Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e8fc6724-5fd7-4c05-9bc6-4f7968775b61.roa
File:                     e8fc6724-5fd7-4c05-9bc6-4f7968775b61.roa (raw, json)
Hash identifier:          Or+je7FiZGAnJPdzXmu4Oi+aUCGA7uRJuxOsZfsh2Kg=
Subject key identifier:   2E:23:77:07:AC:9C:37:08:5B:B7:1B:39:C8:72:72:3E:F3:7C:0C:31
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       4AF6451E2C89D945537079F4A81E1CC0451669B6
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e8fc6724-5fd7-4c05-9bc6-4f7968775b61.roa
Signing time:             Sun 11 Oct 2026 15:10:19 +0000
ROA not before:           Sun 11 Oct 2026 15:10:19 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:611b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f6:45:1e:2c:89:d9:45:53:70:79:f4:a8:1e:1c:c0:45:16:69:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 11 15:10:19 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=52104e93a70b28d330814321621abfa6aaed4da7646dc34966b1f477a93701f4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:40:71:53:ac:4c:20:72:ec:fe:c8:04:f6:b4:
                    da:b0:19:e7:55:0d:96:98:9a:ae:a4:6d:8c:1d:6d:
                    68:41:b9:57:09:1c:f1:7d:d5:3b:80:ec:78:48:da:
                    90:15:3f:57:94:b0:59:1d:f4:51:23:89:44:cd:2a:
                    4a:9a:ee:04:b4:aa:17:45:e1:44:11:e6:ac:50:f2:
                    6d:0c:fa:f9:40:c9:43:17:81:d5:ec:6b:d7:9a:c9:
                    bb:75:fd:34:ac:31:a2:72:ab:e9:59:c8:e4:a9:3d:
                    21:49:29:08:e0:23:69:55:45:52:4d:06:4f:0d:49:
                    da:d3:d5:28:d7:df:87:2e:0c:fc:2d:ef:10:fb:7c:
                    1c:ca:f7:fa:ab:61:ea:14:2b:fa:0b:b2:78:a0:3b:
                    a2:19:a6:d6:f7:aa:75:83:a8:60:b4:19:e4:74:48:
                    b3:9d:df:9d:13:68:c7:51:85:a4:f2:94:4d:64:1a:
                    30:da:f7:2c:f3:3b:8f:da:29:62:f2:3e:51:52:3d:
                    45:2c:32:47:0d:86:3c:3a:c1:f7:f9:51:cc:56:49:
                    02:48:db:fb:ca:f4:00:8e:90:91:d5:e0:53:3c:25:
                    7d:be:6c:79:eb:48:db:9d:09:6c:08:6b:ff:83:06:
                    44:46:27:2b:de:d9:9a:f5:ff:e2:1a:32:1d:06:4f:
                    ae:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:23:77:07:AC:9C:37:08:5B:B7:1B:39:C8:72:72:3E:F3:7C:0C:31
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e8fc6724-5fd7-4c05-9bc6-4f7968775b61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:611b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:d0:43:50:05:80:da:06:e1:9d:a2:85:88:a6:9e:96:50:5e:
         7c:17:4e:e3:61:dd:af:9f:25:ff:31:c2:ed:a9:ef:7a:a6:1d:
         c1:7a:30:03:a6:4c:05:9c:1a:9c:bc:55:21:4a:21:0d:49:26:
         f1:c6:3d:3e:8d:03:cf:83:1d:ea:59:6f:ee:57:09:2c:cc:08:
         4d:ba:9f:cd:ec:24:91:b4:8e:31:06:29:37:e5:27:b3:a0:04:
         a2:09:e3:27:90:50:3c:24:8a:84:36:a3:8b:1c:a2:84:2a:09:
         96:09:1d:51:42:03:75:e0:ad:91:05:dd:4c:52:6b:11:4c:e2:
         f3:77:19:1e:ed:7e:85:5b:8b:70:89:fd:be:84:90:e2:83:ad:
         7c:f9:08:9b:c2:13:37:00:46:34:ca:fa:b7:cd:18:2d:f8:71:
         2f:cb:68:a6:20:28:ea:66:a7:88:ec:4b:bc:8b:d3:03:8f:1b:
         4c:5d:f7:4b:71:cc:b8:07:b5:9a:c6:7a:8f:7d:20:cf:99:fd:
         75:82:2c:b5:af:94:6a:c3:a5:85:2a:61:23:0a:44:f1:ff:80:
         00:a8:5a:dc:4a:04:da:01:a8:2c:79:3c:a1:e9:51:e9:d0:f3:
         0f:d7:41:5c:c0:67:64:19:5f:ef:82:4a:bf:78:47:92:2a:26:
         82:c0:7f:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:13:11 2026 by rpki-client