Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/50efcea8-92c3-43d7-b0f8-f16b0e0eae10.roa
File:                     50efcea8-92c3-43d7-b0f8-f16b0e0eae10.roa (raw, json)
Hash identifier:          5tFfkRoLq3DaZYTv6dmTUqRySAwWy/z36O+nIyk9n78=
Subject key identifier:   1D:10:1D:3F:3C:F9:9F:0D:C7:AB:19:62:8D:14:17:C6:DC:D0:E7:BB
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       5D129FF2C1E4401FCC282FAC65D106574B90D582
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/50efcea8-92c3-43d7-b0f8-f16b0e0eae10.roa
Signing time:             Wed 18 Feb 2026 00:36:38 +0000
ROA not before:           Wed 18 Feb 2026 00:36:38 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f2:7000::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:12:9f:f2:c1:e4:40:1f:cc:28:2f:ac:65:d1:06:57:4b:90:d5:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 18 00:36:38 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=53847a5920f80c61a50ef460144abfbc38cabbbf0af31eaa16dfaf5bf94002a6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:45:de:5b:67:01:b0:7e:3e:b2:29:e0:2a:
                    a9:17:ac:e8:81:eb:ce:52:bb:2e:15:df:67:19:b3:
                    a8:44:be:5e:20:cc:50:78:3e:55:94:5e:a2:35:27:
                    58:8f:df:d3:94:35:b8:1d:f7:6e:d3:dd:8b:a7:44:
                    41:16:33:9a:b4:71:c7:a7:d8:87:46:6a:2e:84:93:
                    0c:ae:31:53:8c:6c:b8:d8:7c:cc:a7:9d:c0:b8:75:
                    2e:b3:f3:9d:83:48:6a:9b:41:d6:bc:35:30:49:9a:
                    56:ce:da:88:0e:e3:a1:fc:68:dd:d2:60:68:11:ec:
                    af:50:46:b8:4a:41:69:cd:62:d7:b2:0b:dd:e8:c6:
                    45:fe:4c:f5:06:44:2c:6b:83:da:1e:07:d4:22:34:
                    c0:63:52:99:62:0a:f1:e8:c9:10:53:f9:3c:f2:ff:
                    5e:b1:9b:03:f0:eb:a3:dd:0a:b0:14:89:63:fb:55:
                    ce:56:9e:cd:0e:08:0d:13:a2:6c:8e:07:94:8d:d6:
                    72:47:a1:1a:6e:cb:ea:10:f3:4e:72:26:21:80:1c:
                    1e:89:8e:83:0e:3a:2c:c6:8e:3b:38:5d:d6:f9:73:
                    7f:9a:af:35:fa:1f:62:0e:6d:92:ad:48:9a:0c:77:
                    ac:59:10:38:e8:2a:d5:97:7e:dd:b1:a3:56:3a:51:
                    c7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:10:1D:3F:3C:F9:9F:0D:C7:AB:19:62:8D:14:17:C6:DC:D0:E7:BB
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/50efcea8-92c3-43d7-b0f8-f16b0e0eae10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f2:7000::/47

    Signature Algorithm: sha256WithRSAEncryption
         69:28:10:9a:b4:1f:86:b0:55:10:a8:57:56:d5:12:c7:09:04:
         88:b1:92:d7:45:a6:2f:d1:f8:88:f2:7a:9b:3e:54:09:51:ed:
         26:60:6b:92:3f:fb:27:f5:ae:5a:dc:df:57:06:24:cd:74:46:
         c4:14:29:6e:cc:9b:e6:2a:56:14:8b:7b:1b:84:ce:6a:36:aa:
         68:09:3b:36:11:85:af:9b:50:50:d8:34:1d:51:80:22:21:bc:
         bc:46:57:f4:57:b7:02:86:a2:0d:48:8e:e2:2f:ee:72:04:14:
         ea:68:e5:fc:10:8d:e2:24:2a:46:a6:e5:3b:c9:d2:1a:0d:39:
         5b:d7:1a:24:6e:e7:77:6d:51:f5:6a:68:c9:d8:75:eb:d8:32:
         db:65:a8:12:c1:81:68:f6:fc:c5:04:01:7d:95:9d:19:3a:0f:
         30:77:c0:cd:53:13:c6:86:63:4f:53:39:b2:de:96:30:a5:8d:
         7b:20:44:e2:01:9f:15:e2:ff:4c:51:1b:04:f2:d7:41:54:aa:
         19:49:85:4d:ec:51:2d:f5:a1:e5:66:4e:d4:67:cf:27:05:4d:
         d0:76:c1:34:6f:f2:c3:d0:d0:e7:5f:81:3a:d1:1e:d7:cd:8f:
         0f:8b:67:f1:29:d3:9b:17:a9:27:bd:e5:57:12:01:46:ed:9f:
         00:b4:3b:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:46 2026 by rpki-client