Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8410a85c-071f-4042-83cd-ea1b9c6d3f8d.roa
File:                     8410a85c-071f-4042-83cd-ea1b9c6d3f8d.roa (raw, json)
Hash identifier:          7l02hYa4f5LpqFFsO2kvJvoX/HSofTjjSwfYYZkFtz8=
Subject key identifier:   33:AF:71:69:1C:15:2F:81:7F:73:20:9C:0D:13:88:97:F5:1C:84:73
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       1593AC2BC479CAA8520A15623F8D4A763E37BFEC
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8410a85c-071f-4042-83cd-ea1b9c6d3f8d.roa
Signing time:             Mon 06 Oct 2025 17:40:28 +0000
ROA not before:           Mon 06 Oct 2025 17:40:28 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6113::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:93:ac:2b:c4:79:ca:a8:52:0a:15:62:3f:8d:4a:76:3e:37:bf:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct  6 17:40:28 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=060bd9c482198ba965b097298d5ba3e8fe2c567c41ff1d0cbb5356ca57de6608, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:df:15:99:28:00:fe:73:a3:10:ef:6f:4c:
                    9b:d3:46:29:e6:c1:e9:9c:ed:84:e3:ad:98:ec:30:
                    70:03:7b:1f:7a:9b:3b:e1:26:ec:61:c3:d1:7f:3d:
                    a5:2c:da:55:13:e7:2b:9e:bb:8a:19:d5:a8:d7:5d:
                    69:2f:08:e4:aa:7d:b8:cc:ba:d2:92:a0:b1:e9:68:
                    5d:a8:91:57:5c:0f:9f:d4:d5:de:ab:49:dd:66:eb:
                    d0:22:e3:77:73:f2:fa:0e:fc:0c:f4:50:9b:60:16:
                    5d:0d:03:c5:6f:3f:c5:f1:a4:f7:1a:1f:1a:f3:d2:
                    b6:fc:74:de:6b:56:e4:99:ff:18:ea:f8:70:dd:ba:
                    2c:28:26:97:9f:be:58:22:fd:ba:04:57:0e:75:5c:
                    a7:61:ba:ab:31:f0:26:25:e8:4b:a6:dd:4e:98:2f:
                    18:45:6b:d8:0d:c3:9f:a2:35:a1:e1:57:97:df:63:
                    cf:72:bd:85:ba:a5:58:de:ec:ba:e2:b3:68:65:bd:
                    cc:d2:f2:94:67:e2:69:8d:8a:9f:15:ca:f3:19:4b:
                    d5:0d:b9:e3:c8:c3:78:ca:ae:32:c8:b3:d0:39:5f:
                    9f:85:0f:a6:b5:8b:0a:34:6a:91:8f:bf:aa:75:4a:
                    fd:69:8e:01:2b:3f:76:39:94:3b:08:6f:46:86:9c:
                    6f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AF:71:69:1C:15:2F:81:7F:73:20:9C:0D:13:88:97:F5:1C:84:73
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8410a85c-071f-4042-83cd-ea1b9c6d3f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6113::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:2a:35:87:9b:8c:81:39:be:98:ab:b8:f9:22:5d:72:78:1e:
         06:f8:45:03:70:66:91:8f:9b:06:7c:69:06:73:62:a2:f1:9d:
         60:6a:33:8c:f7:d2:7a:a2:ef:13:d1:fa:49:12:86:a2:ec:cc:
         42:e4:82:70:6a:94:c5:69:05:39:5f:0d:fd:fa:a7:01:d2:70:
         a8:49:19:3e:e2:ab:73:bc:45:61:2e:a3:bc:20:57:35:ee:8a:
         f7:3c:e8:ed:df:05:43:00:ec:4e:86:ed:e1:3f:0d:b3:19:85:
         13:f0:0f:55:4b:37:d4:85:e9:35:68:72:1c:95:7b:d2:c4:a4:
         61:39:31:0f:70:89:76:03:d1:6e:96:26:ae:72:3d:93:e3:b2:
         19:9b:49:d1:a8:c2:59:02:2f:7b:f0:85:55:70:24:86:9b:c1:
         65:06:42:fb:2f:9e:89:89:83:47:0b:66:9b:40:06:29:5f:41:
         9b:c5:d3:a7:c5:0c:b1:a9:9e:5e:93:7a:ab:c9:4a:ce:08:83:
         60:47:a5:70:26:f4:97:2c:7d:f2:4c:56:be:00:73:e8:d6:be:
         4a:01:aa:20:3e:cf:14:03:b9:cb:73:a5:15:05:ff:ce:46:f2:
         f2:ce:fe:99:4c:0c:6b:9c:9e:86:c8:2d:9e:f2:67:55:b4:99:
         06:cd:a3:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:42:18 2025 by rpki-client