Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa
File:                     b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa (raw, json)
Hash identifier:          A6zZyGvJOEMyahVveyKmvWD9KEM/KtYD5LuZWuKeqmI=
Subject key identifier:   5C:E8:74:01:D2:39:A5:66:E8:C8:2E:4A:C9:8B:1F:11:EB:EF:A0:3E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       29E25E72A689AA59543EC00C3DEE0C8974C47873
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa
Signing time:             Mon 26 Oct 2026 04:10:10 +0000
ROA not before:           Mon 26 Oct 2026 04:10:10 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:ec00::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e2:5e:72:a6:89:aa:59:54:3e:c0:0c:3d:ee:0c:89:74:c4:78:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct 26 04:10:10 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=bccb0a1f5cdb2ca41fb93309878d28b77c723b8224ddef77a7f5a07abb448b6d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:d0:ee:73:0c:39:9b:ac:97:61:da:d7:4d:
                    c0:57:0a:30:e3:82:4e:6e:b5:ef:f9:c5:e7:6a:70:
                    fc:14:9b:08:6a:32:57:3b:a2:c6:4c:2f:dc:8f:87:
                    27:a8:23:2a:b1:73:e8:f6:81:0c:84:7d:9a:e9:0d:
                    12:4d:b5:8e:69:aa:cc:fa:e0:41:bc:4a:a7:62:fd:
                    17:99:31:91:d6:3f:96:ca:55:49:1b:b5:f9:4a:56:
                    78:c5:9f:9a:b2:43:c5:4a:f8:ab:dd:82:a2:0a:61:
                    87:00:ec:36:3e:72:c5:c9:f7:f6:dd:d6:1d:07:86:
                    e7:83:d5:8f:9a:d1:77:ac:ed:6c:2d:5a:d8:c5:be:
                    d2:f2:a7:e6:7b:5c:5a:24:8e:bd:51:f4:b9:0e:1a:
                    d5:0a:9f:fe:40:07:96:1c:0f:ae:22:bd:16:43:a0:
                    82:6b:cf:2d:f7:0d:07:08:2b:bd:8f:35:5f:a1:81:
                    e8:b1:bd:42:26:93:ae:f8:59:3b:e4:2b:7e:17:d9:
                    19:99:04:12:6c:3f:b3:4d:96:45:a4:d9:d1:5e:de:
                    77:90:2c:23:82:82:0d:6e:4c:c7:3d:30:55:08:4c:
                    f7:bc:1e:db:19:6f:52:f8:d7:b3:a3:9d:b8:c3:bf:
                    ba:b0:53:f3:07:6a:01:ac:cb:ca:c8:ac:1b:c6:67:
                    9c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E8:74:01:D2:39:A5:66:E8:C8:2E:4A:C9:8B:1F:11:EB:EF:A0:3E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:ec00::/42

    Signature Algorithm: sha256WithRSAEncryption
         46:89:7a:da:40:5f:be:96:e8:be:69:47:82:72:3a:96:9c:41:
         85:ed:b8:ee:77:0d:6c:af:97:56:44:83:1d:42:f0:e1:35:7b:
         ca:af:9a:7d:c8:1c:c0:9c:3a:04:62:ee:65:87:75:e9:c7:d8:
         ea:45:6e:7a:3f:bf:99:87:6e:95:d1:fd:fe:2f:84:6d:fc:f6:
         68:ce:a5:46:25:5f:ca:d4:61:3d:f2:88:4f:60:15:a6:a6:cc:
         bb:70:82:bb:ab:57:a3:70:c2:f9:f7:4b:37:f0:18:c7:1d:fa:
         4f:c8:e9:91:94:af:28:bf:4e:0a:30:db:80:56:e7:64:16:9d:
         55:f1:74:04:72:36:2c:0c:34:a8:5f:8b:9f:ea:cf:58:e5:7e:
         8c:4a:c9:9c:78:24:a4:ac:de:3a:64:54:12:29:77:1a:3c:87:
         59:5f:4a:2f:89:ac:00:c2:64:f2:16:91:95:31:61:c5:db:47:
         ba:3e:50:3a:04:93:76:0c:1c:ea:93:41:a3:17:18:fd:e6:97:
         df:32:22:b0:77:4f:0d:a6:95:0e:17:cc:43:72:6c:fc:04:07:
         cf:c2:2a:0b:02:ae:ae:3b:bb:15:95:a9:7f:5a:43:6a:cf:9b:
         66:a8:16:71:91:96:59:bc:52:a6:38:7c:ae:62:68:2e:35:49:
         e2:1e:68:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:04:31 2026 by rpki-client