Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d258d57d-021e-4cb2-93b0-750fadc6ca66.roa
File:                     d258d57d-021e-4cb2-93b0-750fadc6ca66.roa (raw, json)
Hash identifier:          lOvm7jTqdeQqpeXR//uQyHZQh1Q0gqN3iBjaMvrl3so=
Subject key identifier:   35:CC:3A:93:F9:95:6A:44:7D:FB:EA:F5:5F:71:25:FA:D4:97:00:DC
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       61EF0864FB6C00E231DB9BCB05CCB3EDCDF83009
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d258d57d-021e-4cb2-93b0-750fadc6ca66.roa
Signing time:             Fri 13 Feb 2026 15:00:12 +0000
ROA not before:           Fri 13 Feb 2026 15:00:12 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:611f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ef:08:64:fb:6c:00:e2:31:db:9b:cb:05:cc:b3:ed:cd:f8:30:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 13 15:00:12 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=b37866ba8782024581aae8fe8214a81ea5d74e2b8eeef1686715c110e7b43b5b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:cc:90:e1:21:75:45:62:aa:3d:d0:81:e8:
                    d5:9e:98:65:f8:1c:7e:b1:9d:e1:c1:63:15:ee:88:
                    f4:d2:27:a6:32:27:23:36:15:7b:19:80:f4:b4:f7:
                    e5:a8:62:ad:f4:3c:22:a3:57:4d:52:8b:43:84:08:
                    1a:be:08:85:d3:b4:bd:2e:26:e4:b9:9c:6e:55:d6:
                    d2:65:1c:00:ac:b7:e6:88:8b:47:84:e6:54:1a:b2:
                    7f:3a:13:91:d7:be:c2:32:f0:e9:bf:8c:b6:32:6d:
                    03:53:c0:34:e3:d2:2d:b5:e3:8f:a2:08:4d:f4:6e:
                    bd:80:c7:60:59:32:32:aa:e4:a7:5c:b9:c3:4f:56:
                    90:41:f4:9f:9a:13:ab:a4:23:76:06:d0:b2:54:69:
                    56:cb:2d:75:01:dd:b0:9c:12:50:28:fe:92:50:1d:
                    3a:c5:30:13:93:56:56:37:26:e1:62:6f:57:3d:b6:
                    74:fe:c5:24:b6:bb:6b:07:48:be:4a:fa:c8:43:34:
                    d8:9c:dc:19:05:18:aa:d0:6b:ef:3a:da:ce:8f:7d:
                    a8:61:78:cb:91:8c:dc:14:ff:a3:9b:11:6b:b2:7b:
                    c3:7e:2f:65:26:c5:0f:2e:22:2d:a0:e4:5c:13:e9:
                    d2:4c:e5:8e:79:7e:43:5b:0f:fb:e1:6a:75:03:7a:
                    38:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CC:3A:93:F9:95:6A:44:7D:FB:EA:F5:5F:71:25:FA:D4:97:00:DC
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d258d57d-021e-4cb2-93b0-750fadc6ca66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:611f::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:e0:49:c3:58:e6:17:f1:7d:74:91:dd:28:4f:20:e8:f7:cb:
         f1:d2:5b:39:5b:d4:f6:9b:9b:b3:84:84:2a:c9:7b:28:99:29:
         34:9c:27:ac:53:73:1c:4a:26:05:31:c0:d4:93:62:3f:88:d5:
         58:4e:27:66:cc:84:f7:90:0e:a1:de:d4:31:22:03:d4:72:6a:
         d8:66:71:eb:05:dd:9f:fd:fb:88:26:af:7b:02:f0:2d:4b:86:
         8c:77:13:5b:89:7a:f6:eb:f5:d7:bc:b2:27:e3:45:ef:8a:9b:
         9d:e5:25:d7:0d:ce:12:fb:4a:27:97:52:0b:17:e8:9e:fd:58:
         7d:14:93:13:6b:46:08:08:c6:8b:53:fa:31:30:9a:f4:6c:49:
         0f:3d:ea:9f:ab:46:fe:73:d8:e0:4d:da:0c:2c:47:10:e0:00:
         0e:22:d5:9f:4f:a6:df:85:24:c1:22:e0:d7:4a:4d:d2:c2:c0:
         dd:f5:e1:4b:d3:9a:a1:98:af:3e:38:ec:37:2a:c3:7c:64:7d:
         6e:b6:ba:c1:5d:41:8a:21:3f:ee:ef:a2:c0:10:7c:be:02:c5:
         fb:aa:a3:dd:47:8e:f1:c5:a8:0a:49:38:7c:b5:fe:57:71:f4:
         d9:4f:86:1e:12:8b:c3:41:bb:49:ad:5f:cb:2a:44:3e:4a:43:
         5a:b6:05:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:50 2026 by rpki-client