Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa
File:                     f1746927-d9c4-41c2-8abc-289ecb180bdc.roa (raw, json)
Hash identifier:          0xrW2ByfcOpBE5Sz97+cArylhBb1M3RtyFmjiAAntVc=
Subject key identifier:   BF:29:07:F3:AB:54:71:5C:62:04:CB:C5:16:43:1A:5B:F9:95:C6:BC
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       269481C152E86AD5C316106D23B67C0034D1A2AD
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa
Signing time:             Sat 28 Feb 2026 05:00:26 +0000
ROA not before:           Sat 28 Feb 2026 05:00:26 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0fb:e500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:94:81:c1:52:e8:6a:d5:c3:16:10:6d:23:b6:7c:00:34:d1:a2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 28 05:00:26 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=430cf904e12d7f2c3966df492af5400f4cec7bf0e26a83227f0674b23437437a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:be:f2:c6:fb:f2:8e:0a:23:c3:81:b0:9b:2b:
                    01:d4:8d:6a:ca:67:bc:3a:03:a8:57:da:b3:de:0f:
                    e5:55:df:6d:c9:f8:5d:01:57:f3:ca:d9:b2:1f:e3:
                    b6:47:70:10:cd:9b:c6:83:f3:79:da:f4:44:f4:32:
                    f0:19:d4:cc:1a:09:b1:eb:bd:ab:3a:25:81:6f:57:
                    3f:de:d7:d3:ac:69:e3:17:e0:95:cf:a3:b1:67:d2:
                    81:1e:52:82:a2:23:9a:de:2a:fa:6a:8c:48:9f:28:
                    4e:be:11:e0:6a:50:39:44:24:ff:53:8e:d4:a0:33:
                    0a:c9:73:20:08:cd:ff:8a:83:94:0d:78:6a:58:63:
                    78:31:01:07:0b:66:2b:6c:48:ad:86:06:32:cf:b3:
                    8d:84:21:e5:27:11:ac:4a:f4:6d:ca:8d:37:85:0a:
                    3f:40:af:fb:78:eb:28:56:0e:c2:15:a5:e9:e3:f2:
                    b7:6f:16:ea:3c:3a:64:6c:c0:9c:84:c5:d2:e7:75:
                    4f:f7:4f:cd:a1:1f:38:d9:34:26:ab:36:e2:e4:08:
                    ee:c8:55:cf:ec:9f:82:c9:f7:57:ec:76:57:13:84:
                    49:38:a0:a5:8d:4c:f6:95:0d:f0:99:a5:d7:11:83:
                    4d:05:92:5f:75:b8:c1:1c:c6:ef:5e:81:63:a2:67:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:29:07:F3:AB:54:71:5C:62:04:CB:C5:16:43:1A:5B:F9:95:C6:BC
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0fb:e500::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:c5:c0:19:5d:28:d3:89:ee:cf:f0:08:17:6d:56:3f:96:ea:
         12:9c:2b:d9:c1:72:1b:28:a6:c3:22:20:97:02:6c:5f:9c:04:
         02:33:5f:2f:b1:45:eb:61:bd:98:39:0e:45:cf:27:6a:a1:17:
         55:b5:c0:45:45:8d:11:e3:25:7f:0a:87:18:57:dc:ec:17:53:
         a2:5c:f7:d9:8c:60:2e:c0:50:e4:28:d9:d9:ba:9f:86:6c:d0:
         8c:05:6e:43:81:0e:a1:3b:ea:26:fb:a6:75:3c:fd:67:ac:74:
         6a:67:52:4a:91:e3:09:88:61:76:81:eb:3a:f5:dd:10:b1:8a:
         f4:2d:3c:c4:e5:25:91:d2:c0:7f:32:87:84:5b:32:a2:59:1e:
         07:90:10:04:38:f4:71:3f:76:7a:4b:4f:ff:63:59:2b:94:c8:
         42:ac:c3:df:6b:37:69:58:de:47:5b:09:47:9a:7f:38:82:f8:
         9f:f6:61:3a:42:ae:ae:d9:0e:43:91:16:b1:b3:c5:7d:13:1a:
         c0:c5:9f:e8:9f:4b:ee:5a:2f:6f:5e:e4:64:b6:54:5c:47:64:
         01:fd:94:45:82:61:65:80:b5:d5:c1:86:f3:a6:0d:35:a3:d6:
         36:99:3a:5f:82:12:d7:72:12:d6:71:62:3d:cd:15:be:fa:1b:
         e1:16:54:5b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:04:41 2026 by rpki-client