Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6826d5c-b428-498f-80be-06e94897140e.roa
File:                     f6826d5c-b428-498f-80be-06e94897140e.roa (raw, json)
Hash identifier:          OR4A9Uw3s/+jpK8L4kDOt3lxg923F3vysO/Lc3N/oyw=
Subject key identifier:   7D:A9:4D:E7:D8:6D:FF:28:DE:A7:D7:A0:85:F1:4F:CD:A0:C7:F3:74
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       673D575BC9FE04A53895CE338ADE64CDB4295BC1
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6826d5c-b428-498f-80be-06e94897140e.roa
Signing time:             Mon 06 Oct 2025 17:38:13 +0000
ROA not before:           Mon 06 Oct 2025 17:38:13 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6106::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3d:57:5b:c9:fe:04:a5:38:95:ce:33:8a:de:64:cd:b4:29:5b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Oct  6 17:38:13 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=e2235fb743492e3d21f840ea6bb08265ef3f39a3c0548fdb6f562e20c9fcb565, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:b1:c8:d4:ed:e0:89:4e:8c:b0:2a:36:2b:
                    78:ef:f8:bb:a0:68:ed:30:e7:de:2f:52:91:9e:31:
                    b6:0b:4c:b9:20:82:8f:80:7b:b1:f4:a2:f9:0b:ee:
                    fc:10:5b:b8:ad:56:83:80:5f:f6:64:f0:57:e9:50:
                    96:bd:df:16:b2:42:53:79:4b:05:81:98:e7:63:1e:
                    0f:3d:67:71:ef:e3:da:8b:b0:66:fd:80:dc:09:c4:
                    a4:25:bc:59:25:91:5c:f4:01:1a:bc:43:82:2f:5c:
                    57:dd:a4:ef:9c:29:21:55:9d:15:2a:3b:b1:4f:e3:
                    5a:92:81:95:af:c9:50:fd:ae:6f:38:17:aa:55:3f:
                    4b:f3:8f:bb:0d:cc:99:7b:68:46:fd:9b:df:0b:ad:
                    09:1f:ff:7c:64:59:83:9d:5e:55:03:48:a2:7e:46:
                    49:2c:46:a7:18:b0:3a:af:dd:12:50:72:a6:61:bf:
                    a4:44:52:5f:cb:01:2a:7d:80:8f:c1:ee:ed:06:68:
                    12:87:29:cc:3f:42:59:6b:6f:38:9d:33:5c:56:7e:
                    13:8b:86:bf:0d:4a:e4:4c:9f:63:0e:b4:88:d2:31:
                    b3:70:57:3b:c5:91:27:3c:d1:61:2d:1c:56:1c:e6:
                    36:fa:d3:10:26:bd:2c:42:a6:73:a0:82:68:dd:b8:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A9:4D:E7:D8:6D:FF:28:DE:A7:D7:A0:85:F1:4F:CD:A0:C7:F3:74
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6826d5c-b428-498f-80be-06e94897140e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6106::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:39:8a:11:c2:6a:31:98:a2:43:ed:b8:af:c8:58:e4:0c:ba:
         de:3c:9a:09:34:41:c5:a6:5f:25:4c:db:6a:4d:41:74:a9:94:
         d4:ab:58:fb:3e:e4:2f:ac:9b:1d:a2:3e:bb:40:89:8b:9c:f5:
         13:7b:4f:2d:e9:e3:7a:4c:70:f1:ff:2b:4a:68:dc:f4:12:ae:
         cb:ad:ac:0d:c0:96:b1:be:1c:b4:ee:04:3d:24:c0:9a:6d:21:
         2f:ee:c9:93:6e:57:8c:3f:07:c9:7b:f5:2c:a0:c5:e7:55:2e:
         17:ad:dd:06:81:d0:b7:44:a2:22:84:96:e2:ad:ec:5c:8f:2a:
         4c:e3:18:fc:7a:a4:e4:65:df:93:8d:57:81:16:37:15:75:e8:
         c0:58:ae:3c:f1:d7:d3:a6:19:3a:7d:e8:5e:33:b3:7d:29:9d:
         c8:aa:e9:b6:90:84:90:31:05:b1:42:81:d3:d7:dd:5f:60:83:
         87:f8:dc:9f:e0:de:3c:12:d8:19:1d:d3:92:3b:69:3c:7b:3b:
         a7:bc:b4:8f:99:8e:4e:04:27:d6:23:d3:9a:cc:89:bb:a5:8e:
         2a:82:8f:5d:cd:a7:4a:23:05:bf:3e:62:69:99:9e:8b:2c:d1:
         99:75:a9:77:d2:c9:fb:e8:c5:53:df:c6:e2:63:09:b7:8d:0f:
         d8:3f:ac:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:01 2025 by rpki-client