Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c005aeb-f132-4bb2-a865-90077d8d5e49.roa
File:                     2c005aeb-f132-4bb2-a865-90077d8d5e49.roa (raw, json)
Hash identifier:          berc8FF794T5cxXlYb3FlNjdWnAIFrOqbW2aprDH3Hc=
Subject key identifier:   F8:39:D8:0B:31:7D:11:BB:7C:72:02:21:43:BD:4B:71:23:16:6E:6E
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       7D6EA7E068B0383CD97FF3829555434EEBD8542A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c005aeb-f132-4bb2-a865-90077d8d5e49.roa
Signing time:             Fri 13 Feb 2026 15:00:44 +0000
ROA not before:           Fri 13 Feb 2026 15:00:44 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:10a::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6e:a7:e0:68:b0:38:3c:d9:7f:f3:82:95:55:43:4e:eb:d8:54:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 13 15:00:44 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=e0e7d80f1e5603916e7fcff60ad4fc1c24cf0e65156337947a681af3814488aa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:92:d5:19:58:85:0c:e2:7a:1b:15:74:07:
                    4a:cc:a0:bf:dc:51:a1:fd:05:97:ad:b1:bc:f4:0a:
                    df:7b:ac:79:fa:a3:bf:d8:5e:c5:85:c0:5d:ef:49:
                    92:80:b9:1e:24:eb:10:99:59:cd:f3:0b:86:e8:a3:
                    36:6e:ff:2e:26:03:30:f4:04:5f:37:7e:2e:d0:85:
                    55:5e:96:c6:aa:2d:a3:03:e9:87:c2:d5:c0:56:cc:
                    ec:13:63:c8:bc:15:a5:89:d4:10:e7:b8:98:cc:25:
                    95:17:ce:a0:a1:86:fe:b1:7d:1a:9e:e4:28:23:aa:
                    3c:e8:5f:b3:ae:f3:0d:df:28:43:99:3a:09:8c:8e:
                    da:df:d5:80:ad:b1:26:64:c3:e4:0a:9e:7f:f7:39:
                    6a:81:1e:9b:f1:24:34:54:c0:e7:5b:8c:52:30:b9:
                    95:60:f6:bf:05:fd:48:31:2f:1d:ba:23:6d:58:a0:
                    5d:33:e6:6a:3d:07:b3:c8:dd:db:05:1f:75:25:85:
                    db:29:57:cb:70:e1:3e:6b:67:d0:8b:ad:fa:69:8e:
                    03:69:73:79:61:f8:df:b2:2e:42:9c:eb:0a:46:8c:
                    29:b6:d4:22:39:2c:dd:28:64:e2:1b:a0:e0:70:19:
                    a7:de:c6:9d:f6:58:a5:77:6c:9a:c9:72:05:98:7a:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:D8:0B:31:7D:11:BB:7C:72:02:21:43:BD:4B:71:23:16:6E:6E
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2c005aeb-f132-4bb2-a865-90077d8d5e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:10a::/47

    Signature Algorithm: sha256WithRSAEncryption
         93:30:68:73:9a:3a:24:02:a6:d1:d0:75:a5:d8:71:14:2e:b5:
         bb:dc:c8:78:52:9d:41:47:6f:c7:c0:46:61:22:33:83:17:0d:
         fb:c4:ff:55:b0:85:39:9a:e7:07:8a:8e:49:df:c0:90:75:6d:
         05:0f:dc:af:66:0f:37:32:22:66:c3:2c:36:4c:90:bf:7c:8b:
         05:2d:39:dc:5a:45:13:16:27:78:72:06:41:08:a3:b5:7e:e5:
         09:f0:e8:cc:03:4f:f4:25:d3:8d:73:e0:27:61:b9:e4:86:96:
         0d:b4:85:c6:90:6e:50:ab:62:f0:8f:f3:f1:2f:e4:a2:4f:a3:
         b8:79:24:5c:93:77:68:41:9f:75:e4:63:ef:b4:2d:85:47:ef:
         43:d3:5d:b6:3a:31:d6:96:ae:69:2f:a2:f8:d3:4c:15:1b:d8:
         03:26:59:0a:dd:b6:08:ac:e3:45:83:65:a4:23:e4:2b:67:e2:
         d5:cd:c8:19:95:22:6e:18:0e:dd:36:40:65:17:48:b1:98:d0:
         9d:1e:86:ac:35:83:12:98:0f:fe:1e:84:f1:6a:ee:ce:21:f2:
         93:93:7b:79:68:cb:03:29:75:55:63:19:2e:32:bc:43:3d:31:
         f1:c1:54:bf:cf:1d:d5:1a:2c:ba:23:87:2e:21:b4:ed:a7:ca:
         b0:a9:14:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:49 2026 by rpki-client