Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa
File:                     60d13554-0aae-450a-879a-816f0a4209ac.roa (raw, json)
Hash identifier:          l5Jz/3AfAaf/HDDLNku/3sLt83D1U7a2tyrXRhiybkU=
Subject key identifier:   59:9A:C9:4C:D6:77:94:AE:86:09:EC:84:C7:F5:1A:6C:35:B5:83:F1
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       792451455B3919DA8E0BCA170ECE3E98EF4120D9
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa
Signing time:             Tue 10 Feb 2026 00:00:12 +0000
ROA not before:           Tue 10 Feb 2026 00:00:12 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6101::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:24:51:45:5b:39:19:da:8e:0b:ca:17:0e:ce:3e:98:ef:41:20:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 10 00:00:12 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=c5fc3689ea6173520c858c1f4f540863eb4b9f047f56984e52bebc885eecdae7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:1a:27:10:d6:92:a3:0d:74:7f:b8:5c:af:
                    47:4f:0a:b0:c9:f7:6c:6f:77:bf:f4:44:5a:6c:65:
                    83:96:01:98:62:60:24:5a:3b:0a:44:1c:bb:70:5c:
                    98:a0:16:35:d0:4a:a2:3a:15:cd:d6:c6:14:ea:af:
                    1e:22:5c:1b:fd:d8:95:8c:d8:bf:5e:52:ab:73:5f:
                    26:0c:e9:84:e1:be:92:ae:2e:bc:19:86:88:6e:d5:
                    65:2a:9f:fd:f4:2c:07:3c:d5:3b:b2:62:8e:8d:9c:
                    86:7a:95:5d:c1:b1:53:77:e2:90:45:5c:0f:7b:70:
                    18:dd:46:76:75:79:27:99:4d:84:d9:de:9e:29:4e:
                    75:a7:68:6b:57:56:e0:b3:77:2b:38:66:fd:cf:6a:
                    52:24:2d:25:08:66:c8:f6:46:af:c5:0d:57:fa:27:
                    65:27:5b:a1:b0:97:a7:b4:83:c4:d0:b7:c5:14:03:
                    6a:80:1f:15:bf:84:d3:46:61:82:0c:a1:be:42:04:
                    38:67:5c:67:1d:34:aa:6c:01:56:d5:98:17:e2:ec:
                    2b:b2:e6:46:f7:57:b2:00:2a:98:16:a9:5e:ed:72:
                    04:6d:0e:c4:75:3f:cf:8f:17:88:86:08:ad:76:55:
                    2f:58:e5:b2:04:db:b4:99:6b:fa:aa:3d:4e:fc:79:
                    75:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9A:C9:4C:D6:77:94:AE:86:09:EC:84:C7:F5:1A:6C:35:B5:83:F1
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/60d13554-0aae-450a-879a-816f0a4209ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6101::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:68:ba:a3:60:96:7c:5a:59:7c:85:b2:86:5b:9b:aa:df:4d:
         1a:62:93:05:34:79:d3:a8:b1:54:35:15:31:64:c6:77:1c:10:
         b6:1e:75:82:ca:b7:6e:ae:c0:4c:f9:f3:49:6e:22:01:e6:70:
         23:54:14:c3:71:77:f2:6f:ba:9e:45:9a:69:6f:dd:aa:3f:f2:
         3c:e4:32:a4:68:51:a2:43:57:13:40:db:5e:6e:4e:22:30:2a:
         21:76:97:b9:7f:33:9b:c2:80:71:17:4d:65:25:93:d9:32:30:
         73:44:93:ef:f5:9e:ec:fa:a2:e5:52:b9:71:3c:60:9a:fa:5a:
         13:23:51:81:c5:81:33:32:9f:ba:81:fd:2c:b5:68:c8:47:22:
         6f:ea:92:81:f3:1c:1f:b2:2b:45:9a:79:de:a6:34:0e:57:60:
         94:a6:a9:10:18:67:3c:6d:99:07:3b:6c:8b:20:9b:87:10:11:
         d8:eb:e0:74:b5:e7:cc:fa:ef:f3:d8:c6:7b:3b:06:45:bf:34:
         f3:e7:13:e9:ab:00:01:21:68:05:c4:ad:8a:8a:e2:94:ce:05:
         d3:de:94:e4:2c:21:fa:45:51:95:10:53:66:33:11:fa:4f:c0:
         52:01:66:5d:78:c6:28:d0:d2:08:e9:db:1a:1f:05:95:fd:ea:
         bf:a6:2d:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:37:08 2026 by rpki-client