Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6826d5c-b428-498f-80be-06e94897140e.roa
File:                     f6826d5c-b428-498f-80be-06e94897140e.roa (raw, json)
Hash identifier:          zzzRuVhgtXsEl5+4kLEBDjGsNpDHeQsO5UNnZFWXinA=
Subject key identifier:   4A:72:B3:05:99:C0:01:55:6E:E8:F7:6A:23:E9:3D:83:21:90:28:01
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       2364E4F6C3AD364B76E7A20A3A96210E85A6E6C8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6826d5c-b428-498f-80be-06e94897140e.roa
Signing time:             Fri 13 Feb 2026 15:10:55 +0000
ROA not before:           Fri 13 Feb 2026 15:10:55 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:6106::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:64:e4:f6:c3:ad:36:4b:76:e7:a2:0a:3a:96:21:0e:85:a6:e6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 13 15:10:55 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=8f99eb02c34e615c8311bf815851aab090a08a0d96d6d89df327ffcbbf4cd433, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:7f:fb:8c:40:6c:af:a5:47:ae:f3:a3:cf:
                    7f:78:10:0c:25:d6:ee:16:91:75:f4:c4:1e:b0:e9:
                    3e:39:26:4b:57:2e:06:d6:1f:ac:06:88:01:0c:fe:
                    31:55:03:69:38:18:5a:a9:d6:ed:12:0d:8a:b7:95:
                    21:22:92:bd:b9:b4:3d:24:d4:c1:6c:66:d4:2f:73:
                    b4:46:85:8e:ae:8b:27:60:ea:a0:49:95:bd:b3:ab:
                    e7:a4:72:2a:06:cd:5a:f7:9c:b2:06:6b:3a:9e:0a:
                    72:6f:f6:38:b6:82:f9:ab:f7:27:b7:8d:9a:2e:e4:
                    3b:a5:82:1c:02:02:a4:d8:ee:7d:21:86:ce:82:47:
                    a2:d9:27:84:4f:ff:d4:60:98:90:80:e8:fa:46:5c:
                    6d:dc:15:92:bc:ba:66:e5:07:cd:be:1d:d8:bd:e7:
                    c7:18:0f:5c:a1:9a:4e:60:86:d9:fa:38:96:3c:54:
                    35:6c:f8:12:f5:cb:5c:26:9c:e7:65:61:24:a8:c7:
                    6d:cb:89:f9:85:49:78:d2:6b:fa:5e:64:81:a3:6e:
                    6d:89:91:8d:00:df:13:a5:e0:ae:8c:15:3c:85:1e:
                    24:30:27:f4:39:3f:2f:fe:4e:8d:9a:f3:e2:91:7c:
                    14:9b:2f:a1:ec:fd:a9:5d:f1:e4:83:b2:7f:4a:76:
                    b2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:72:B3:05:99:C0:01:55:6E:E8:F7:6A:23:E9:3D:83:21:90:28:01
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6826d5c-b428-498f-80be-06e94897140e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6106::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:aa:3d:09:a2:33:58:5a:00:c1:95:ee:4b:25:89:65:aa:51:
         cc:5b:36:bd:d0:00:0c:ea:e6:05:94:1f:42:68:b1:ad:7d:cf:
         23:6c:77:13:7a:22:a8:21:69:de:dd:6a:b1:6e:e4:cb:49:ce:
         5d:b3:b1:27:ca:b3:8e:9d:d4:2e:fe:18:12:5d:41:e8:4b:5e:
         0f:fe:78:b2:d6:83:00:86:14:f3:ae:75:b1:8c:f4:1c:a6:ca:
         ad:45:3f:db:96:c9:47:b9:10:96:55:1c:9d:6d:b1:b6:19:9f:
         2e:30:fa:cd:50:d3:77:08:8e:85:ab:80:39:43:9e:56:62:29:
         45:d4:bd:fd:c1:a3:56:34:33:fa:ec:14:7c:a6:a9:8e:90:ab:
         4a:98:28:c3:47:ce:3c:3c:fa:09:53:76:3b:da:24:a3:a8:15:
         3e:24:1b:b7:46:e6:84:7c:cb:65:2f:8f:77:dd:54:05:3d:cf:
         63:d0:d1:d4:56:32:56:bb:73:eb:ac:80:3a:2a:a6:72:5c:da:
         6e:e1:d3:cc:17:ae:1d:83:96:df:29:3a:34:2a:ef:3a:25:ac:
         7c:0f:57:a6:4e:01:a4:31:62:9a:ef:1f:4c:da:a5:46:44:dd:
         20:aa:89:ab:1f:ba:de:d9:6b:8c:ee:4e:20:6f:70:a8:b3:7c:
         44:b1:4f:05
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUI2Tk9sOtNkt256IKOpYhDoWm5sgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjEzMTUxMDU1WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4Zjk5ZWIwMmMzNGU2MTVjODMxMWJmODE1ODUxYWFiMDkw
YTA4YTBkOTZkNmQ4OWRmMzI3ZmZjYmJmNGNkNDMzMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCm3H/7jEBsr6VHrvOjz394EAwl1u4WkXX0xB6w6T45JktX
LgbWH6wGiAEM/jFVA2k4GFqp1u0SDYq3lSEikr25tD0k1MFsZtQvc7RGhY6uiydg
6qBJlb2zq+ekcioGzVr3nLIGazqeCnJv9ji2gvmr9ye3jZou5DulghwCAqTY7n0h
hs6CR6LZJ4RP/9RgmJCA6PpGXG3cFZK8umblB82+Hdi958cYD1yhmk5ghtn6OJY8
VDVs+BL1y1wmnOdlYSSox23LifmFSXjSa/peZIGjbm2JkY0A3xOl4K6MFTyFHiQw
J/Q5Py/+To2a8+KRfBSbL6Hs/ald8eSDsn9KdrKlAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUSnKzBZnAAVVu6PdqI+k9gyGQKAEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2Y2ODI2ZDVjLWI0MjgtNDk4Zi04MGJlLTA2ZTk0ODk3MTQwZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYQYwDQYJKoZIhvcNAQELBQADggEBAIKqPQmiM1haAMGV7ksliWWq
UcxbNr3QAAzq5gWUH0Josa19zyNsdxN6Iqghad7darFu5MtJzl2zsSfKs46d1C7+
GBJdQehLXg/+eLLWgwCGFPOudbGM9Bymyq1FP9uWyUe5EJZVHJ1tsbYZny4w+s1Q
03cIjoWrgDlDnlZiKUXUvf3Bo1Y0M/rsFHymqY6Qq0qYKMNHzjw8+glTdjvaJKOo
FT4kG7dG5oR8y2Uvj3fdVAU9z2PQ0dRWMla7c+usgDoqpnJc2m7h08wXrh2Dlt8p
OjQq7zolrHwPV6ZOAaQxYprvH0zapUZE3SCqiasfut7Za4zuTiBvcKizfESxTwU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:42 2026 by rpki-client