Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f937d10a-ab1d-4f0c-85f2-3661bd103bc9.roa
File:                     f937d10a-ab1d-4f0c-85f2-3661bd103bc9.roa (raw, json)
Hash identifier:          yptcFhPk6JFp9+/1PP+hf+ePQVKhQ0S67ZqmLFmhCJQ=
Subject key identifier:   CE:97:21:74:60:51:9D:E0:40:33:20:FE:91:54:D7:1A:5C:CD:E2:4B
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       739BCF3B618CAD27760E61D316994569F4EB6A83
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f937d10a-ab1d-4f0c-85f2-3661bd103bc9.roa
Signing time:             Sun 11 Oct 2026 15:08:50 +0000
ROA not before:           Sun 11 Oct 2026 15:08:50 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6117::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9b:cf:3b:61:8c:ad:27:76:0e:61:d3:16:99:45:69:f4:eb:6a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 11 15:08:50 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=4ab9461587e2405d561f1da9231bc39ac2c3ee08b81794b64af12a53ff561538, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:45:3f:f8:8e:1d:05:61:54:af:1d:a2:3f:
                    94:ba:38:ea:21:75:4e:1d:d1:a7:6d:f5:00:96:87:
                    44:60:fa:43:a6:07:60:e6:50:98:85:0f:3a:07:f1:
                    25:fd:70:a8:cc:13:0c:36:a8:ed:f8:c1:ac:03:40:
                    a6:6c:2e:b9:f6:4c:f3:a2:64:8c:22:32:3c:63:75:
                    a3:e0:72:a2:aa:23:1a:18:f2:fe:72:d5:00:e8:96:
                    15:5d:88:fc:24:42:2c:63:0a:53:18:3c:53:17:db:
                    22:8f:84:ba:05:d3:8f:e3:32:e9:61:ce:7c:f9:8b:
                    ba:cf:43:b9:47:92:82:5f:3c:b0:56:a9:81:75:a9:
                    1d:b1:9c:fe:c0:8a:8b:d3:cf:ac:c0:52:32:57:91:
                    bf:aa:36:e7:26:8a:89:19:c9:cc:ab:3c:00:cc:46:
                    57:10:7d:05:42:94:43:0b:e5:9e:69:97:44:c9:ab:
                    9e:30:bb:d9:b6:0f:be:0f:4e:62:ed:e9:d2:a7:a3:
                    8d:ad:43:62:4e:b5:53:5d:49:ea:7f:6d:6f:25:2f:
                    3e:3a:34:bc:d4:ad:ea:d1:c4:a1:44:18:56:76:cb:
                    fc:f1:fd:41:6c:26:26:d6:3d:5b:b8:2c:df:34:d3:
                    99:65:29:40:b5:2e:9d:94:14:93:b0:3a:87:bc:07:
                    f5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:97:21:74:60:51:9D:E0:40:33:20:FE:91:54:D7:1A:5C:CD:E2:4B
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f937d10a-ab1d-4f0c-85f2-3661bd103bc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6117::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:97:79:f4:af:44:63:74:b1:c4:99:d8:d3:aa:b9:5c:c2:2a:
         5b:b5:8c:8c:7f:fc:98:63:54:d6:5b:65:3b:91:5e:47:4e:dc:
         1f:3f:b2:5a:2f:3c:07:1a:ec:ee:38:2c:0d:91:8c:10:c4:f4:
         52:0b:3c:3b:8d:70:b4:54:9d:9f:b7:1b:e2:e4:02:f8:52:f0:
         73:69:1b:ab:e8:ce:96:89:ef:4b:7b:15:e3:72:dc:fb:b8:4f:
         a0:7f:a3:7a:68:d9:89:a4:8a:d0:09:24:15:cd:c9:78:e9:b5:
         0e:fa:47:17:31:6f:52:ce:96:5d:7b:e6:85:d7:6e:6b:75:ce:
         e3:c9:3a:88:5f:1f:67:bc:f2:e2:35:23:f3:f8:6f:08:5a:34:
         74:91:8d:20:13:f0:cd:3b:2c:88:93:2f:57:e1:dc:c0:0f:ad:
         af:38:51:15:35:ba:e5:20:68:72:a6:0e:6f:a0:1f:b3:58:75:
         65:05:00:c5:78:bf:43:3e:5f:fb:61:13:26:8f:19:9c:75:a0:
         e1:c0:95:cb:dd:fe:c5:f0:cb:aa:f9:ab:44:87:c6:2c:58:ff:
         d9:6f:c1:6f:8e:94:53:5a:62:70:13:50:b0:fd:77:81:bd:65:
         f8:f9:b1:ca:52:2d:41:fb:07:90:e5:3b:e7:11:90:58:16:89:
         26:69:f1:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:57:40 2026 by rpki-client