Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa
File:                     c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa (raw, json)
Hash identifier:          sOdgVU7nAv3iwlGQaAMD5/itTYq7Nd+T9ASeZ6Szb5Q=
Subject key identifier:   A8:84:DE:FD:3E:A1:E0:48:7C:C4:FC:3C:EB:31:70:B1:16:2C:1B:92
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5B224A868A3E0F9FF9A65847DF46EC5EB738EA15
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa
Signing time:             Wed 22 Oct 2025 00:40:11 +0000
ROA not before:           Wed 22 Oct 2025 00:40:11 +0000
ROA not after:            Wed 26 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:f109::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:22:4a:86:8a:3e:0f:9f:f9:a6:58:47:df:46:ec:5e:b7:38:ea:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 22 00:40:11 2025 GMT
            Not After : Nov 26 23:59:59 2025 GMT
        Subject: serialNumber=511ed8021131c0a5d7442dbbb379890eadc8c44b8aa5cc7aad201ad644285d24, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:3d:3a:02:4a:3f:46:99:62:a8:c0:ff:86:
                    39:24:da:93:34:2f:09:34:78:97:4e:bc:e6:4b:83:
                    e2:79:22:cb:9a:6e:16:e5:ef:a5:e4:9e:09:a4:a3:
                    1f:91:3c:6e:5a:de:c2:10:34:50:79:9c:df:52:b0:
                    29:2b:8f:72:f2:a8:0e:07:03:66:82:82:8d:29:4e:
                    53:52:25:88:d3:ea:6d:e0:2e:dc:20:18:ed:6b:2a:
                    23:f1:af:46:e7:3f:71:f2:d4:54:c3:a6:ee:ea:34:
                    26:a8:1d:20:4c:53:4a:68:89:ef:1d:ad:e3:85:a4:
                    1e:06:97:17:f0:db:f5:95:2a:22:20:c4:0b:f2:36:
                    e6:9e:a4:63:02:81:31:76:a6:32:13:5d:c7:67:37:
                    38:e1:e2:26:10:3f:09:f1:f2:b0:d3:83:42:13:ab:
                    26:74:bd:75:19:b6:67:33:14:4b:aa:57:2e:f1:77:
                    4f:d6:7d:4b:7e:11:bf:42:3a:86:76:4b:7c:b0:ad:
                    52:cc:8a:64:df:30:48:de:a7:fc:87:b2:69:bf:4e:
                    88:57:1a:2f:4f:f0:1d:52:e2:0e:a9:c7:93:79:83:
                    91:07:05:36:08:6b:46:d4:af:70:d8:df:41:a8:93:
                    e8:b3:ce:9a:37:4e:ef:37:ea:19:79:0a:e3:6b:c8:
                    b1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:84:DE:FD:3E:A1:E0:48:7C:C4:FC:3C:EB:31:70:B1:16:2C:1B:92
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c7dfb6fc-ab51-45b7-aa1c-723b8c263e73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f109::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:eb:41:51:88:ae:dd:5b:a8:98:6a:5e:b2:96:16:9d:e3:59:
         72:e8:ed:02:cb:7a:7b:e2:e8:60:cd:ea:c4:40:0f:95:7a:b1:
         27:da:a2:7d:2e:4b:46:cd:2c:fc:35:ad:95:06:11:c3:52:9a:
         60:9b:79:9c:c8:2b:db:3c:27:50:49:cc:5b:61:c8:12:25:e6:
         8f:3a:00:c0:2b:32:ef:67:6d:ca:36:f4:4d:a5:78:84:67:5e:
         13:14:1c:7d:ba:d1:2f:3b:98:79:9a:27:f0:c8:b3:85:54:5e:
         ff:2f:c7:bd:44:8f:35:44:91:00:88:d7:61:15:60:9e:b2:a5:
         98:fa:6b:f7:59:1b:79:ff:6e:2d:01:88:91:52:08:3e:bd:f8:
         45:05:7a:9e:33:cd:f3:d7:cf:84:c0:86:05:f8:5c:d9:25:50:
         15:9d:36:26:94:02:15:3b:b3:02:cf:66:59:66:65:ec:b3:51:
         82:57:86:bd:55:88:ff:8a:5b:ad:72:92:9d:15:03:2b:ef:ac:
         8e:4a:83:6e:13:3b:4a:f9:d1:4c:a7:d7:6d:1a:09:ba:17:a1:
         bd:ac:5b:4f:78:58:32:7d:b7:23:1c:fc:03:52:f8:b4:40:92:
         74:5f:e5:d9:b8:b6:7e:0e:63:9c:26:98:2a:ca:2a:4c:3b:d3:
         0b:45:79:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 4 04:39:54 2025 by rpki-client