Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ca586b6c-c586-4283-8392-892b53790b90.roa
File:                     ca586b6c-c586-4283-8392-892b53790b90.roa (raw, json)
Hash identifier:          9tUa2iG6ZsnUNmmoZbjtA5bvHkLecwNq0l+aUcBRJ9Q=
Subject key identifier:   EC:F5:10:1F:9B:2F:05:67:EC:38:7B:C6:5C:C9:61:8E:13:3D:01:53
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4FE92632CB3E5ED738DA4CBA653C70B494B8E77F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ca586b6c-c586-4283-8392-892b53790b90.roa
Signing time:             Sun 18 Oct 2026 01:20:07 +0000
ROA not before:           Sun 18 Oct 2026 01:20:07 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f1::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e9:26:32:cb:3e:5e:d7:38:da:4c:ba:65:3c:70:b4:94:b8:e7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 18 01:20:07 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=ecc69c8a8737441eb2e38e35ee063f7436aad02a048a21aa37504ee2a62a98fb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:27:3f:c3:3a:fa:04:ea:cc:ec:dd:af:67:eb:
                    82:8e:09:d2:7a:ef:06:fc:f4:77:98:a4:4f:99:75:
                    14:12:49:63:ba:f5:a5:11:33:7b:cb:90:8d:bd:04:
                    a2:2e:cb:10:7e:00:09:7f:6e:d8:ba:70:93:e5:a0:
                    c7:ba:c1:ca:76:dc:40:da:bd:fd:5b:88:f9:78:a4:
                    09:46:28:93:14:ef:e2:79:02:8e:19:48:32:ae:cb:
                    9c:ae:62:07:cb:df:d7:45:2c:b7:26:c7:25:9d:78:
                    fb:7d:2e:66:19:75:72:5b:9a:5f:bd:00:2b:65:00:
                    77:71:61:a9:00:83:21:ac:28:9c:bd:a0:99:b7:70:
                    bf:0a:01:9e:06:5d:c4:ea:85:a5:8a:1a:89:a4:9d:
                    76:05:38:97:9a:96:0d:6f:48:d5:e8:6e:cb:9d:4a:
                    7c:73:0e:59:46:a6:b6:2f:b4:74:dc:5f:cf:40:30:
                    9a:5f:f1:69:29:93:ae:be:bc:44:e5:1e:a0:d4:07:
                    70:43:c4:f3:3d:32:fe:f0:3d:f4:37:3d:fa:a2:15:
                    d0:cc:54:8e:7d:c3:ef:fd:5b:9e:06:39:21:87:17:
                    b4:b3:46:88:71:3f:81:d0:3e:b6:69:57:56:ee:78:
                    74:b2:79:62:67:94:d9:1b:f6:2f:fd:99:f1:4e:00:
                    5e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F5:10:1F:9B:2F:05:67:EC:38:7B:C6:5C:C9:61:8E:13:3D:01:53
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ca586b6c-c586-4283-8392-892b53790b90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f1::/44

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:25:36:67:f5:d0:70:e1:81:dd:22:70:e8:8e:8d:e0:f9:
         36:56:d3:02:67:2d:90:c8:b2:77:68:65:aa:6d:89:2b:eb:1e:
         0a:2b:2b:4e:ed:89:04:53:db:91:7a:ec:88:b0:af:65:a0:16:
         dd:2f:c0:e9:64:ff:be:1e:e3:26:d4:65:ad:bf:2d:ff:eb:5d:
         0d:72:06:aa:d2:81:73:93:d3:0d:f0:d1:6f:63:22:ac:e1:cb:
         fc:3b:f8:66:40:40:8d:0e:22:7d:0a:dc:03:30:95:4a:cb:60:
         6a:06:8d:78:35:75:c3:3c:05:94:38:0f:e5:45:c7:3c:5a:0b:
         ac:3c:ee:a2:cd:18:38:35:82:a5:42:2b:70:3f:95:9d:6a:c0:
         8e:fb:d1:e6:24:93:cf:63:ed:ff:06:a4:17:d7:1a:ec:8a:c4:
         05:8d:b9:c1:3e:16:38:06:ce:9c:b2:9a:d3:47:bf:71:bf:9b:
         cf:e1:1e:f8:aa:ab:da:85:d4:23:58:15:d4:8d:9f:fa:0d:5f:
         ba:e8:79:9f:37:94:cf:c6:d6:35:9a:e2:ac:19:d5:cd:01:83:
         95:45:22:0c:a2:52:18:b2:af:86:a9:c1:c5:69:74:68:87:0c:
         cd:1c:4f:2d:bf:94:28:f5:c8:e0:e6:fc:b6:cd:57:36:93:66:
         96:ba:77:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:36:20 2026 by rpki-client