Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc62a4ed-a4bf-4634-b6f3-0c70bedb7068.roa
File:                     fc62a4ed-a4bf-4634-b6f3-0c70bedb7068.roa (raw, json)
Hash identifier:          BpDMDgM5eLsa1LUAwwHLaQMEEwBqmOTOWKA2OQvGqKI=
Subject key identifier:   0B:83:FF:D6:3B:D9:40:A1:B6:9B:EC:52:0F:3C:0A:48:1C:72:30:03
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       627EDEFB6537A5ABD12C80D9E580BF02CB96EC0C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc62a4ed-a4bf-4634-b6f3-0c70bedb7068.roa
Signing time:             Sun 18 Oct 2026 01:20:09 +0000
ROA not before:           Sun 18 Oct 2026 01:20:09 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f000::/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7e:de:fb:65:37:a5:ab:d1:2c:80:d9:e5:80:bf:02:cb:96:ec:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 18 01:20:09 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=85eb865aa2cc22bb690df269d99e188281ab274d82ec4ac31bae34d65cc7178a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:ba:5d:fd:34:a2:e1:2d:0e:61:29:62:52:
                    89:e6:ad:fe:9b:f4:c0:de:8e:3a:98:a6:60:d7:a8:
                    7c:a1:f2:7b:f2:d0:27:9d:4c:6d:ca:01:76:8b:1c:
                    22:eb:ed:21:c7:b3:69:ac:94:a4:6d:ca:17:c6:6f:
                    67:b4:c7:49:67:fb:d5:7a:ee:22:52:bb:77:4e:38:
                    56:90:94:91:b8:5b:cb:cd:21:49:84:a5:c7:79:91:
                    56:ee:b5:5b:bd:fc:96:c9:99:b1:66:14:aa:cc:e9:
                    28:2e:5c:6a:ff:74:ef:30:ed:0a:1d:2a:06:79:d1:
                    90:98:d8:b2:c5:50:47:be:c5:0e:73:4a:5f:ab:58:
                    58:08:d9:6a:85:57:08:9a:d4:76:4c:2d:3c:82:fd:
                    57:e0:b6:7b:5a:43:55:d8:b1:99:46:b8:64:64:af:
                    5b:95:b3:ed:4e:34:84:3a:88:b8:4b:e5:74:ae:f2:
                    5c:09:4f:a3:39:27:69:7a:b6:ae:49:0c:16:70:28:
                    42:55:4c:3f:2a:54:1f:fd:8b:14:a4:be:cc:06:cc:
                    ff:fe:88:6e:af:9e:7f:fc:52:a7:63:df:d2:3d:04:
                    0d:08:4c:55:ee:36:1d:11:e5:56:97:5b:63:ba:4d:
                    8e:45:99:00:0b:a0:d4:89:e9:00:88:66:0b:55:93:
                    cc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:83:FF:D6:3B:D9:40:A1:B6:9B:EC:52:0F:3C:0A:48:1C:72:30:03
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc62a4ed-a4bf-4634-b6f3-0c70bedb7068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f000::/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:e0:8c:ff:26:a8:ab:d5:59:76:35:d6:1e:92:1f:6a:b0:2a:
         9a:78:c8:13:69:72:9c:d0:c2:13:bb:ff:ee:7b:5a:66:1e:e1:
         15:69:cd:d3:9b:24:53:ec:f1:bd:4d:ba:42:55:30:fb:19:aa:
         e7:b1:37:b6:a4:cd:6a:de:ba:47:57:7b:a9:2b:cc:bf:8e:1e:
         ee:c5:a8:da:e3:ab:30:38:69:d7:f3:3a:12:f1:40:87:88:32:
         3c:d0:87:bf:b2:3c:c1:f0:58:12:25:29:c0:fd:f6:45:c0:57:
         e1:13:88:6c:6d:d1:fa:17:6c:a6:1b:a1:72:0a:e6:f6:f3:e9:
         03:43:a0:ca:b7:0c:d3:af:db:06:29:4b:6b:55:ae:89:80:4b:
         d8:7b:64:e4:08:d7:5f:85:3a:dc:ef:2e:46:5d:de:c3:f3:d5:
         8b:b8:e4:fe:02:b1:96:88:59:ec:5d:b5:68:05:da:c2:1a:16:
         d2:2a:90:e8:65:80:a4:71:d5:04:70:ce:25:04:48:e0:fa:77:
         5c:81:5c:8d:11:b9:6f:b8:b7:96:cc:d2:af:27:18:78:59:c7:
         4e:f3:27:c5:60:29:cf:6a:b8:ab:da:be:50:20:4b:e5:79:2e:
         6f:cf:49:6e:16:a3:39:7a:2f:c2:6a:18:60:8c:6a:25:3e:ce:
         2b:68:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:13:03 2026 by rpki-client