Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b711b513-e0f0-4a59-a188-036dda4ade5a.roa
File:                     b711b513-e0f0-4a59-a188-036dda4ade5a.roa (raw, json)
Hash identifier:          UQz3YrktT7qAHpEEUmAklC9S58clRCdNOitHmKYb0ng=
Subject key identifier:   09:83:85:E3:9C:1A:E4:59:17:34:CA:8F:49:87:46:5D:04:77:E1:5E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1383A17F3A7E0DC42C1DA9B645D8E4C0288413D8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b711b513-e0f0-4a59-a188-036dda4ade5a.roa
Signing time:             Mon 26 Oct 2026 04:20:12 +0000
ROA not before:           Mon 26 Oct 2026 04:20:12 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:ef00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:83:a1:7f:3a:7e:0d:c4:2c:1d:a9:b6:45:d8:e4:c0:28:84:13:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 26 04:20:12 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=326d8839c6e26adbfdf45cd129fd12c9e2d2a514dc0fd2162486e000504c7ffd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:3b:81:47:aa:58:10:a0:78:8e:83:da:85:
                    81:f9:52:04:f5:ec:76:75:b0:a1:85:99:15:cc:9e:
                    e3:5d:0e:c2:32:f4:2b:46:f9:c6:2f:4f:eb:8a:38:
                    d6:64:37:bb:bb:10:b6:4c:7b:3d:e5:36:ab:7f:39:
                    dd:22:75:02:84:2c:09:b4:b6:fa:90:32:a4:08:ee:
                    ee:ec:42:4d:84:49:7d:35:ef:0d:b1:ea:c9:37:cd:
                    a4:eb:4f:88:88:f2:0f:47:42:92:67:85:a3:0c:74:
                    35:43:84:05:5b:7c:f4:f9:91:89:8a:46:5f:9e:f0:
                    7e:19:45:88:e8:ba:27:6f:e6:68:8f:a2:b8:b2:5b:
                    a0:61:e5:63:c0:29:15:e4:73:69:fa:8a:c2:a2:7b:
                    a0:a1:c8:73:f7:d5:4f:57:9d:a2:f3:ab:0b:3f:db:
                    dc:30:f3:d3:76:f7:e7:cd:fe:3f:f6:4d:73:41:73:
                    33:5f:f1:53:7c:bd:a0:ab:00:9d:40:f1:22:07:4b:
                    b5:4e:1e:c1:ef:05:97:96:d9:99:d8:ec:bc:06:7f:
                    3b:08:37:93:af:4f:51:5c:18:aa:2f:25:0c:fb:51:
                    fd:17:05:40:5a:a7:45:3a:83:94:d8:d0:aa:05:69:
                    cf:a4:32:a5:d5:fa:c3:90:85:c6:ae:2d:94:94:5f:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:83:85:E3:9C:1A:E4:59:17:34:CA:8F:49:87:46:5D:04:77:E1:5E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b711b513-e0f0-4a59-a188-036dda4ade5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ef00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:e2:8b:a5:37:01:44:fe:8e:3d:cd:09:0d:41:a9:37:b9:c7:
         62:a5:32:ce:8e:65:ed:c1:ca:fd:94:cf:42:3c:06:af:ed:dc:
         95:dc:b7:12:6f:66:32:62:ca:6b:ea:79:f9:d6:cc:92:31:4c:
         c5:f4:45:2a:07:1c:a8:a3:4c:4e:f6:88:aa:0a:87:19:a1:e8:
         47:0d:94:03:dc:ac:9c:8c:73:bb:12:7c:6d:86:02:b9:5d:14:
         ae:73:55:d3:63:c3:18:e9:68:2d:11:c1:69:0e:4e:46:bf:7a:
         56:74:38:b7:49:aa:76:56:91:b8:51:1b:e2:6a:74:ce:7e:78:
         6c:b5:8e:46:34:e3:9d:4a:3e:b4:a0:bf:8c:d8:27:30:79:70:
         f0:cf:e0:cd:48:8d:f6:05:53:08:a4:40:f3:ac:1a:12:75:b5:
         ea:0d:62:a6:a6:6b:3b:1d:2a:b8:25:e4:6c:96:b7:30:7f:1a:
         7e:d3:6e:bd:3a:10:f1:50:20:16:45:61:68:cc:65:32:66:52:
         31:c5:39:d6:47:71:3f:d9:1b:9a:39:7c:09:51:81:db:0f:fe:
         ca:61:22:20:15:9e:63:9c:32:eb:7b:21:a4:6b:19:25:ef:bf:
         72:82:26:78:5e:d7:6f:78:f8:09:bd:ba:bd:17:64:77:38:51:
         5f:6e:13:a3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:57:27 2026 by rpki-client