Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa
File:                     e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa (raw, json)
Hash identifier:          tn2QgHiHi2kjA+ZquAFCM+DQcXebJWLSxcIzm0bYjvc=
Subject key identifier:   CA:D1:0A:58:AB:2A:62:71:72:5A:EC:0C:AA:3F:98:C7:F1:3D:20:2A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4181617C1A5BC984281577C7657A3C226126F880
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa
Signing time:             Thu 15 Oct 2026 03:20:06 +0000
ROA not before:           Thu 15 Oct 2026 03:20:06 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:5400::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:81:61:7c:1a:5b:c9:84:28:15:77:c7:65:7a:3c:22:61:26:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 15 03:20:06 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=6dbb27dd1648089445c94433f0ea7bb85b3620c5c01017f2f0f2b120be5a44a2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:18:25:69:83:4c:3b:fc:83:4f:d1:0d:96:03:
                    ed:9d:5f:f0:90:8a:ea:35:62:15:f7:9f:6f:7a:cf:
                    4f:af:5f:81:d5:ac:51:c4:5b:14:4d:52:92:8f:cc:
                    9a:34:67:7b:9f:c2:14:66:79:cf:30:32:cb:b6:59:
                    f6:26:47:ed:41:cf:d3:dd:2a:05:da:48:6e:6a:4e:
                    9b:81:29:27:64:9d:8b:b2:b4:d1:fe:21:a8:8b:71:
                    16:fc:77:a7:d8:f2:97:97:02:c1:1d:7c:f4:f0:f4:
                    f4:8f:4c:d1:11:e0:54:86:fc:94:1f:67:0f:67:95:
                    b2:e6:ca:ea:1b:50:78:8f:60:d3:99:cb:c3:24:95:
                    5f:ce:77:26:00:5d:39:34:f2:ea:e4:b7:a0:85:27:
                    3c:1c:9b:1b:ed:e6:1d:f0:bd:34:d0:6b:c5:e8:a4:
                    c4:f9:18:8a:a4:fc:c0:dd:a1:15:9c:11:eb:f2:0a:
                    08:3c:96:12:ea:13:39:34:53:9f:f0:3b:d2:b2:c3:
                    eb:1f:65:ba:1d:34:b6:b3:d1:c6:96:74:82:09:c1:
                    d9:bc:94:10:03:a9:e1:e3:c9:40:a6:2a:8c:b5:49:
                    ef:2c:3f:94:6a:10:e2:d3:83:cc:ba:50:87:e9:04:
                    29:9b:08:25:fa:82:62:81:64:f1:2e:fb:85:a7:27:
                    a5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D1:0A:58:AB:2A:62:71:72:5A:EC:0C:AA:3F:98:C7:F1:3D:20:2A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e1a441b9-24e5-41e9-91e8-5e7d14fbdeff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5400::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:a4:a8:1f:0b:b9:10:a1:d9:c5:30:e7:08:4a:ad:df:c6:44:
         51:2f:23:81:70:f5:8b:a3:c9:9c:c8:33:1a:0d:30:37:a2:a9:
         39:33:99:ce:c4:7f:cf:72:21:9a:d4:de:91:66:20:f3:42:3c:
         af:38:da:03:4a:11:52:3d:6c:94:97:18:49:3e:96:08:5e:53:
         4a:5b:8f:e1:e6:ac:8b:e2:50:aa:74:72:cb:8e:89:3e:62:de:
         2d:d9:f6:48:8e:99:89:4b:17:02:a9:c5:b8:8c:79:81:cd:7b:
         a1:d0:52:5f:f9:8c:29:1c:b0:e8:84:d5:d8:7b:00:28:06:a6:
         46:08:60:bb:27:d8:a0:3b:2b:6a:2a:52:1d:ec:ec:cb:b2:23:
         86:d0:c8:30:b9:28:c0:a2:ce:81:9b:d4:1b:45:fb:d2:95:a9:
         fa:ad:ac:ce:1b:ac:fe:a7:cd:d1:c3:15:b0:d8:02:b7:b1:6d:
         85:5d:ba:17:30:b3:46:f8:6c:73:e6:7b:d0:25:8c:52:06:a5:
         16:93:54:99:fa:9a:b8:81:ce:13:9c:92:87:e0:9e:8e:b9:4f:
         b8:fc:6c:9d:24:e4:40:ac:76:c6:95:2e:7c:c9:b1:c5:c5:96:
         18:b4:f1:11:ee:1b:b3:f4:58:ff:6e:08:36:d4:ce:4f:91:fc:
         d8:1f:31:b6
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUQYFhfBpbyYQoFXfHZXo8ImEm+IAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE1MDMyMDA2WhcNMjcwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZGJiMjdkZDE2NDgwODk0NDVjOTQ0MzNmMGVhN2JiODVi
MzYyMGM1YzAxMDE3ZjJmMGYyYjEyMGJlNWE0NGEyMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqGCVpg0w7/INP0Q2WA+2dX/CQiuo1YhX3n296z0+vX4HV
rFHEWxRNUpKPzJo0Z3ufwhRmec8wMsu2WfYmR+1Bz9PdKgXaSG5qTpuBKSdknYuy
tNH+IaiLcRb8d6fY8peXAsEdfPTw9PSPTNER4FSG/JQfZw9nlbLmyuobUHiPYNOZ
y8MklV/OdyYAXTk08urkt6CFJzwcmxvt5h3wvTTQa8XopMT5GIqk/MDdoRWcEevy
Cgg8lhLqEzk0U5/wO9Kyw+sfZbodNLaz0caWdIIJwdm8lBADqeHjyUCmKoy1Se8s
P5RqEOLTg8y6UIfpBCmbCCX6gmKBZPEu+4WnJ6W7AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUytEKWKsqYnFyWuwMqj+Yx/E9ICowHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2UxYTQ0MWI5LTI0ZTUtNDFlOS05MWU4LTVlN2QxNGZiZGVmZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAPDwVDANBgkqhkiG9w0BAQsFAAOCAQEAmqSoHwu5EKHZxTDnCEqt38ZE
US8jgXD1i6PJnMgzGg0wN6KpOTOZzsR/z3IhmtTekWYg80I8rzjaA0oRUj1slJcY
ST6WCF5TSluP4easi+JQqnRyy46JPmLeLdn2SI6ZiUsXAqnFuIx5gc17odBSX/mM
KRyw6ITV2HsAKAamRghguyfYoDsraipSHezsy7IjhtDIMLkowKLOgZvUG0X70pWp
+q2szhus/qfN0cMVsNgCt7FthV26FzCzRvhsc+Z70CWMUgalFpNUmfqauIHOE5yS
h+CejrlPuPxsnSTkQKx2xpUufMmxxcWWGLTxEe4bs/RY/24INtTOT5H82B8xtg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:28:39 2026 by rpki-client