Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/df5a5b5e-7d3e-401e-a4e6-4d4a0175d77f.roa
File:                     df5a5b5e-7d3e-401e-a4e6-4d4a0175d77f.roa (raw, json)
Hash identifier:          5ppsTQqM/94FPsD1PJtawcrc9otVBQizkR+Zh/59gQI=
Subject key identifier:   53:9F:A0:6B:77:2E:24:C6:99:74:C6:64:C3:BC:89:DC:A7:AE:12:6E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1F9E20D2602854930F2E2A43E0A9307FB3AB7E22
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/df5a5b5e-7d3e-401e-a4e6-4d4a0175d77f.roa
Signing time:             Sun 11 Oct 2026 15:08:51 +0000
ROA not before:           Sun 11 Oct 2026 15:08:51 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6117::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9e:20:d2:60:28:54:93:0f:2e:2a:43:e0:a9:30:7f:b3:ab:7e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 11 15:08:51 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=473e68489105106cfbbe5b6bd54758da91d4cecd94ac393e3477751aa7cc20e9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8e:f3:47:85:b0:98:50:06:09:4d:f7:d3:47:
                    48:2f:68:71:c7:c6:84:c4:14:92:dd:32:58:d4:50:
                    d9:f9:e2:c3:ed:f1:c1:b7:d1:37:4f:5a:b3:d2:16:
                    8e:60:24:5f:e2:65:ed:3e:06:8b:97:20:67:e3:40:
                    e3:40:ab:66:ae:87:57:d0:27:4c:9a:ef:a0:4e:2a:
                    8c:e2:c8:ee:62:d7:98:16:2c:3e:db:db:85:9f:4f:
                    1e:7c:84:06:e2:9f:ec:33:28:25:f6:20:b3:54:ae:
                    0b:a2:24:0f:93:73:e2:3b:49:3e:6a:59:0b:ba:43:
                    c8:dc:0e:1f:da:bb:2e:92:c4:86:d3:14:5f:e0:24:
                    ee:cc:74:aa:98:c3:37:0a:8f:37:5a:46:a6:cb:7a:
                    4c:0d:9f:e5:fb:20:f0:fa:c3:55:28:6e:af:33:0e:
                    d7:61:df:b6:c3:a9:3f:6b:b8:00:88:35:ef:1c:e7:
                    b0:e6:d8:2e:4e:e5:26:8d:4f:b7:bb:de:23:20:46:
                    2d:7a:8b:10:46:83:1a:69:72:c6:51:29:43:f1:77:
                    38:16:7c:75:ba:19:c5:c4:aa:85:91:c4:8a:5b:03:
                    36:ef:7a:77:37:2c:17:ee:19:50:94:81:94:34:06:
                    4a:48:0e:d1:84:92:a4:05:08:08:c7:bf:76:81:95:
                    33:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9F:A0:6B:77:2E:24:C6:99:74:C6:64:C3:BC:89:DC:A7:AE:12:6E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/df5a5b5e-7d3e-401e-a4e6-4d4a0175d77f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6117::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:75:21:af:f3:5b:6e:9c:31:e1:66:c6:9e:47:ef:c8:86:7d:
         81:1d:d9:7a:81:a1:50:03:7e:9f:34:0c:80:73:92:85:ff:8d:
         b3:79:72:e4:33:7a:c9:78:eb:67:6b:f6:26:47:8d:a6:be:f0:
         17:0b:44:2e:cc:83:d4:e4:9c:15:25:15:66:b3:57:20:29:d9:
         7d:34:c8:8d:d6:61:a0:07:93:ad:5f:5e:16:5c:af:be:ea:86:
         04:f3:54:6a:4f:81:55:56:1d:e8:44:1a:bd:12:47:69:de:4c:
         08:13:4d:d7:08:7c:80:13:45:a9:6c:23:55:c2:71:53:37:c4:
         c8:eb:11:21:db:de:c9:70:0b:2f:ba:ae:20:d5:23:57:73:d0:
         37:18:45:b8:08:29:7b:d9:c6:8a:4c:dd:d3:0f:71:51:1d:68:
         31:87:4e:bd:b6:5f:27:99:79:b9:30:eb:87:4e:65:49:99:0a:
         85:66:e4:8d:03:85:ac:41:25:cb:cd:2e:d9:82:a4:0e:1b:bf:
         de:23:0c:5f:11:59:9c:d5:c4:c4:76:1c:d7:3d:d0:64:5a:c8:
         a3:c4:ba:0f:97:a5:d9:e7:e2:e9:d8:be:51:ab:1f:fd:f5:b3:
         3e:88:e5:ea:96:fd:84:c2:8d:bc:61:fb:d5:83:89:4c:1a:ce:
         3a:06:fb:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:47:13 2026 by rpki-client