Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa
File:                     f555d010-5e5e-4c02-8722-e69da1514f97.roa (raw, json)
Hash identifier:          EApoVKtHo9xaNOgosSEwx2GlqnPPE0onFQHmOU6Wrbc=
Subject key identifier:   C8:01:2A:0A:93:25:99:5A:42:04:93:67:C2:21:5D:22:F2:B3:CF:FB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7715424F07FB026E1D1C56476F626AED5D21C753
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa
Signing time:             Mon 26 Oct 2026 04:10:08 +0000
ROA not before:           Mon 26 Oct 2026 04:10:08 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:15:42:4f:07:fb:02:6e:1d:1c:56:47:6f:62:6a:ed:5d:21:c7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 26 04:10:08 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=8ebc756fc79bb131d735996b7428b92c788f712be632c73d3b4fe2ce5d346d40, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:55:60:be:d7:f1:92:ce:1c:49:86:da:b1:74:
                    1c:13:14:77:27:16:12:fa:0f:b4:c2:05:2f:ff:fe:
                    09:5f:a8:6c:a3:45:66:76:91:c8:fc:b7:86:ca:56:
                    70:41:8a:ca:df:a4:ab:c2:0f:5f:41:ce:0f:97:af:
                    d7:6f:17:3e:e5:3e:06:1d:22:5c:79:fb:f6:04:33:
                    92:5e:a3:23:3b:f8:ca:71:e4:3e:0a:03:80:b7:a3:
                    12:2f:20:a5:cc:fd:d5:42:7e:8a:7f:38:3a:30:60:
                    a9:76:93:55:45:eb:7f:f0:6b:d6:e6:9e:77:37:0f:
                    f2:84:c8:09:b5:bf:18:03:06:4c:b1:2b:71:8e:a2:
                    f3:53:94:08:9c:d9:9d:f7:d3:fb:ad:8f:a3:39:eb:
                    f9:bd:f3:8a:6c:d2:04:68:d6:23:21:1f:50:d9:f6:
                    c5:21:b3:71:25:c1:b9:61:ab:e4:3b:97:09:dd:36:
                    0c:ff:26:3d:6a:25:bf:1c:e4:5e:7f:b4:3b:9b:32:
                    18:b1:8b:3d:c0:04:d6:b6:90:b6:06:49:f4:45:72:
                    76:02:c0:10:20:4f:46:fe:18:73:dd:ef:2a:91:24:
                    14:d9:20:4a:db:68:40:df:76:f9:a5:6f:9d:0c:cf:
                    a6:24:2d:6c:6f:c0:e4:48:99:21:e8:5a:ac:c6:f6:
                    2e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:01:2A:0A:93:25:99:5A:42:04:93:67:C2:21:5D:22:F2:B3:CF:FB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f555d010-5e5e-4c02-8722-e69da1514f97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         46:75:4e:c5:2c:21:a5:ce:31:8b:b2:e8:11:10:62:57:d0:e0:
         d1:06:39:3e:22:9d:a6:52:cf:21:1b:6b:ea:e0:d1:a4:f5:21:
         30:13:58:ec:e1:1b:56:3f:fb:1c:0d:82:31:4f:1b:86:57:3d:
         9f:73:f9:a6:4a:3a:7a:41:97:cd:72:12:85:bc:57:47:a8:8f:
         a0:7e:3e:ac:df:28:b8:b4:1a:e8:e6:db:06:ac:28:73:a3:c4:
         20:b2:eb:e7:c9:00:ba:67:e9:18:3e:7f:26:77:ca:8d:0c:ec:
         87:b5:cc:f2:84:88:a4:7c:ba:fa:8e:dd:71:84:3e:67:c5:4c:
         29:8d:b0:bb:e3:f9:96:4d:7b:f2:6e:36:26:81:32:b9:5f:77:
         41:ff:01:46:5c:c9:2f:57:a0:af:e1:10:19:b7:8a:31:36:f9:
         d5:29:5b:ea:da:57:25:65:ff:4c:d1:9b:55:be:8a:41:f1:4c:
         e5:55:34:88:e9:e8:03:2f:cd:01:3c:56:19:89:38:99:c1:b5:
         6e:b4:73:29:f0:3a:ca:ee:66:d3:90:85:3c:a2:cd:9f:9e:77:
         79:4e:bc:65:5f:97:75:cf:e5:19:d4:e5:64:83:ef:7c:ec:60:
         15:1d:2a:ae:b9:90:b6:8e:40:4e:fd:fb:ff:57:75:b5:a9:ec:
         d7:20:86:14
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUdxVCTwf7Am4dHFZHb2Jq7V0hx1MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDA4WhcNMjcwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZWJjNzU2ZmM3OWJiMTMxZDczNTk5NmI3NDI4YjkyYzc4
OGY3MTJiZTYzMmM3M2QzYjRmZTJjZTVkMzQ2ZDQwMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDtVWC+1/GSzhxJhtqxdBwTFHcnFhL6D7TCBS///glfqGyj
RWZ2kcj8t4bKVnBBisrfpKvCD19Bzg+Xr9dvFz7lPgYdIlx5+/YEM5JeoyM7+Mpx
5D4KA4C3oxIvIKXM/dVCfop/ODowYKl2k1VF63/wa9bmnnc3D/KEyAm1vxgDBkyx
K3GOovNTlAic2Z330/utj6M56/m984ps0gRo1iMhH1DZ9sUhs3Elwblhq+Q7lwnd
Ngz/Jj1qJb8c5F5/tDubMhixiz3ABNa2kLYGSfRFcnYCwBAgT0b+GHPd7yqRJBTZ
IErbaEDfdvmlb50Mz6YkLWxvwORImSHoWqzG9i4RAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUyAEqCpMlmVpCBJNnwiFdIvKzz/swHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2Y1NTVkMDEwLTVlNWUtNGMwMi04NzIyLWU2OWRhMTUxNGY5Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgYmAPD7gDANBgkqhkiG9w0BAQsFAAOCAQEARnVOxSwhpc4xi7LoERBiV9Dg
0QY5PiKdplLPIRtr6uDRpPUhMBNY7OEbVj/7HA2CMU8bhlc9n3P5pko6ekGXzXIS
hbxXR6iPoH4+rN8ouLQa6ObbBqwoc6PEILLr58kAumfpGD5/JnfKjQzsh7XM8oSI
pHy6+o7dcYQ+Z8VMKY2wu+P5lk178m42JoEyuV93Qf8BRlzJL1egr+EQGbeKMTb5
1Slb6tpXJWX/TNGbVb6KQfFM5VU0iOnoAy/NATxWGYk4mcG1brRzKfA6yu5m05CF
PKLNn553eU68ZV+Xdc/lGdTlZIPvfOxgFR0qrrmQto5ATv37/1d1tans1yCGFA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:00 2026 by rpki-client