Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a5ad0a6c-878f-42f8-8a48-37426a6ee1ca.roa
File:                     a5ad0a6c-878f-42f8-8a48-37426a6ee1ca.roa (raw, json)
Hash identifier:          ZZB+5yjOSOtf8TvnHkotSXC6P8WnP8G6qnK7k+vbX+w=
Subject key identifier:   3F:0F:A6:BD:F4:4D:D0:FA:3C:0E:30:E0:8E:F9:59:B7:6F:C9:35:3A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       76628A294A5379D0572294AF1D8C4561723DDE11
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a5ad0a6c-878f-42f8-8a48-37426a6ee1ca.roa
Signing time:             Tue 10 Feb 2026 00:00:16 +0000
ROA not before:           Tue 10 Feb 2026 00:00:16 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6102::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:62:8a:29:4a:53:79:d0:57:22:94:af:1d:8c:45:61:72:3d:de:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 10 00:00:16 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=fc1fc30eb260f5a5ad08e2634873c2abc948d2bf6b0e75890a8afd70f67c62e6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f4:d1:22:ee:b8:c4:cd:1e:31:44:4d:29:68:
                    1a:01:6e:8b:dc:e2:17:6c:a2:64:cf:e0:e7:ae:11:
                    bb:80:b0:d8:73:fa:a7:40:aa:ea:c7:40:03:8e:96:
                    75:0d:f9:f3:47:86:1f:9c:aa:c0:8b:e0:ef:c6:eb:
                    f4:7f:31:f4:32:6f:7c:c0:e0:a0:5a:d6:c1:6a:47:
                    43:d8:78:38:2c:52:08:20:80:94:1d:f5:10:3f:a8:
                    31:2e:0a:f3:c6:5a:49:28:82:79:70:af:53:b9:3a:
                    a3:0d:11:fe:0d:b7:72:52:68:9c:be:6e:b8:a2:2e:
                    ff:17:a7:ad:ff:ab:1d:22:f4:ef:c6:54:61:62:99:
                    64:22:28:b1:f4:40:72:2e:ef:a7:fb:7e:ac:57:51:
                    66:4a:4e:5b:09:11:26:ba:49:b1:27:16:52:d2:99:
                    b9:36:6f:67:60:20:19:e4:dc:f6:a9:86:47:43:0d:
                    fc:2c:25:59:99:ac:9d:43:34:ba:db:97:6a:d5:d2:
                    e1:d0:66:20:31:5c:02:98:32:73:4b:63:ec:07:7f:
                    b0:78:17:22:14:d0:d2:f8:98:9d:44:e0:aa:dd:ac:
                    7a:38:8d:1f:b2:a3:ff:e4:32:be:1c:0f:69:a8:6e:
                    17:d3:ba:4d:b8:1a:42:2f:50:f4:6b:08:f9:84:da:
                    8f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0F:A6:BD:F4:4D:D0:FA:3C:0E:30:E0:8E:F9:59:B7:6F:C9:35:3A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a5ad0a6c-878f-42f8-8a48-37426a6ee1ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6102::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:ed:dd:82:39:27:4e:be:58:a4:3b:0c:88:2b:f9:a2:40:d9:
         a3:8d:b2:8f:e2:50:87:1f:b8:eb:93:58:47:f0:1f:35:55:3d:
         cc:20:b2:7f:40:ec:30:b9:2d:ec:08:ad:a5:5a:e2:15:4a:49:
         26:c7:9f:ea:af:33:b3:e2:18:86:ca:0d:45:26:9d:0d:b8:58:
         06:88:30:d5:5b:3a:3d:8e:db:78:af:dc:99:20:77:df:f7:76:
         a6:4a:e7:23:69:e6:0b:20:fd:3c:fb:ad:0f:d0:ae:bf:c3:97:
         c5:75:b1:81:13:3f:8f:2c:e0:52:36:d8:76:0b:ed:5e:9e:69:
         40:12:61:fe:89:e8:41:7b:b5:54:97:16:ff:1a:8e:0b:a4:2d:
         48:1d:3f:15:c3:06:f2:52:91:37:f1:90:e4:f5:8e:be:ff:0b:
         aa:a2:19:81:f6:5f:63:ed:bf:01:33:07:6c:6e:aa:99:c4:ad:
         4b:87:a0:54:1c:1a:9d:90:35:06:0b:58:ee:a0:6c:42:25:78:
         04:9b:b7:12:2b:cd:07:e3:f2:9e:e2:4e:45:4f:43:39:27:15:
         77:36:dc:6c:8e:96:36:fc:6a:30:10:10:53:38:8d:9e:03:fa:
         20:19:40:03:14:dc:e4:a0:1c:fc:44:c3:a0:80:50:65:35:f1:
         39:a0:78:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:08 2026 by rpki-client