Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/758cbdf7-aaaf-4ed6-b892-e5c9ae1e2f84.roa
File:                     758cbdf7-aaaf-4ed6-b892-e5c9ae1e2f84.roa (raw, json)
Hash identifier:          X9Qsn6lNgmRPAmSasW2UlK/W1wElL1NzJ2x4anXm5uk=
Subject key identifier:   1B:D4:35:C6:39:17:4B:CB:A7:8F:A4:D2:D4:3C:6E:4B:81:76:CD:B7
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7DC022ADA0DF85B6EA99F1E860BEC49B07321E17
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/758cbdf7-aaaf-4ed6-b892-e5c9ae1e2f84.roa
Signing time:             Fri 31 Oct 2025 01:50:36 +0000
ROA not before:           Fri 31 Oct 2025 01:50:36 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c0:22:ad:a0:df:85:b6:ea:99:f1:e8:60:be:c4:9b:07:32:1e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 31 01:50:36 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=b4c54ebbd9fa596659b03846dea613b76207c95d1289ed2be10f81fa64244f85, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:8b:ee:32:2d:87:ba:27:2c:c6:37:46:02:
                    ec:63:87:e2:66:b3:5e:09:61:08:af:31:4b:2c:df:
                    47:76:79:16:97:e9:1b:7e:83:b5:21:46:12:7f:b8:
                    cf:5e:4f:5d:8b:a1:1a:9c:fa:c0:13:71:26:9c:15:
                    27:8c:0c:e2:01:1f:7c:66:9c:5f:35:c0:9b:c3:0c:
                    28:0c:d0:a3:9f:e6:e2:32:90:09:f9:cd:e7:f4:fb:
                    9d:90:dd:ee:34:b0:ce:c1:d4:4a:0d:dc:de:6a:5d:
                    e3:1c:91:79:51:49:a0:6d:d6:5d:bf:50:10:49:b7:
                    ae:70:73:d0:79:45:61:6e:c9:3d:d4:a3:e8:b6:0a:
                    c8:c3:27:a7:5b:46:e1:64:84:4f:e4:d2:f9:10:3f:
                    3e:f3:c0:4c:34:0f:a0:72:0a:4b:5b:52:6d:87:9c:
                    f6:20:f9:5d:04:7a:55:a3:70:22:e0:65:62:a7:11:
                    0b:18:15:f6:ba:cf:73:16:b2:a7:03:b1:16:03:83:
                    1a:da:f9:09:64:13:1e:69:7f:be:af:9f:9b:51:61:
                    50:95:f7:b9:e6:8e:32:80:c5:9e:76:c4:8d:3f:4d:
                    67:6e:55:26:c7:8c:25:52:17:ae:e0:12:e0:6e:65:
                    8f:ac:c6:29:4c:96:ee:13:8b:62:64:55:e0:51:e6:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D4:35:C6:39:17:4B:CB:A7:8F:A4:D2:D4:3C:6E:4B:81:76:CD:B7
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/758cbdf7-aaaf-4ed6-b892-e5c9ae1e2f84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6108::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:38:5a:ad:33:db:e9:f1:6b:a7:93:a5:bd:9b:2c:fb:6b:de:
         2b:7f:18:a8:71:36:19:35:bf:29:67:de:68:20:cc:b5:72:98:
         c1:d4:45:80:30:e7:c6:26:d9:9c:a2:76:58:22:91:5b:37:81:
         f7:45:f7:4a:ef:4d:e6:87:1e:95:6f:7b:8a:84:87:d4:aa:5b:
         cc:89:a0:10:bc:54:1d:e4:2a:5e:33:e4:04:84:34:5c:61:d6:
         b5:ff:96:db:ec:30:2a:1e:76:75:40:04:ee:58:99:a8:1e:38:
         bd:33:a9:c4:b1:ab:a4:33:fd:f0:c5:05:5c:53:07:c0:2b:59:
         fd:2d:9b:6a:bd:87:a8:2f:43:eb:28:13:93:37:5d:3f:0a:16:
         dc:31:b0:6e:64:9e:b8:3c:45:24:eb:67:ad:50:c6:a4:dc:c3:
         24:54:84:81:f4:e7:e2:54:d1:89:86:a7:c6:5e:77:7a:e2:bc:
         34:ab:6a:f1:3e:ca:fa:a0:c2:74:50:83:1c:9f:cc:61:51:47:
         b7:9b:2a:ac:68:41:c5:83:42:1b:de:0c:78:1b:f3:70:f6:ea:
         08:fe:a9:0b:0e:56:06:f7:58:a9:83:39:5a:f7:f5:78:ca:4f:
         0c:41:00:77:93:3a:7a:68:0e:94:8d:70:20:f7:c0:e0:e9:fa:
         b5:99:69:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:28:27 2025 by rpki-client