Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa
File:                     e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa (raw, json)
Hash identifier:          VlFt2yjhr5BjhmfYpw6/1+fO4JI2XWrWE2MmQO+by8w=
Subject key identifier:   5F:A3:30:18:73:80:9E:E8:93:34:B6:7B:C4:34:B7:5B:45:A0:D9:BB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       63F9D8393D7206CA88670125481E9F81D2120316
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa
Signing time:             Thu 08 Oct 2026 01:10:06 +0000
ROA not before:           Thu 08 Oct 2026 01:10:06 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f2:7100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f9:d8:39:3d:72:06:ca:88:67:01:25:48:1e:9f:81:d2:12:03:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct  8 01:10:06 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=aa5b94537463159e59ad0f643bc4afe666e67c5ed6d4a5a3f0d6d90c8d4dc622, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:b0:37:f9:4b:aa:f7:c6:a5:b0:34:ea:32:
                    7c:a9:23:da:bf:01:49:0d:e1:0a:8e:c8:ad:04:f3:
                    3c:b1:8c:aa:d1:11:74:95:2f:b0:3c:83:d6:a2:11:
                    9c:7c:fa:03:93:b8:72:bf:fb:35:c1:da:af:99:cc:
                    7a:5e:78:eb:5a:90:8a:57:0e:42:3f:d6:48:a8:dc:
                    f9:66:a4:64:30:68:ec:8c:0c:d2:5e:c5:7c:e5:65:
                    17:28:00:58:7a:dd:74:e3:20:8c:01:47:65:99:08:
                    98:30:2d:9f:2e:79:d9:ed:1c:d3:14:41:40:c2:18:
                    37:a1:d4:20:9c:18:c9:d9:ed:11:1a:bc:b3:3c:dd:
                    98:24:af:13:94:e5:ab:f0:cb:3c:f9:8d:5f:b9:8f:
                    26:ee:45:c9:f4:76:e7:c0:0a:b8:95:cc:5f:cc:7b:
                    67:a4:da:b4:c1:5a:37:b7:2e:ab:9f:6d:65:21:a3:
                    55:e3:49:32:3d:f6:5b:54:9f:45:eb:be:a3:e5:b2:
                    6f:e2:5c:ae:89:a4:19:c3:de:73:5d:6c:3d:ab:dc:
                    86:56:ad:63:4a:ce:d0:ad:5c:92:22:72:af:b6:ce:
                    78:d2:61:cb:7b:20:87:6e:25:6e:95:aa:e9:2e:40:
                    c4:dd:59:e1:08:72:86:61:53:95:ee:a1:27:eb:26:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A3:30:18:73:80:9E:E8:93:34:B6:7B:C4:34:B7:5B:45:A0:D9:BB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:fe:57:dc:32:ca:b2:62:64:3c:3b:10:aa:1f:e3:15:03:86:
         ec:bf:22:05:df:89:60:e8:9a:87:cc:dc:98:7f:d4:95:79:e1:
         f3:ff:3e:0e:22:5c:f9:59:11:99:c8:75:70:eb:5f:64:69:43:
         d7:f7:c6:35:73:dd:4e:7f:9a:53:50:b8:5e:b7:c7:d3:07:0d:
         64:b2:66:a6:56:77:46:c5:2e:f0:ea:f1:73:e9:cf:c3:22:4f:
         89:e2:f8:3a:63:6a:fa:a7:9d:c7:c5:de:6f:75:23:79:29:6c:
         4b:7a:40:a9:72:09:2a:9c:9b:f9:87:7c:9b:2b:6d:15:a2:af:
         2a:5c:81:49:47:81:4a:f3:6b:6e:2e:c3:dc:8c:05:97:1e:0e:
         74:b8:d6:9b:c0:a2:e7:63:2d:37:d7:13:88:bb:41:40:c8:3f:
         72:d7:70:79:93:af:b4:29:5c:9c:62:39:9e:aa:bd:74:9d:c1:
         1a:a9:38:1b:76:bb:2b:d1:c0:69:95:b5:6c:01:33:6f:98:f4:
         f6:50:5a:c8:a0:1e:56:ea:fd:58:25:42:33:88:08:1c:fd:32:
         70:fe:0d:49:8c:ad:97:7e:d0:a1:31:8a:3a:0c:1f:8b:4b:64:
         bc:1f:20:a2:b7:0c:d0:0c:8e:5b:52:3b:0b:85:7c:86:b7:fa:
         37:4d:c3:84
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUY/nYOT1yBsqIZwElSB6fgdISAxYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDA4MDExMDA2WhcNMjcwMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYTViOTQ1Mzc0NjMxNTllNTlhZDBmNjQzYmM0YWZlNjY2
ZTY3YzVlZDZkNGE1YTNmMGQ2ZDkwYzhkNGRjNjIyMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvx7A3+Uuq98alsDTqMnypI9q/AUkN4QqOyK0E8zyxjKrR
EXSVL7A8g9aiEZx8+gOTuHK/+zXB2q+ZzHpeeOtakIpXDkI/1kio3PlmpGQwaOyM
DNJexXzlZRcoAFh63XTjIIwBR2WZCJgwLZ8uedntHNMUQUDCGDeh1CCcGMnZ7REa
vLM83ZgkrxOU5avwyzz5jV+5jybuRcn0dufACriVzF/Me2ek2rTBWje3LqufbWUh
o1XjSTI99ltUn0XrvqPlsm/iXK6JpBnD3nNdbD2r3IZWrWNKztCtXJIicq+2znjS
Yct7IIduJW6VqukuQMTdWeEIcoZhU5XuoSfrJruPAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUX6MwGHOAnuiTNLZ7xDS3W0Wg2bswHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2UzY2U1YWVmLTcxM2ItNGFlOS04MDM2LWVmNGI2ZDE3ODcxNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAPDycTANBgkqhkiG9w0BAQsFAAOCAQEAj/5X3DLKsmJkPDsQqh/jFQOG
7L8iBd+JYOiah8zcmH/UlXnh8/8+DiJc+VkRmch1cOtfZGlD1/fGNXPdTn+aU1C4
XrfH0wcNZLJmplZ3RsUu8Orxc+nPwyJPieL4OmNq+qedx8Xeb3UjeSlsS3pAqXIJ
Kpyb+Yd8myttFaKvKlyBSUeBSvNrbi7D3IwFlx4OdLjWm8Ci52MtN9cTiLtBQMg/
ctdweZOvtClcnGI5nqq9dJ3BGqk4G3a7K9HAaZW1bAEzb5j09lBayKAeVur9WCVC
M4gIHP0ycP4NSYytl37QoTGKOgwfi0tkvB8gorcM0AyOW1I7C4V8hrf6N03DhA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 15:07:41 2026 by rpki-client