca:a5:ce:3f:2e:c4:b9:0b:6b:4b:16:
         fa:7f:69:72:ca:f4:7d:dd:ce:a1:f9:e7:fa:24:a8:9a:50:ff:
         4f:7d:c0:c0:e7:52:b4:d9:50:d6:da:7f:07:05:dd:b2:67:7b:
         0d:30:0b:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:04:14 2026 by rpki-client