Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa
File:                     f6cf58cb-08de-4e22-be98-43e3537a793b.roa (raw, json)
Hash identifier:          /Nltlvl9C5FeJYOK7l17FTOCxD9/+byD6NHPQ2EycPc=
Subject key identifier:   79:A8:D5:E9:CF:85:22:A8:15:B6:7E:DE:BD:2F:77:52:E6:5C:8A:C1
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       011A749E196C4011EFB88D4DF96376A67D010CF3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa
Signing time:             Fri 26 Sep 2025 18:20:08 +0000
ROA not before:           Fri 26 Sep 2025 18:20:08 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0fb:e100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1a:74:9e:19:6c:40:11:ef:b8:8d:4d:f9:63:76:a6:7d:01:0c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Sep 26 18:20:08 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=27c28b511eaf4541f100c9df9f4392b94cc3a92676218ae3f1aa32ac834ea919, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:4e:ea:3e:58:65:48:ae:f2:d6:d9:72:33:
                    87:10:ae:a3:2d:99:6a:a3:cb:d1:2c:44:96:04:c5:
                    c8:fd:e7:d1:da:f0:be:57:31:ea:da:b6:5d:69:a0:
                    4e:5d:93:a8:66:a5:ce:eb:c6:fa:c2:90:2c:fa:3d:
                    e8:76:9c:33:25:9b:f7:f4:27:58:4e:fd:11:f1:26:
                    05:55:62:92:ed:a0:45:3e:e4:51:62:41:12:58:8d:
                    42:e4:32:3c:66:18:d2:79:64:e3:57:12:87:b1:19:
                    de:11:16:59:47:6f:bc:20:aa:8e:90:53:7c:10:7b:
                    fd:ef:6a:26:82:89:5a:08:1c:15:23:7b:4e:ba:59:
                    c4:26:77:63:b9:f3:e3:49:16:ca:04:d0:9b:64:f7:
                    3f:3b:b3:e0:24:00:23:69:b9:dd:f8:13:eb:1c:5e:
                    2f:5b:d2:57:01:3f:18:82:0d:04:ce:88:b3:df:8b:
                    01:0e:5d:73:09:4a:f8:81:a4:7a:0b:81:6d:6e:9f:
                    96:ee:35:cc:ce:47:a8:43:e6:91:b7:e8:ea:8d:2a:
                    a9:99:fd:14:9e:d3:93:01:10:20:3a:03:18:f5:46:
                    66:01:c5:01:af:5a:d4:fe:f8:4c:35:e3:ea:7e:35:
                    8e:ad:74:83:de:5e:fc:bb:ca:19:d3:95:f7:ef:8b:
                    00:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A8:D5:E9:CF:85:22:A8:15:B6:7E:DE:BD:2F:77:52:E6:5C:8A:C1
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6cf58cb-08de-4e22-be98-43e3537a793b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:60:c5:7a:82:64:12:6f:49:ca:c2:1f:9a:2e:59:52:53:9b:
         8e:b9:18:bb:22:cd:10:5c:ea:18:44:f1:85:6a:c2:e3:eb:62:
         bd:26:55:19:96:27:50:2f:2d:f8:f8:94:56:65:0c:b8:1e:67:
         43:b1:ad:5b:42:4d:2e:66:96:90:5c:a5:c6:90:d8:31:4a:6d:
         67:01:e1:fa:25:2e:64:b7:a6:83:95:99:f4:5e:cf:c1:d7:95:
         83:79:e8:dd:ee:83:c2:fd:52:42:57:5e:fa:2d:bf:82:5b:17:
         8c:95:74:26:87:fd:3b:28:5a:45:79:76:ba:56:99:f6:c2:92:
         95:d2:49:9d:f9:7d:f3:74:bc:ff:6e:85:a0:67:49:96:49:45:
         af:f0:b4:85:c2:d0:da:20:0a:d2:1e:c6:83:2e:00:42:87:33:
         e2:b9:35:fc:a8:70:26:f5:7d:c6:4c:e5:6d:46:51:1c:ff:73:
         6d:cb:88:76:1f:84:64:ec:e7:42:f7:e9:96:50:4e:13:95:d0:
         09:fa:e6:fc:c1:fd:c7:53:51:ea:cd:c6:f5:44:5e:9c:f1:d1:
         34:97:cd:56:bb:76:81:a6:d9:91:8e:1d:2a:12:7b:f3:5d:96:
         01:ff:f8:60:e6:70:85:2d:36:59:de:7a:53:59:c5:ed:20:ed:
         a7:48:37:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:04:49 2025 by rpki-client