Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1ddf06f-fa7b-4d9a-969b-553930838905.roa
File:                     c1ddf06f-fa7b-4d9a-969b-553930838905.roa (raw, json)
Hash identifier:          Qt6OFhzLIZCLc6Lkfv3XUFtfo0Ja13aTGNE+cmZvvXs=
Subject key identifier:   92:72:F9:34:13:BA:B0:30:7B:94:16:85:D1:37:2F:C3:87:C0:20:97
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       14B0BD530972D9F8274C910D78C557D512390E9B
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1ddf06f-fa7b-4d9a-969b-553930838905.roa
Signing time:             Fri 13 Feb 2026 15:00:12 +0000
ROA not before:           Fri 13 Feb 2026 15:00:12 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6119::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b0:bd:53:09:72:d9:f8:27:4c:91:0d:78:c5:57:d5:12:39:0e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 13 15:00:12 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=6c6e2eb7bf10144b52b12062ec4c8c839b78cf231da3fad14388fa3f4ce06400, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:28:f7:76:ec:df:63:0f:c7:77:64:cb:8c:
                    0a:22:a3:1a:61:0d:ea:06:97:20:a5:d9:41:ce:a1:
                    01:00:78:82:81:69:89:b5:48:43:cf:73:69:41:98:
                    e3:14:db:85:88:0c:43:0b:60:d8:f0:ae:52:0f:97:
                    13:63:31:3a:2f:9f:df:48:c9:0a:b2:86:64:2f:fd:
                    60:01:96:02:76:b4:1c:fc:fc:04:9d:77:d4:c3:b4:
                    0f:33:e2:03:e1:2c:ec:aa:8c:aa:14:06:dd:9d:72:
                    55:a5:98:1c:d1:ed:3b:ce:70:9b:98:a0:56:72:fd:
                    a6:76:6f:9c:c4:e2:14:56:b8:2c:2e:89:e8:7c:c5:
                    b8:26:53:12:5d:d9:cd:8d:a7:ca:c8:26:5d:ab:cd:
                    45:c1:f0:32:17:c8:a5:0f:16:67:50:b6:2c:d1:20:
                    5c:0f:68:e9:a6:55:fc:a4:88:4d:17:e0:44:e0:d4:
                    e7:23:ef:2d:ec:ad:cb:98:3a:f2:04:a4:34:39:6f:
                    c6:ab:4c:02:9c:a4:42:f9:b0:41:25:bf:90:d0:fa:
                    d8:a4:ed:49:14:50:51:aa:6d:8b:1d:16:1b:d7:ea:
                    9c:55:5c:ae:a8:0c:a2:17:eb:5f:37:60:4f:cf:ba:
                    be:9f:80:cb:75:6b:be:ca:01:cc:cc:9f:28:2e:5e:
                    2b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:72:F9:34:13:BA:B0:30:7B:94:16:85:D1:37:2F:C3:87:C0:20:97
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/c1ddf06f-fa7b-4d9a-969b-553930838905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6119::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:a1:4b:77:f2:83:09:8e:ac:af:ee:a4:a2:3b:76:41:6d:56:
         de:e4:f3:be:67:2b:4c:de:6e:42:de:31:2e:f7:96:d2:1f:2a:
         77:e6:80:67:f8:4e:9c:30:41:87:d8:eb:4d:5a:fc:77:fb:df:
         eb:f1:f3:86:69:16:f9:5b:bb:ed:8c:39:21:44:91:df:e9:ba:
         84:91:50:28:4d:e5:19:07:ea:56:e0:8c:6c:85:42:89:c5:b9:
         3b:2e:da:1c:cf:f8:21:ce:56:b0:1e:8d:91:00:fa:9f:97:a4:
         94:19:dd:d6:88:f6:55:33:a4:f0:d8:08:5e:68:90:47:3d:02:
         df:58:50:e2:77:aa:25:69:52:91:d7:b9:d5:94:56:7c:39:8b:
         10:31:6b:8b:b1:f4:a7:7a:c9:07:c6:81:3c:f1:d8:56:b8:80:
         61:2c:43:53:dc:48:24:19:4a:73:1b:50:39:1d:0b:24:f8:c2:
         35:b2:a7:78:5e:f2:ab:4c:e4:35:75:e0:fc:bc:04:a2:70:b0:
         90:12:8e:4c:0f:4e:f0:2c:f0:55:83:1c:38:61:7a:df:c8:c8:
         34:96:19:09:10:83:06:dd:06:24:a2:0d:20:55:5b:64:3c:3d:
         47:9c:44:da:0c:10:33:1a:06:8b:78:a5:8a:cb:aa:90:26:d7:
         05:d3:b5:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:15 2026 by rpki-client