Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa
File:                     6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa (raw, json)
Hash identifier:          48cYAL9BPEmF7qzdHYl+aotK9L+CH/cgGQTC1u0iDac=
Subject key identifier:   B0:06:A3:39:FF:D5:B9:98:A6:E0:E9:42:1F:0D:33:E3:0D:36:42:53
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       56AD73064E4880429ABBF32A276BC9D53A71E317
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa
Signing time:             Tue 17 Feb 2026 00:30:16 +0000
ROA not before:           Tue 17 Feb 2026 00:30:16 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:1100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ad:73:06:4e:48:80:42:9a:bb:f3:2a:27:6b:c9:d5:3a:71:e3:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 17 00:30:16 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=5e50af1743c7b6e86760a4a4dddcfde1a3979e29e71a752ca0b40d8c13ef15a9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:51:36:75:32:11:b2:99:32:6a:20:9b:a3:
                    18:82:fb:89:0a:68:f8:c9:3b:27:5d:6a:31:4a:c5:
                    08:c9:bf:a4:c7:7d:7a:eb:7a:a0:33:c0:5d:95:21:
                    d2:7f:b7:c7:90:f7:18:4d:20:c2:80:3e:18:fb:16:
                    8c:a5:92:b4:30:f9:75:46:78:dd:3c:b4:03:94:d6:
                    a7:50:5f:99:63:4b:d3:d2:fa:37:1d:6f:a9:66:7f:
                    8b:dc:82:51:30:bd:fb:b8:46:a3:81:af:1e:17:5a:
                    12:92:c0:cc:5a:a7:f8:3d:2d:e4:70:ea:d5:d0:1a:
                    3b:bc:cd:35:b0:2b:96:02:bd:33:2b:21:13:04:91:
                    7b:90:80:59:fc:c1:bc:35:16:e4:de:55:00:07:42:
                    c2:5b:5d:5e:00:06:cb:76:eb:23:b0:c6:92:0c:cc:
                    2e:2f:1f:af:24:b4:92:91:7e:14:6e:94:11:70:17:
                    c7:c3:00:17:84:aa:30:aa:18:2b:05:7f:ed:7f:30:
                    cd:26:d8:8f:2d:35:04:27:71:d6:52:65:8a:e3:df:
                    3c:b3:67:89:95:34:b9:69:fd:2c:95:12:0d:a0:06:
                    cc:d8:db:f3:6d:57:81:d5:0b:7c:4f:3f:c9:16:e3:
                    9c:51:7d:f4:9f:d0:57:0f:ac:ff:a0:95:a6:96:4d:
                    27:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:06:A3:39:FF:D5:B9:98:A6:E0:E9:42:1F:0D:33:E3:0D:36:42:53
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6eaf9ab5-ec8b-42eb-ade9-781bf12212a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:b5:c0:9e:40:ad:29:65:57:84:dc:11:c0:fb:fa:a0:b0:66:
         fd:0c:44:4c:bf:72:f6:67:44:33:e9:33:05:15:3a:a6:29:c9:
         55:a4:b4:27:7d:10:5b:54:4e:61:6a:6b:53:cf:1e:53:89:45:
         af:74:eb:9a:1d:81:a3:c2:b4:12:90:e9:0d:5b:46:07:12:18:
         57:2c:38:e3:bf:3f:ca:d1:88:ef:e1:3d:6f:6e:50:4a:ba:27:
         cb:5d:45:1b:fc:26:5d:67:be:f0:7c:98:15:c8:2e:f9:7b:82:
         4e:bd:58:aa:db:0a:8b:59:35:4f:a6:a1:a2:f8:1a:ad:09:46:
         8c:6d:37:66:e3:59:c5:82:64:67:7f:26:8b:d7:9f:df:de:7d:
         59:e1:b4:1a:22:e7:42:2e:de:68:73:d3:39:98:fd:5a:52:df:
         a0:01:07:18:06:76:10:70:96:2f:11:9e:82:56:94:26:50:71:
         ae:59:fb:3d:2d:85:a5:31:ee:7c:27:87:c9:fe:89:80:c5:0c:
         83:6a:2a:12:a8:22:19:f1:f2:57:d4:49:bf:0d:4c:03:a1:7a:
         a4:b2:6a:f4:89:28:2c:3b:56:ce:cc:6c:4e:4c:1c:af:88:12:
         33:bc:c8:aa:42:72:0c:60:ab:ce:d7:e1:54:e9:e0:44:97:f1:
         6a:a2:95:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:47 2026 by rpki-client