Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/079b7b21-00aa-46a8-8c8a-2861bb6c59db.roa
File:                     079b7b21-00aa-46a8-8c8a-2861bb6c59db.roa (raw, json)
Hash identifier:          lTo0+irXRPiYSFk6HGTe+Vtp6qtl6c3llLbOpD9IFsk=
Subject key identifier:   B8:8C:4F:2E:EE:38:9D:03:16:60:DE:0C:9F:3B:90:0E:9C:17:AE:D5
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       157E84AE14559E450DD1EB5420244C0E46E18595
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/079b7b21-00aa-46a8-8c8a-2861bb6c59db.roa
Signing time:             Tue 17 Feb 2026 14:21:38 +0000
ROA not before:           Tue 17 Feb 2026 14:21:38 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:601::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7e:84:ae:14:55:9e:45:0d:d1:eb:54:20:24:4c:0e:46:e1:85:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 17 14:21:38 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=eca4d6955d4475cb1cbc521e6c0d2f4f96db9650068d57b0afef4a16320be8e5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:c2:e1:a8:51:ba:ad:b1:6e:74:ac:87:ba:
                    ce:d0:2e:c5:0c:14:a6:03:14:12:d9:8e:ee:f8:56:
                    ce:7c:c2:58:1d:e1:5f:e9:98:3a:4d:77:1f:d6:09:
                    d3:d0:5a:50:c8:13:0d:cb:ce:9b:07:80:a5:c9:21:
                    ab:7c:3e:f7:98:e5:01:49:93:53:c1:5d:94:6e:49:
                    9c:bc:59:26:99:dd:ab:46:5b:1b:ad:33:7f:c8:77:
                    e0:1d:ad:69:a6:69:3e:55:84:bc:dc:29:44:96:b4:
                    f0:b6:b5:d3:f9:e3:0e:63:d8:a8:17:bc:c8:a1:28:
                    2d:f2:cc:f6:fa:8d:1c:30:58:08:a6:6b:21:6e:82:
                    3c:fb:f3:bc:10:e2:80:8f:79:2b:aa:ec:6b:af:27:
                    ee:5a:1e:54:17:fc:8e:c2:4b:fa:04:47:18:73:5b:
                    f2:de:5d:eb:08:a9:85:83:21:f9:26:ad:ea:94:85:
                    3d:ed:d3:f4:a3:8b:f2:8a:a0:26:fe:9b:03:2c:63:
                    e6:86:32:df:4d:a1:d0:c6:ae:03:cc:35:2c:ff:5b:
                    0b:bc:4a:66:0b:8e:aa:35:5e:3a:ca:ef:bb:9d:41:
                    dd:5a:dc:04:18:3f:11:b8:31:80:b6:78:36:88:3d:
                    03:0b:f4:86:10:ef:03:da:98:f4:b4:23:e5:8d:f9:
                    91:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8C:4F:2E:EE:38:9D:03:16:60:DE:0C:9F:3B:90:0E:9C:17:AE:D5
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/079b7b21-00aa-46a8-8c8a-2861bb6c59db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:601::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:7a:5f:6e:83:71:45:fe:f5:59:5b:c6:c0:60:95:5f:11:c5:
         32:df:64:3e:2c:a9:a3:0a:24:53:4d:fa:b9:f3:b7:83:e5:0c:
         d0:44:94:be:22:93:0b:68:f2:cf:2e:57:3a:49:9a:b0:1f:0f:
         db:6d:e4:24:1a:5d:f4:fc:fb:4a:8e:60:2b:52:a9:99:ee:41:
         30:ed:51:b7:40:1d:6a:c1:d3:b6:0d:4c:3e:ed:7e:78:16:5c:
         3a:a6:fe:bd:db:d6:34:2f:bf:3d:b3:a2:37:fd:b2:66:f5:2a:
         52:24:09:cb:c5:5d:94:e9:a3:c5:d6:78:d9:d2:99:9a:1c:52:
         77:0a:4a:24:d6:e2:98:20:d7:90:3f:79:c9:0b:c9:fc:ea:52:
         66:e0:29:65:ba:c2:3f:ad:24:be:3a:75:af:f0:c4:b2:50:89:
         52:6a:f4:10:e0:04:ce:4c:cf:a7:4f:52:d5:b7:15:4b:7e:af:
         83:e8:80:f3:2f:b7:ca:eb:64:56:81:b2:18:83:64:c3:83:48:
         66:52:6f:76:a5:0a:e4:8a:3a:52:b2:f0:f3:9e:0e:63:4d:dd:
         bc:3a:ef:41:75:44:92:d0:f1:b9:c5:b1:f1:06:08:2b:fb:d2:
         e6:4b:b7:11:1d:c4:93:eb:84:9f:35:75:9e:e2:e4:2e:64:1e:
         37:54:7a:dc
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFX6ErhRVnkUN0etUICRMDkbhhZUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwMjE3MTQyMTM4WhcNMjYwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlY2E0ZDY5NTVkNDQ3NWNiMWNiYzUyMWU2YzBkMmY0Zjk2
ZGI5NjUwMDY4ZDU3YjBhZmVmNGExNjMyMGJlOGU1MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6DsLhqFG6rbFudKyHus7QLsUMFKYDFBLZju74Vs58wlgd
4V/pmDpNdx/WCdPQWlDIEw3LzpsHgKXJIat8PveY5QFJk1PBXZRuSZy8WSaZ3atG
WxutM3/Id+AdrWmmaT5VhLzcKUSWtPC2tdP54w5j2KgXvMihKC3yzPb6jRwwWAim
ayFugjz787wQ4oCPeSuq7GuvJ+5aHlQX/I7CS/oERxhzW/LeXesIqYWDIfkmreqU
hT3t0/Sji/KKoCb+mwMsY+aGMt9NodDGrgPMNSz/Wwu8SmYLjqo1XjrK77udQd1a
3AQYPxG4MYC2eDaIPQML9IYQ7wPamPS0I+WN+ZHvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUuIxPLu44nQMWYN4MnzuQDpwXrtUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzA3OWI3YjIxLTAwYWEtNDZhOC04YzhhLTI4NjFiYjZjNTlkYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwBgEwDQYJKoZIhvcNAQELBQADggEBAFZ6X26DcUX+9VlbxsBglV8R
xTLfZD4sqaMKJFNN+rnzt4PlDNBElL4ikwto8s8uVzpJmrAfD9tt5CQaXfT8+0qO
YCtSqZnuQTDtUbdAHWrB07YNTD7tfngWXDqm/r3b1jQvvz2zojf9smb1KlIkCcvF
XZTpo8XWeNnSmZocUncKSiTW4pgg15A/eckLyfzqUmbgKWW6wj+tJL46da/wxLJQ
iVJq9BDgBM5Mz6dPUtW3FUt+r4PogPMvt8rrZFaBshiDZMODSGZSb3alCuSKOlKy
8POeDmNN3bw670F1RJLQ8bnFsfEGCCv70uZLtxEdxJPrhJ81dZ7i5C5kHjdUetw=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:51 2026 by rpki-client