Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e5c3b151-f08e-44bd-b446-9a53733036dc.roa
File:                     e5c3b151-f08e-44bd-b446-9a53733036dc.roa (raw, json)
Hash identifier:          COUJkp/kbXtuDlezEn35mTXPFksVC9oRUG9LCXk8YYI=
Subject key identifier:   8C:17:B0:48:79:41:1C:14:F2:08:F6:22:82:E7:9C:BF:7E:83:61:6A
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3E9A41AB8AD1968B5311F1F120752FF25461D343
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e5c3b151-f08e-44bd-b446-9a53733036dc.roa
Signing time:             Fri 13 Feb 2026 15:10:44 +0000
ROA not before:           Fri 13 Feb 2026 15:10:44 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9a:41:ab:8a:d1:96:8b:53:11:f1:f1:20:75:2f:f2:54:61:d3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 13 15:10:44 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=874e55465f1c42318508f12913da5831cb8f1b739f5d18500a5d1b381a74f06f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0d:94:96:ac:2e:e1:b9:45:29:0d:17:ff:04:
                    fb:8d:2d:97:7d:d1:b0:e0:15:cc:50:9b:45:ce:26:
                    3e:25:bb:75:6c:7a:d8:36:6f:43:6d:d7:91:a3:00:
                    77:a9:72:36:80:10:3b:b4:d2:7c:c3:8e:8c:81:d4:
                    1d:a8:98:53:0e:fc:e0:87:22:cc:d4:7d:58:31:35:
                    4e:15:cb:67:38:cc:80:1c:5b:ff:21:40:7f:d7:a6:
                    5a:f6:d1:65:32:4b:a8:c1:5a:9b:15:0b:26:d5:3f:
                    b4:a4:d7:bb:e3:2f:8b:2f:64:69:9f:96:32:0f:3b:
                    dc:b1:56:0d:53:51:ae:d6:f9:76:af:ee:d0:ce:ae:
                    e7:b9:e9:06:37:60:c3:5b:a5:9c:07:56:1a:01:da:
                    53:92:d2:a3:f1:02:c5:45:89:c8:1a:6c:89:fa:0a:
                    4a:22:57:75:a2:d7:35:51:f5:c6:cb:23:98:d0:24:
                    4d:e8:24:c4:b4:8d:bb:1f:87:41:c4:0a:b5:09:39:
                    14:c7:ac:d3:76:e7:7c:dc:26:5a:36:2d:63:12:0c:
                    cb:60:38:33:b9:8d:2a:0b:54:e8:16:a1:62:cf:f5:
                    dd:fd:0f:dd:47:92:a7:20:d3:e2:8d:ef:c3:36:38:
                    fc:cf:82:c6:40:7e:cf:bf:a9:76:70:8e:d3:90:df:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:17:B0:48:79:41:1C:14:F2:08:F6:22:82:E7:9C:BF:7E:83:61:6A
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e5c3b151-f08e-44bd-b446-9a53733036dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6103::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:cc:98:a3:e1:98:cb:b7:6a:d1:0f:82:63:20:d2:8e:94:9a:
         0b:7c:0f:64:f3:73:14:d0:56:66:3a:60:f3:77:4e:95:e5:05:
         fe:08:5d:b8:d0:8b:1b:c1:34:0e:2f:16:09:22:0c:3d:33:14:
         ad:47:a1:fb:8b:ee:c8:93:45:3f:eb:c4:41:e9:21:31:87:a9:
         0e:b8:ab:bf:b8:57:19:12:0e:4c:82:6d:4b:d7:21:e3:b2:2a:
         d3:a2:46:d6:34:f8:0c:59:e6:54:6f:12:c0:6d:e6:05:37:78:
         16:88:67:b3:50:8f:98:0f:08:0f:83:97:c8:20:6a:41:44:0b:
         af:3c:fc:31:42:14:f7:b1:79:a4:03:e9:5b:53:45:6f:a1:58:
         b5:1c:05:fd:42:a0:4e:b5:9a:53:44:76:cd:4d:fd:c1:97:c2:
         11:cb:d8:37:7a:5e:24:d9:11:25:90:64:1b:b0:d2:55:0c:da:
         d4:8f:6d:d2:b0:cf:c3:46:1a:b8:2d:ac:ab:68:65:cd:c1:e3:
         af:40:93:a6:85:a8:a0:55:a0:da:92:d0:51:d1:aa:30:61:cb:
         6b:26:d2:c7:a4:93:95:55:8b:48:32:61:04:aa:46:56:f8:49:
         6c:ff:a5:d0:54:ae:06:c4:9a:ab:89:97:c0:cd:90:8a:23:a4:
         42:45:39:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:36:02 2026 by rpki-client