Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa
File:                     7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa (raw, json)
Hash identifier:          n4C64cqIv8xUOtNK+/0I+JsZT31Szri211kdZZFi07Q=
Subject key identifier:   56:22:2B:C2:D9:AF:28:96:65:EE:65:12:DC:FB:0B:83:4C:73:CD:63
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5581202A9420D50A1928B71EC800A590E967AB37
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa
Signing time:             Fri 13 Feb 2026 15:10:41 +0000
ROA not before:           Fri 13 Feb 2026 15:10:41 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6104::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:81:20:2a:94:20:d5:0a:19:28:b7:1e:c8:00:a5:90:e9:67:ab:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 13 15:10:41 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=5212a3d2ee9c9ce7e22b8b9a9861bb24e760261e5a98330a8880c406426f1f56, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:a2:fa:60:5f:22:ad:c0:3b:20:ca:b1:fe:
                    05:64:e5:80:6f:92:81:9c:51:b9:87:67:95:4b:db:
                    18:be:4c:1b:29:a3:1c:cf:91:82:c0:19:21:0a:08:
                    3f:ac:d4:0d:ff:3f:cf:6e:f4:48:0d:09:34:35:7a:
                    e5:cd:27:15:14:65:d3:40:bf:a1:7d:26:58:96:0c:
                    2f:a5:8e:2a:16:b2:22:ae:ea:e7:56:ac:0a:67:39:
                    7b:9e:31:88:1a:d8:a3:14:3c:17:9d:6c:12:0b:0b:
                    52:a0:92:d1:f7:c0:a6:fe:93:1b:cc:e5:38:c1:23:
                    cc:af:7d:77:aa:fb:1e:97:ff:94:b0:cb:ea:24:77:
                    61:f6:6e:21:dc:ad:f3:00:91:9f:ec:02:aa:58:fb:
                    3a:8a:73:e8:6f:70:4c:94:97:d9:24:3d:43:25:70:
                    3f:3a:b9:bd:58:68:40:e6:be:22:53:4e:08:23:d1:
                    e0:bc:74:3e:3a:1f:0b:ba:3d:05:cf:1f:7b:48:c6:
                    a3:99:7d:30:ee:04:84:93:05:76:a6:e6:6a:ac:ea:
                    ac:78:83:d2:e2:2b:8e:10:32:0f:07:7a:58:66:87:
                    b4:36:4c:12:f9:44:81:51:a3:f5:9b:9a:66:05:2a:
                    6d:bc:24:5b:d2:79:11:ae:c6:c7:ac:d8:a5:9c:39:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:22:2B:C2:D9:AF:28:96:65:EE:65:12:DC:FB:0B:83:4C:73:CD:63
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6104::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:19:95:26:fc:61:70:49:7b:24:79:db:be:80:b0:29:37:25:
         fa:0c:ef:18:8a:a3:e8:57:98:53:4f:83:49:15:ad:f4:1a:68:
         a0:29:83:7d:34:1e:a6:a9:dd:00:52:a6:c4:e3:76:dc:48:6d:
         82:70:b8:76:85:5d:55:80:46:43:8a:ad:9c:27:af:9f:c1:ee:
         71:58:49:28:8e:ac:ef:57:10:ba:c7:d6:6e:9b:7d:26:66:9d:
         1e:76:ae:b9:8c:bf:e6:d6:a4:e0:59:cc:ec:02:e9:4e:6c:d2:
         fb:36:b4:9b:3e:80:68:b2:bc:c4:fa:49:64:3b:bc:34:16:65:
         d2:3c:46:26:cb:36:37:fb:6a:9d:f8:21:9e:86:6e:44:3e:39:
         93:f0:66:6b:68:0b:a5:82:a1:b2:18:48:dc:6f:2b:00:68:d8:
         72:bc:5b:62:b3:6a:08:86:ff:c6:2b:d6:e4:58:8c:61:67:ad:
         39:d4:26:af:28:90:68:f4:02:80:65:73:ae:8d:49:81:df:1a:
         73:f0:b5:d8:60:10:56:36:05:8e:9c:a9:9d:cb:81:b5:0a:8f:
         5b:b5:ad:c4:9c:11:91:b0:e7:e3:0f:41:3a:37:e2:5e:9d:33:
         23:0e:fd:d0:a8:d4:5d:59:b5:b5:71:b9:3a:4a:c2:81:af:ef:
         ab:26:a6:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:37:50 2026 by rpki-client