Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa
File:                     60d13554-0aae-450a-879a-816f0a4209ac.roa (raw, json)
Hash identifier:          pzQdw8UVI7KtbdIeazoG7G3BrR9tDuCPNyytFgOsYhE=
Subject key identifier:   CB:69:48:EB:2F:0E:75:A0:E9:58:5A:D6:0B:92:C5:22:9A:8E:BA:BF
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       50803432100AD6673DC6F3EEF825F82F3B6A3035
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa
Signing time:             Tue 28 Oct 2025 00:10:05 +0000
ROA not before:           Tue 28 Oct 2025 00:10:05 +0000
ROA not after:            Tue 02 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:80:34:32:10:0a:d6:67:3d:c6:f3:ee:f8:25:f8:2f:3b:6a:30:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 28 00:10:05 2025 GMT
            Not After : Dec  2 23:59:59 2025 GMT
        Subject: serialNumber=cade27d427dfdc66d6b01c078bdac6e292120edb052769a96212819030836d70, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e0:af:61:7e:44:6f:43:4c:e0:f6:64:65:27:
                    0f:1e:17:40:43:1f:17:c6:f4:d9:ba:8b:49:33:9d:
                    02:95:fe:1d:5d:14:c3:3a:3c:c4:70:1a:ed:3d:b4:
                    a8:e1:ea:a4:8c:ee:a4:85:2a:0b:5f:68:ff:d2:cc:
                    91:c1:05:de:f1:19:55:81:ea:f4:43:93:51:1e:61:
                    ac:ba:d2:4f:a3:b3:36:ad:68:f1:62:47:00:05:59:
                    31:6c:b1:23:46:37:ea:85:23:f6:a2:37:cc:72:89:
                    a5:dd:93:aa:fe:ff:4f:20:3f:48:ab:6d:de:9f:82:
                    41:b1:bf:8b:0e:f0:2f:cc:29:2c:a3:ad:9f:5f:41:
                    80:ac:19:eb:7c:13:23:5a:a5:26:21:01:41:09:4e:
                    c1:2b:5b:47:8d:3d:a7:81:74:81:c9:68:b9:46:14:
                    5d:15:2d:c0:bb:fb:11:0c:c3:a1:03:48:ea:8d:bb:
                    df:4f:0d:19:41:89:c6:d8:88:33:5c:e0:14:90:2f:
                    54:0b:7a:43:d1:1d:c7:ab:31:e7:76:60:36:7d:af:
                    05:05:b5:31:30:65:b3:fa:87:d2:23:87:59:a1:26:
                    e2:29:8b:38:a2:cb:5a:6f:48:bc:c4:a8:a9:40:90:
                    92:b4:cf:f7:92:e9:8f:29:f8:78:5b:e5:22:8f:f6:
                    68:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:69:48:EB:2F:0E:75:A0:E9:58:5A:D6:0B:92:C5:22:9A:8E:BA:BF
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6101::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:16:62:56:f6:d6:c7:88:4a:b4:c7:a9:b4:10:f1:16:1a:f0:
         c1:63:15:ed:85:20:35:b0:ad:a0:b4:61:08:44:bd:d0:dd:f0:
         f3:01:c9:7a:01:17:f5:26:07:1d:d0:04:ab:16:22:f4:96:22:
         e9:35:51:65:e0:df:68:43:08:bc:73:ce:f4:4c:d4:e6:fc:02:
         55:84:cb:24:9d:21:93:d1:43:67:17:40:d6:93:e4:62:7f:e3:
         e1:43:44:7d:a2:20:cb:5b:06:ff:be:3a:22:a5:e8:18:62:08:
         9b:47:c0:2e:d1:45:9a:66:a9:a4:67:bb:08:8f:29:0c:bb:fc:
         75:56:06:c3:a0:f7:07:64:c7:0b:bf:38:d4:a4:4d:7c:72:2e:
         c7:ab:a9:fd:ef:1b:62:90:17:57:dc:b9:da:5b:f1:0f:8e:a1:
         07:29:0d:cf:2f:d3:ac:a5:7c:64:77:85:26:ac:3f:e4:3a:dc:
         66:1e:59:e4:8f:1e:be:48:92:e2:82:54:44:e0:34:75:db:99:
         d8:d1:b9:95:03:69:23:4e:76:ba:21:51:c1:a2:36:27:a3:b0:
         96:47:e7:92:48:84:e3:64:4d:da:89:a7:0d:9b:65:23:0f:3e:
         45:22:0b:d5:c1:32:9f:69:92:a5:6c:10:3b:ee:6e:3d:01:3d:
         7f:c1:5d:80
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUIA0MhAK1mc9xvPu+CX4LztqMDUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDI4MDAxMDA1WhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjYWRlMjdkNDI3ZGZkYzY2ZDZiMDFjMDc4YmRhYzZlMjky
MTIwZWRiMDUyNzY5YTk2MjEyODE5MDMwODM2ZDcwMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC44K9hfkRvQ0zg9mRlJw8eF0BDHxfG9Nm6i0kznQKV/h1d
FMM6PMRwGu09tKjh6qSM7qSFKgtfaP/SzJHBBd7xGVWB6vRDk1EeYay60k+jszat
aPFiRwAFWTFssSNGN+qFI/aiN8xyiaXdk6r+/08gP0irbd6fgkGxv4sO8C/MKSyj
rZ9fQYCsGet8EyNapSYhAUEJTsErW0eNPaeBdIHJaLlGFF0VLcC7+xEMw6EDSOqN
u99PDRlBicbYiDNc4BSQL1QLekPRHcerMed2YDZ9rwUFtTEwZbP6h9Ijh1mhJuIp
iziiy1pvSLzEqKlAkJK0z/eS6Y8p+Hhb5SKP9minAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUy2lI6y8OdaDpWFrWC5LFIpqOur8wHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzYwZDEzNTU0LTBhYWUtNDUwYS04NzlhLTgxNmYwYTQyMDlhYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYQEwDQYJKoZIhvcNAQELBQADggEBAHwWYlb21seISrTHqbQQ8RYa
8MFjFe2FIDWwraC0YQhEvdDd8PMByXoBF/UmBx3QBKsWIvSWIuk1UWXg32hDCLxz
zvRM1Ob8AlWEyySdIZPRQ2cXQNaT5GJ/4+FDRH2iIMtbBv++OiKl6BhiCJtHwC7R
RZpmqaRnuwiPKQy7/HVWBsOg9wdkxwu/ONSkTXxyLserqf3vG2KQF1fcudpb8Q+O
oQcpDc8v06ylfGR3hSasP+Q63GYeWeSPHr5IkuKCVETgNHXbmdjRuZUDaSNOdroh
UcGiNiejsJZH55JIhONkTdqJpw2bZSMPPkUiC9XBMp9pkqVsEDvubj0BPX/BXYA=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:29 2025 by rpki-client