Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd97a428-d2d8-4b29-b88b-fa5fdb18968b.roa
File:                     bd97a428-d2d8-4b29-b88b-fa5fdb18968b.roa (raw, json)
Hash identifier:          W1iIPmgGZH0KTnPrkFxHEvcgtfTrQO+Nj8wMYdYcWaM=
Subject key identifier:   F4:C0:0B:64:79:E6:FD:7F:97:96:F7:0E:14:5D:87:CF:83:BB:B5:7E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       186672ECFB9D54F0F58134FC1D8209FBF7B6054A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd97a428-d2d8-4b29-b88b-fa5fdb18968b.roa
Signing time:             Mon 19 Oct 2026 19:54:30 +0000
ROA not before:           Mon 19 Oct 2026 19:54:30 +0000
ROA not after:            Sun 17 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f1:8b05::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:66:72:ec:fb:9d:54:f0:f5:81:34:fc:1d:82:09:fb:f7:b6:05:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 19 19:54:30 2026 GMT
            Not After : Jan 17 23:59:59 2027 GMT
        Subject: serialNumber=cccadffc44ff31efee7f57aac38787b86906939e66612802716a84758c39326c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:2f:6f:67:71:48:f6:99:e9:4a:3d:1c:7a:
                    d3:0c:68:62:6d:5c:3f:de:ce:8e:7b:89:48:cf:c7:
                    43:44:d0:67:4f:ca:4f:bd:fc:d2:8f:e4:de:b0:4f:
                    aa:dc:0d:85:b7:d7:06:22:8b:ce:36:d1:9c:ee:84:
                    97:66:a6:fa:85:b9:b4:1d:42:e8:6f:2e:c0:5c:13:
                    36:07:e1:1b:4c:f7:93:90:9b:1e:a0:c5:58:4a:ff:
                    d9:0c:5d:97:6a:73:4f:1b:83:0e:9e:71:c6:c1:ec:
                    ec:34:71:f1:cd:a8:40:a1:4b:68:c9:d3:b8:49:2a:
                    cc:80:49:ab:4b:3a:25:8e:8d:f6:d9:ff:ad:b3:4e:
                    03:4a:74:b8:73:09:ca:ec:8b:a6:c1:a2:01:3a:2b:
                    b5:58:23:d4:f1:2c:79:6b:ab:ca:04:3b:ae:7b:30:
                    eb:cb:1d:ba:29:39:7c:14:df:20:33:6b:8c:7e:6b:
                    b6:1f:bc:3f:b4:e1:5a:31:38:d4:85:af:8d:ed:26:
                    7f:e8:45:7a:29:25:e3:8c:8b:25:fb:d0:0e:0b:ee:
                    1f:8e:8b:28:57:80:6a:2b:f5:d1:48:1e:b5:a7:14:
                    65:e1:ee:63:e3:a4:e4:f5:ab:e6:24:d8:9b:21:35:
                    fb:71:31:58:2c:c3:96:29:36:7c:bd:fc:11:ee:45:
                    7d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C0:0B:64:79:E6:FD:7F:97:96:F7:0E:14:5D:87:CF:83:BB:B5:7E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd97a428-d2d8-4b29-b88b-fa5fdb18968b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1:8b05::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:7e:38:b9:ee:5a:fa:76:42:01:a1:2e:0d:7f:f1:34:b7:77:
         c1:ed:af:a9:12:6b:d3:57:69:8d:eb:5e:b7:a2:43:66:e8:67:
         0a:c7:28:6e:0a:8b:48:1d:22:88:2c:28:99:ae:cf:5f:de:2e:
         0b:c6:b3:bc:f7:e6:fc:b2:f5:65:f1:45:ca:fc:47:d0:0a:95:
         21:da:88:47:83:cb:c1:c5:f1:b9:f9:b8:d1:cb:f3:64:19:95:
         ff:da:20:a9:6e:26:8c:2e:e0:d5:5b:a9:45:67:b5:16:c1:dd:
         b3:19:b1:14:4e:97:bf:9a:ab:dc:a1:55:58:ff:22:6b:bd:78:
         01:e8:e0:00:74:d2:3d:00:32:90:f9:f2:6b:35:45:74:d6:50:
         c7:dc:98:0f:85:3a:0b:a6:22:63:12:c1:cd:a1:1b:e5:76:6a:
         9a:b8:0d:74:fb:6c:b4:75:08:7c:5b:d0:65:c9:a6:44:16:91:
         21:24:3a:60:f5:e1:cf:a1:20:09:52:22:fb:b2:98:2b:ae:00:
         71:2a:d3:fb:a6:96:fb:75:cd:82:69:f6:1c:1d:09:52:53:44:
         8a:b6:b1:f0:72:f0:fb:17:48:2a:c6:b2:f5:73:c6:f2:77:f4:
         b3:32:1f:a4:c2:21:1e:64:08:b4:7c:31:a1:6d:94:90:54:59:
         3d:12:99:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:07 2026 by rpki-client