Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a48ca006-b4f2-49da-b519-80bf4857d7e9.roa
File:                     a48ca006-b4f2-49da-b519-80bf4857d7e9.roa (raw, json)
Hash identifier:          xDgx96PriJ+61rand00IV9xiZ28DZ6QxQktXPqeKeZY=
Subject key identifier:   39:CD:EC:76:A0:82:1B:15:E8:C6:CD:85:9E:D8:3E:2C:3B:5C:3B:18
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5A6AAC6838DEBC1C91E645F9367CD6A6F6351981
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a48ca006-b4f2-49da-b519-80bf4857d7e9.roa
Signing time:             Tue 30 Sep 2025 00:45:56 +0000
ROA not before:           Tue 30 Sep 2025 00:45:56 +0000
ROA not after:            Tue 04 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f2:7140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6a:ac:68:38:de:bc:1c:91:e6:45:f9:36:7c:d6:a6:f6:35:19:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Sep 30 00:45:56 2025 GMT
            Not After : Nov  4 23:59:59 2025 GMT
        Subject: serialNumber=9294551569bf0fc21256d23b8ad5f8be04768b8fe8e6c3b35fb54870b440601b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3d:3e:aa:e5:c4:ac:84:2b:fd:a8:f6:b4:22:
                    19:8e:3f:73:b2:2b:84:d8:81:f2:79:3d:cd:6c:72:
                    f0:fa:2f:6c:a8:ca:bd:02:ca:2a:28:4f:3a:e7:cd:
                    e3:cc:7d:cd:db:02:62:fc:7a:82:b6:fe:98:87:e3:
                    d1:58:a7:19:58:f1:2a:db:d5:f0:6e:fd:b0:e3:da:
                    d6:d1:f6:87:33:b4:07:30:63:f9:0c:e0:06:9e:92:
                    00:73:6a:fd:08:07:0d:c3:b4:80:2e:2a:d2:62:72:
                    d5:c0:d8:0e:3b:cd:1c:c6:11:22:10:97:08:db:8c:
                    14:a7:ba:3a:3c:3c:43:c0:bb:3f:b0:73:5b:6c:92:
                    74:fd:b6:62:c4:ea:a2:ad:a6:b5:0f:6d:7e:b4:d6:
                    0c:24:ee:67:b6:45:b3:9f:6c:9b:13:3a:1f:fd:35:
                    66:7b:4c:98:4f:74:14:f5:c9:9f:c5:b0:01:83:97:
                    f5:d6:25:ad:61:56:3c:80:bc:0d:4e:e4:1c:8d:f3:
                    d4:e6:89:10:53:17:e1:9d:2c:86:bb:00:e3:b9:6d:
                    8f:f0:5a:13:d8:51:ef:31:2a:34:2e:dd:93:6d:47:
                    32:16:30:72:8c:af:d0:c5:f8:0a:86:1e:0f:e0:72:
                    34:47:90:d0:c9:0d:94:5e:a8:5e:9e:56:14:24:85:
                    c7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CD:EC:76:A0:82:1B:15:E8:C6:CD:85:9E:D8:3E:2C:3B:5C:3B:18
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a48ca006-b4f2-49da-b519-80bf4857d7e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7140::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:31:82:1e:61:95:e9:4a:14:de:fd:1c:04:9d:7a:c3:5b:ab:
         b5:7c:7e:31:14:d4:c9:8f:5b:d2:4b:59:eb:52:fe:bf:3a:31:
         a0:fd:8b:5a:95:da:7d:22:2a:a2:1b:bc:6c:17:d9:6e:1d:e9:
         e8:43:5f:75:ce:52:b7:bc:e0:c4:43:cd:a0:74:e4:09:19:25:
         4c:fd:cb:a6:27:a2:a9:48:1f:20:d5:e9:c6:67:f2:f3:94:84:
         2a:55:4c:a4:5f:f2:2e:64:b1:6d:25:63:74:b8:5d:26:25:2e:
         6b:12:a3:27:17:94:13:6e:a8:71:3d:d0:de:67:cb:f6:fb:8c:
         8f:de:32:31:4b:fb:7f:a1:ca:c7:50:10:c5:fa:31:08:5e:92:
         4e:9e:a9:a5:38:e7:24:63:e9:36:d5:4e:a4:c0:bb:24:d3:f4:
         cc:10:e6:cd:0e:1c:d3:dd:19:6a:d6:50:ef:73:b9:ac:2b:98:
         fc:43:3c:aa:ae:48:21:c7:57:34:5f:24:37:b7:59:45:3b:00:
         5c:c3:6a:90:b0:aa:fe:cd:5e:2e:24:7e:ca:4d:f7:50:f9:be:
         a3:db:1d:cc:21:fb:c0:d1:5e:9d:93:c4:ab:54:0b:bc:59:b9:
         7b:7b:43:73:06:c3:e0:90:93:93:d9:e2:b0:f4:c5:97:5e:29:
         f0:a9:79:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:46 2025 by rpki-client