Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa
File:                     6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa (raw, json)
Hash identifier:          19Lt7U/YWgnIlziTBiGpYCe07MsREPShCvnr2qX85xE=
Subject key identifier:   A0:47:AD:0B:8D:D9:62:73:85:62:FC:AC:76:C3:E7:98:7F:97:5A:07
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1188D799C2A88C0122EC070A8B8CEAA31CF22515
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa
Signing time:             Tue 27 Oct 2026 00:50:08 +0000
ROA not before:           Tue 27 Oct 2026 00:50:08 +0000
ROA not after:            Mon 25 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:f100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:88:d7:99:c2:a8:8c:01:22:ec:07:0a:8b:8c:ea:a3:1c:f2:25:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 27 00:50:08 2026 GMT
            Not After : Jan 25 23:59:59 2027 GMT
        Subject: serialNumber=c200f47f0bf2a792e79c6b2eba0452a7048cf55343c4b3d737b69053cae6367d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f3:40:0a:64:61:62:88:50:23:7c:8f:cb:e8:
                    6c:29:fd:f3:0a:25:32:2c:c9:18:1a:72:33:dc:0b:
                    87:be:a4:a7:a1:f5:38:18:2c:64:0c:d7:de:60:53:
                    b5:69:f0:cf:a9:42:f6:c4:e9:9d:33:fc:e9:4e:d6:
                    c3:b2:61:84:1e:e6:1e:9d:ce:84:c6:6c:da:ca:00:
                    36:93:df:03:66:e7:16:6d:57:e4:79:90:56:e5:69:
                    c0:82:c4:88:ec:8f:65:82:06:de:e6:4a:28:57:7f:
                    b4:67:fc:8c:fb:5b:6d:af:70:50:68:13:3b:48:e7:
                    e3:45:02:62:1b:61:ee:8c:3c:a5:cf:97:05:73:18:
                    cc:0b:2f:0d:a2:c7:8c:96:4f:32:a9:5e:d3:54:f5:
                    16:0f:2c:31:7d:da:22:72:83:dc:6f:9a:ac:1f:5e:
                    a8:cb:0b:39:9b:d1:c3:d5:21:ab:1c:17:84:93:9d:
                    3e:48:e2:a5:08:d4:40:12:64:4f:2c:a7:60:c8:e1:
                    2d:e6:40:34:cf:57:ef:b4:ea:3b:46:22:59:dd:3d:
                    8d:46:34:14:be:6c:e9:c1:9d:b5:3a:88:ed:79:fb:
                    22:72:d9:fa:5a:d5:ee:cb:c4:82:a4:57:35:de:dd:
                    4e:06:70:f9:b4:44:a5:a5:92:b8:83:db:8b:b8:1d:
                    a7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:47:AD:0B:8D:D9:62:73:85:62:FC:AC:76:C3:E7:98:7F:97:5A:07
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:f100::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:05:11:c9:4e:71:f8:9e:ed:09:e8:40:90:5a:a0:18:35:9e:
         70:d4:5c:9c:c3:9a:7b:9f:b5:8b:6d:8b:78:ec:b5:88:6c:e7:
         66:8c:b0:b2:d7:d7:5c:16:9b:c6:4d:2b:2f:2e:05:37:8c:7b:
         6b:09:73:16:10:ee:b1:4c:9f:18:bf:68:bf:5a:a6:74:59:7c:
         6e:b7:6b:3f:0d:b6:a3:29:94:9b:f6:dc:9a:3c:8d:6e:49:f7:
         5a:ec:ce:06:92:dc:4d:0d:99:89:6d:24:36:3a:f3:98:d4:af:
         b5:60:89:93:7a:9b:da:09:2b:19:cb:83:e1:b9:5a:86:ea:c5:
         63:34:f2:cf:cb:35:f8:9a:59:92:77:6f:fc:85:3e:34:8e:27:
         20:25:1a:56:64:3b:7f:55:95:a9:a9:20:ab:83:b0:42:13:65:
         ac:0f:23:19:95:24:7d:af:c6:64:40:8e:6d:c8:6f:f3:b1:05:
         9c:d3:90:d2:7b:d9:73:d4:64:86:e8:4e:5d:7b:5c:96:e3:83:
         2c:6b:2c:38:c0:d9:7c:46:c1:d4:1a:71:0b:26:af:e3:27:b7:
         ae:da:25:ee:93:79:90:cb:34:68:f3:4a:f9:49:91:ec:38:c2:
         db:70:ee:4f:e4:45:e3:7c:0f:49:de:9f:30:83:a8:90:2d:3a:
         8a:f6:ea:6c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUEYjXmcKojAEi7AcKi4zqoxzyJRUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI3MDA1MDA4WhcNMjcwMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMjAwZjQ3ZjBiZjJhNzkyZTc5YzZiMmViYTA0NTJhNzA0
OGNmNTUzNDNjNGIzZDczN2I2OTA1M2NhZTYzNjdkMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDD80AKZGFiiFAjfI/L6Gwp/fMKJTIsyRgacjPcC4e+pKeh
9TgYLGQM195gU7Vp8M+pQvbE6Z0z/OlO1sOyYYQe5h6dzoTGbNrKADaT3wNm5xZt
V+R5kFblacCCxIjsj2WCBt7mSihXf7Rn/Iz7W22vcFBoEztI5+NFAmIbYe6MPKXP
lwVzGMwLLw2ix4yWTzKpXtNU9RYPLDF92iJyg9xvmqwfXqjLCzmb0cPVIascF4ST
nT5I4qUI1EASZE8sp2DI4S3mQDTPV++06jtGIlndPY1GNBS+bOnBnbU6iO15+yJy
2fpa1e7LxIKkVzXe3U4GcPm0RKWlkriD24u4HafXAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUoEetC43ZYnOFYvysdsPnmH+XWgcwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzZkYWQ4NDhjLWVjZjYtNDBlMi04NWIwLTAxNGE2MGRkOTZlNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPD78QAwDQYJKoZIhvcNAQELBQADggEBAFUFEclOcfie7QnoQJBaoBg1
nnDUXJzDmnuftYtti3jstYhs52aMsLLX11wWm8ZNKy8uBTeMe2sJcxYQ7rFMnxi/
aL9apnRZfG63az8NtqMplJv23Jo8jW5J91rszgaS3E0NmYltJDY685jUr7VgiZN6
m9oJKxnLg+G5WobqxWM08s/LNfiaWZJ3b/yFPjSOJyAlGlZkO39VlampIKuDsEIT
ZawPIxmVJH2vxmRAjm3Ib/OxBZzTkNJ72XPUZIboTl17XJbjgyxrLDjA2XxGwdQa
cQsmr+Mnt67aJe6TeZDLNGjzSvlJkew4wttw7k/kReN8D0nenzCDqJAtOor26mw=
-----END CERTIFICATE-----
Generated at Thu Nov 5 16:26:34 2026 by rpki-client