Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6d0592fe-1739-47a3-b178-e4736351b625.roa
File:                     6d0592fe-1739-47a3-b178-e4736351b625.roa (raw, json)
Hash identifier:          76j0e/2ID9Wt4mbeJagC+20h9GHVDO8/J7hr0iDcfzo=
Subject key identifier:   5F:9B:49:CD:0C:61:7F:79:1E:23:0A:50:C1:16:03:88:B6:DE:C2:77
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       47F1BFE4E8863BA997C74AB59F67AED0969905CE
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6d0592fe-1739-47a3-b178-e4736351b625.roa
Signing time:             Sun 18 Oct 2026 01:20:11 +0000
ROA not before:           Sun 18 Oct 2026 01:20:11 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f2:7010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f1:bf:e4:e8:86:3b:a9:97:c7:4a:b5:9f:67:ae:d0:96:99:05:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 18 01:20:11 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=4f6abef4c648799bc87b2437fd48f3df1fc8c6d1600e4c76aff410e0a84d6345, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:1b:de:44:04:42:f4:a6:a9:0d:8f:ee:2f:
                    b4:2f:7c:02:c7:78:de:c6:cd:ac:4f:ed:e3:7e:2a:
                    ba:8e:d3:aa:ef:dd:b7:a8:ef:bb:1b:ea:1d:7d:36:
                    1e:3c:d1:9d:0c:a6:9e:6c:cb:73:4a:a8:71:c3:f3:
                    1a:83:c0:a7:e0:5f:37:77:d0:77:c5:d4:fe:cd:e4:
                    fa:a6:9c:79:46:d1:f0:78:85:e9:fc:eb:69:5d:8d:
                    7c:e2:d9:be:c2:03:4d:6c:9b:e0:72:7e:39:da:08:
                    13:ed:53:10:dc:55:f0:9a:ad:a0:11:63:e6:03:a5:
                    71:7e:09:61:4f:cd:f1:f4:35:14:2d:25:46:3e:a3:
                    ab:1d:2f:29:b5:93:6e:d2:21:df:fa:dd:90:93:18:
                    d7:81:41:0b:31:00:ce:57:12:12:ea:b8:4c:58:07:
                    e5:49:d3:3a:5f:30:92:bc:0f:6f:cf:66:d2:7d:80:
                    7b:64:d9:5b:0b:f1:45:fe:36:4b:34:10:dd:70:e5:
                    89:98:39:76:56:95:a6:db:af:63:70:96:c9:79:ef:
                    b7:41:cc:ab:28:93:62:5f:45:d3:f9:2b:12:81:bd:
                    16:44:69:aa:8e:be:ff:9f:42:47:92:a2:01:90:8f:
                    1c:6d:f2:d8:1c:bf:8a:01:74:2b:45:ce:0a:ae:59:
                    03:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9B:49:CD:0C:61:7F:79:1E:23:0A:50:C1:16:03:88:B6:DE:C2:77
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6d0592fe-1739-47a3-b178-e4736351b625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7010::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:86:77:50:10:2b:2d:41:4d:6b:50:24:b5:af:48:36:90:cb:
         df:4e:c4:e3:82:9a:96:78:c6:c1:82:c0:3c:70:0c:68:47:66:
         0c:e6:53:11:36:d8:d8:a0:98:ab:7d:7f:a7:89:6a:ab:e6:ca:
         d6:24:f5:fd:6d:27:42:22:ce:9a:b1:1d:e4:c7:50:35:14:0a:
         dd:25:2a:12:59:fe:1d:e6:31:98:f6:a8:d5:38:fa:e2:9b:fc:
         a2:c2:12:d1:98:87:98:e3:14:ac:3c:49:60:8f:f3:07:34:82:
         1e:55:55:9a:23:8a:3b:8b:29:a0:94:31:1b:47:fa:c5:7e:07:
         b8:8c:f8:d4:86:5d:93:b5:a8:4c:02:b1:72:28:7c:01:41:cf:
         2d:03:31:f8:8f:82:19:16:09:8f:9c:cb:cd:08:b4:cc:44:54:
         a9:3d:ac:b5:aa:e7:bc:2b:ce:a5:19:8a:7e:c5:ab:70:04:ca:
         06:7b:bc:39:6f:bf:12:b8:1b:74:a7:1d:d3:90:13:e7:87:0e:
         bb:1e:25:65:5b:93:90:39:87:f0:30:22:f2:08:6b:cb:44:ad:
         54:0b:04:8c:b7:96:6c:fd:09:6e:16:34:0b:3b:15:c3:0c:ca:
         55:06:ed:ae:b8:04:b4:ea:26:91:c4:20:11:1b:da:b0:14:7b:
         42:2d:ff:af
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUR/G/5OiGO6mXx0q1n2eu0JaZBc4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDE4MDEyMDExWhcNMjcwMTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZjZhYmVmNGM2NDg3OTliYzg3YjI0MzdmZDQ4ZjNkZjFm
YzhjNmQxNjAwZTRjNzZhZmY0MTBlMGE4NGQ2MzQ1MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCl6BveRARC9KapDY/uL7QvfALHeN7GzaxP7eN+KrqO06rv
3beo77sb6h19Nh480Z0Mpp5sy3NKqHHD8xqDwKfgXzd30HfF1P7N5PqmnHlG0fB4
hen862ldjXzi2b7CA01sm+ByfjnaCBPtUxDcVfCaraARY+YDpXF+CWFPzfH0NRQt
JUY+o6sdLym1k27SId/63ZCTGNeBQQsxAM5XEhLquExYB+VJ0zpfMJK8D2/PZtJ9
gHtk2VsL8UX+Nks0EN1w5YmYOXZWlabbr2Nwlsl577dBzKsok2JfRdP5KxKBvRZE
aaqOvv+fQkeSogGQjxxt8tgcv4oBdCtFzgquWQNfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUX5tJzQxhf3keIwpQwRYDiLbewncwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzZkMDU5MmZlLTE3MzktNDdhMy1iMTc4LWU0NzM2MzUxYjYyNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAPDycBAwDQYJKoZIhvcNAQELBQADggEBAFmGd1AQKy1BTWtQJLWvSDaQ
y99OxOOCmpZ4xsGCwDxwDGhHZgzmUxE22NigmKt9f6eJaqvmytYk9f1tJ0Iizpqx
HeTHUDUUCt0lKhJZ/h3mMZj2qNU4+uKb/KLCEtGYh5jjFKw8SWCP8wc0gh5VVZoj
ijuLKaCUMRtH+sV+B7iM+NSGXZO1qEwCsXIofAFBzy0DMfiPghkWCY+cy80ItMxE
VKk9rLWq57wrzqUZin7Fq3AEygZ7vDlvvxK4G3SnHdOQE+eHDrseJWVbk5A5h/Aw
IvIIa8tErVQLBIy3lmz9CW4WNAs7FcMMylUG7a64BLTqJpHEIBEb2rAUe0It/68=
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:20:47 2026 by rpki-client