Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa
File:                     8befeacb-b991-408b-912e-a5a744fc13df.roa (raw, json)
Hash identifier:          lqogNLsrrT+uKLNB8RNwBrb6TkCR3hYVmJagEkCaAU4=
Subject key identifier:   00:C7:EB:87:AC:19:A0:FF:85:F0:49:6B:21:41:7C:5C:04:85:C9:D4
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       DE4FCF40253AE60EEADE14688744FC7762C061
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa
Signing time:             Fri 13 Feb 2026 15:10:54 +0000
ROA not before:           Fri 13 Feb 2026 15:10:54 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:6106::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            de:4f:cf:40:25:3a:e6:0e:ea:de:14:68:87:44:fc:77:62:c0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 13 15:10:54 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=4b004f52702854d19b485ad96e8fa9d943a76b1700dc750f24eca615be687b28, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:75:8c:e9:32:20:da:be:9c:f3:69:fe:62:
                    9b:2c:f0:1e:72:08:97:86:02:33:60:04:ba:69:26:
                    a2:90:b1:f0:6b:d5:0d:25:87:c6:df:8b:61:21:4e:
                    57:73:b5:a7:4a:10:5b:0c:d2:84:b0:33:b4:48:f3:
                    53:03:f9:d7:5b:8a:12:c5:b5:8c:24:74:50:14:e7:
                    24:1e:2a:3e:7a:34:fb:39:17:fb:f0:27:bf:bf:f0:
                    82:d8:65:ab:50:c9:37:81:44:4e:fa:f8:2d:d9:98:
                    20:aa:43:39:c1:c3:c7:85:2a:95:03:9c:0f:41:3e:
                    a1:00:42:df:a8:8d:0e:20:ee:72:23:a4:ac:57:30:
                    c2:04:0e:42:68:8e:6b:d8:0b:52:9f:26:81:0e:35:
                    31:dd:da:81:5f:cc:99:71:76:c1:1d:a5:7d:78:ad:
                    31:91:58:fd:f2:27:54:fd:78:cc:83:e1:bd:a4:af:
                    26:f5:ce:ec:0c:12:71:47:85:d0:44:22:1e:f3:13:
                    a1:c0:3b:ae:12:b7:7f:1c:99:2e:52:2e:3a:c5:04:
                    b5:0b:8d:d6:67:3f:b1:ba:d5:13:fb:7c:64:13:72:
                    41:d7:98:ca:e0:94:8d:ff:57:09:75:dc:68:a2:30:
                    39:c8:05:18:b8:0e:b8:84:9f:e0:9c:7b:fc:72:30:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C7:EB:87:AC:19:A0:FF:85:F0:49:6B:21:41:7C:5C:04:85:C9:D4
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8befeacb-b991-408b-912e-a5a744fc13df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:6106::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:80:e8:31:58:a9:9f:32:fb:06:ac:10:c7:1e:d3:f1:20:61:
         85:40:93:6f:a1:57:7e:b9:2c:b3:e1:5f:8a:81:6c:fc:68:1d:
         38:d1:fb:19:2c:94:9c:ba:cd:18:0d:6d:14:20:68:60:6f:fc:
         59:65:82:ad:0b:2e:37:e8:eb:81:1c:0a:a0:f7:ed:86:96:43:
         cf:fb:7a:41:6c:c2:23:a2:2b:f8:5c:43:75:82:ad:10:97:84:
         63:e1:4e:93:10:d2:56:00:dd:d4:45:9d:1e:47:86:7e:0b:1c:
         aa:50:10:88:87:a6:d3:31:c6:39:3b:55:d5:b8:2e:38:36:c1:
         03:76:97:79:70:ce:0c:39:d7:99:51:04:96:9d:93:6e:ce:f7:
         34:96:7f:49:93:dc:5a:55:56:03:8b:36:68:02:0b:b8:3d:93:
         ed:e9:29:26:6d:1f:bc:6b:6f:b7:a4:83:c8:d3:63:ff:59:ed:
         3e:c7:29:50:f6:8b:56:c5:50:6f:23:7b:d5:9e:09:48:c6:e6:
         f9:0c:b6:20:ae:bb:96:7d:57:96:c0:54:0f:5c:bd:0f:ce:b6:
         5d:6f:a5:d2:8f:bc:c1:8b:76:d1:3e:43:fe:57:e2:e9:43:ff:
         95:6c:91:a0:87:15:02:68:99:e7:35:4e:06:c6:e7:f9:10:bf:
         a8:f8:14:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:52 2026 by rpki-client