Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e5c3b151-f08e-44bd-b446-9a53733036dc.roa
File:                     e5c3b151-f08e-44bd-b446-9a53733036dc.roa (raw, json)
Hash identifier:          /z0ir9cyCwGgzooBwWPGfQHZ8ohIz0etAontji8n4OQ=
Subject key identifier:   80:8C:F0:99:D0:63:C6:24:6E:3B:54:9B:8F:17:29:D3:47:ED:74:34
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       26DC407256AF9E65886B9E05236BC0FFB2E2F2E8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e5c3b151-f08e-44bd-b446-9a53733036dc.roa
Signing time:             Mon 06 Oct 2025 17:40:46 +0000
ROA not before:           Mon 06 Oct 2025 17:40:46 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:dc:40:72:56:af:9e:65:88:6b:9e:05:23:6b:c0:ff:b2:e2:f2:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct  6 17:40:46 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=48e38427743bad289ff80556a74917733c0db75f5efb32167fc1d7ad9578ba1b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:a4:50:a3:11:b7:f7:4b:5d:a0:d4:da:2b:
                    34:b4:4a:64:f4:90:2f:42:ce:7a:f5:9c:1e:b2:0a:
                    c9:85:81:f3:24:24:2a:80:f8:0f:24:77:51:49:3f:
                    39:bf:85:2e:b4:67:d0:38:3f:63:34:73:4e:6e:73:
                    35:a6:1a:e6:a7:3b:99:6d:39:be:b0:e6:5c:14:5f:
                    4e:95:de:75:14:c3:7c:fb:3f:d7:0d:b8:4a:85:60:
                    bd:8a:d5:9f:de:fe:ce:64:f7:04:be:62:ca:b8:07:
                    02:f5:af:f1:a2:69:b4:cb:16:6c:dc:9c:98:07:4d:
                    2a:b4:9b:60:c2:b8:57:15:80:d2:82:a6:58:cb:07:
                    ae:5f:4e:b6:9e:ef:74:90:fb:bb:fd:11:45:83:02:
                    61:a6:15:0c:61:ad:f4:f6:ba:e7:18:73:bf:f7:67:
                    c0:c4:42:b7:9c:7f:d7:b3:6f:0c:b7:0c:1f:df:12:
                    74:dc:6a:73:62:d1:be:63:f8:a8:86:cd:1f:56:c4:
                    a0:6b:f6:ca:9b:e3:bd:90:c8:2e:ea:ee:d9:e9:03:
                    97:51:8a:d1:ae:f3:7e:23:09:5b:40:78:1e:83:40:
                    11:1e:5a:6c:2d:5a:bf:9a:87:53:ce:83:64:10:97:
                    09:af:47:73:5c:80:97:5a:c8:d4:e4:a0:79:64:0b:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8C:F0:99:D0:63:C6:24:6E:3B:54:9B:8F:17:29:D3:47:ED:74:34
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e5c3b151-f08e-44bd-b446-9a53733036dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6103::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:ac:67:d8:eb:71:d7:d6:42:65:2b:83:4f:3e:68:cd:fe:98:
         c9:11:9e:97:32:98:d2:20:af:9d:0b:a4:15:c0:48:a9:ae:67:
         a9:6a:26:2f:6b:52:21:95:44:4f:38:f0:6f:40:cb:b1:88:25:
         e7:50:13:9a:ee:8b:d4:af:c3:bf:46:4b:24:54:e5:32:4f:21:
         33:10:a4:3e:83:8c:30:d8:5d:52:a4:8c:a9:64:b2:dd:a0:57:
         56:c8:f4:20:e9:6e:02:85:1f:13:37:be:d0:b1:bd:7a:45:6d:
         53:07:4b:37:e4:67:39:d5:0c:58:9e:96:89:2d:74:56:9b:13:
         5a:cf:8c:bd:0e:74:f2:d2:8a:a4:cd:3a:cc:8b:0d:44:c1:24:
         4d:a1:c5:6d:ba:b8:a3:2e:a7:0c:43:67:88:5e:17:91:6c:3a:
         ed:66:66:13:d7:eb:4f:f9:60:ac:3b:60:44:c3:81:d0:fa:30:
         fc:41:8e:24:b6:a9:9e:33:b4:8b:15:b4:86:8f:9e:e2:72:6f:
         92:12:cb:ba:5a:34:85:78:07:8d:70:a3:e8:c1:11:8c:04:fe:
         1e:c8:78:f3:ca:6d:ec:5e:0b:f1:6c:49:ea:35:6f:8c:83:ef:
         e9:35:ce:33:9a:d6:32:92:9b:8e:d1:6d:66:fc:0a:51:95:21:
         e3:ca:7b:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:09 2025 by rpki-client