Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3db0876d-51d3-4a1b-88a1-55f2d73023c1.roa
File:                     3db0876d-51d3-4a1b-88a1-55f2d73023c1.roa (raw, json)
Hash identifier:          L7x5vU2BxNIua+qj49kEk/1SdFxBaU2Z2dUxcGL9PBM=
Subject key identifier:   DB:E9:21:3C:82:FA:CE:10:A1:6E:08:E8:0D:8A:13:F7:A9:C9:02:CB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       24E5AA310C2F044F3C6ADC4428A42291149632FF
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3db0876d-51d3-4a1b-88a1-55f2d73023c1.roa
Signing time:             Wed 18 Feb 2026 00:36:38 +0000
ROA not before:           Wed 18 Feb 2026 00:36:38 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f2:7000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e5:aa:31:0c:2f:04:4f:3c:6a:dc:44:28:a4:22:91:14:96:32:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 18 00:36:38 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=c9582960017030dd2a6b7451f6546684693c97de121705ef8ff42588f301570b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:43:3e:e4:38:68:14:6c:c1:aa:1c:7e:33:
                    ea:41:f2:43:48:2e:4a:d5:32:41:75:70:01:45:7a:
                    d6:c7:ff:00:94:e4:44:a0:4b:20:83:bf:dd:23:c0:
                    da:84:88:aa:9d:81:c9:78:44:79:07:b5:8f:dc:52:
                    ec:4d:2b:d3:07:af:b3:90:de:b2:a4:d8:3c:c5:98:
                    4c:e4:bc:bf:df:05:65:15:8f:2f:fe:f6:1e:d3:1b:
                    b0:3f:c8:51:16:b5:38:ef:d0:e6:85:ec:5c:35:f5:
                    ff:82:49:ee:fc:65:de:40:67:65:75:3a:ba:64:43:
                    cc:78:88:18:99:c6:34:f9:d1:8a:4f:ee:68:a7:a1:
                    42:a5:c2:60:45:ad:a1:42:39:ae:05:24:5f:94:cb:
                    80:67:31:d6:36:42:e0:2c:b3:a8:f2:04:65:31:18:
                    ab:5c:5a:de:98:ab:b4:c7:d3:46:c7:89:23:f7:7a:
                    61:1d:fd:0d:4b:35:7e:6c:65:4e:60:04:a1:b8:1c:
                    f7:82:66:b8:1e:83:be:72:56:01:2b:70:8b:d3:86:
                    e6:eb:94:52:ab:c5:06:45:eb:31:aa:73:c7:08:eb:
                    e7:ee:d4:a9:0d:84:20:9c:ae:d6:47:e8:79:9a:32:
                    e5:14:33:96:b0:94:f8:a7:98:f5:d5:c4:5b:12:b4:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E9:21:3C:82:FA:CE:10:A1:6E:08:E8:0D:8A:13:F7:A9:C9:02:CB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3db0876d-51d3-4a1b-88a1-55f2d73023c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7000::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:b0:92:21:34:a6:15:23:1e:d1:55:03:87:66:3a:d3:4a:74:
         92:fc:92:6f:63:95:aa:4e:4c:95:74:55:09:39:bb:45:bf:44:
         e7:b2:fc:4c:5b:68:29:db:71:5f:40:f5:1e:0d:48:f0:9e:f2:
         8a:ae:00:46:f3:dd:a5:31:f5:dc:1c:c0:98:bc:92:ed:34:11:
         a8:0e:12:b4:2a:09:69:57:2b:82:03:6d:00:b4:58:49:89:48:
         26:7b:b7:65:a8:a4:70:36:2c:e0:23:93:34:d9:ea:f2:9b:f9:
         c0:5e:79:25:28:b1:5d:e7:01:ed:ed:4b:10:e0:2a:85:b0:bb:
         00:31:e0:f8:de:11:37:3e:01:39:97:fa:72:d6:d0:1a:8b:be:
         95:ee:f2:ac:18:69:6f:2d:67:75:e4:00:08:9f:20:c2:d9:01:
         a5:35:22:ef:72:0b:12:c7:37:49:da:91:06:07:80:13:6d:32:
         06:66:42:50:fb:5c:2d:6a:87:1d:3e:50:7d:9a:df:fa:13:47:
         ca:7c:d2:29:0a:ed:e9:b7:ab:c0:f4:a8:f8:a6:a3:9c:06:69:
         f1:8b:4a:4a:7c:71:57:a3:c5:26:46:53:cd:ff:0c:f7:b9:b1:
         06:9a:16:fc:6c:1f:3e:06:16:71:3d:99:1e:84:a9:69:2f:ae:
         2f:78:ef:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:33 2026 by rpki-client