Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e5130f6a-90a1-43ff-b77c-c445dab7e20b.roa
File:                     e5130f6a-90a1-43ff-b77c-c445dab7e20b.roa (raw, json)
Hash identifier:          jM1sS28yn+1MNUuAwBaw6Z48w0L+E0WawGMW6rsennA=
Subject key identifier:   30:24:62:E3:BD:B2:A1:E5:6E:3E:86:53:83:17:E2:21:11:1D:76:12
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       512DD922F2BC7B8ECEC76F203140DBB5788F85A1
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e5130f6a-90a1-43ff-b77c-c445dab7e20b.roa
Signing time:             Tue 17 Feb 2026 19:06:37 +0000
ROA not before:           Tue 17 Feb 2026 19:06:37 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2600:f0f0:400::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2d:d9:22:f2:bc:7b:8e:ce:c7:6f:20:31:40:db:b5:78:8f:85:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 17 19:06:37 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=c63a440a0a4d2ff503a8f15a2f00034b75ad2a3e57f90f9a912c7a3acb0a116b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:ae:d2:0c:a4:a9:70:80:76:68:4f:60:d0:
                    d6:03:23:ab:71:17:0d:6d:14:98:f5:36:64:3e:a7:
                    36:94:d6:7f:f1:11:d5:36:f7:ac:ff:3a:c8:06:58:
                    05:73:e1:67:5b:31:5f:e2:a3:88:a4:53:3a:c5:1b:
                    3c:76:50:9e:d2:ce:b5:44:3c:48:91:0b:d7:dd:1c:
                    51:78:2c:d0:6f:2c:0a:35:b3:9d:2b:71:45:96:45:
                    e9:d5:00:fa:26:59:55:ea:9b:d0:af:ef:74:17:bd:
                    34:be:d7:e9:be:28:48:74:bd:34:10:a1:ce:f7:6f:
                    a8:de:f3:a5:23:90:74:56:e3:83:65:28:33:26:a2:
                    b9:a3:b7:c6:67:85:88:6e:0e:cd:8c:82:6d:98:68:
                    fd:4d:7d:f3:7e:9f:71:96:a8:b7:b4:18:d7:c4:d9:
                    e4:57:10:40:c2:93:c6:93:46:84:fc:b4:a2:ed:3d:
                    95:a7:93:a0:12:81:63:94:44:61:f0:85:29:cd:27:
                    5d:38:9c:59:16:31:7b:c7:9c:d9:a9:ca:f5:03:5b:
                    ac:13:b2:41:d6:75:92:c2:bd:6e:c4:c2:69:fc:28:
                    72:cd:c9:e2:53:f2:dd:28:02:af:1d:7e:0b:f0:2e:
                    ae:5a:7d:37:79:3d:1e:5c:4c:c0:5f:31:94:20:7f:
                    5a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:24:62:E3:BD:B2:A1:E5:6E:3E:86:53:83:17:E2:21:11:1D:76:12
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e5130f6a-90a1-43ff-b77c-c445dab7e20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:400::/47

    Signature Algorithm: sha256WithRSAEncryption
         4d:97:a0:23:58:70:41:4a:d3:90:7a:2a:24:70:e6:9c:a1:47:
         33:02:90:43:58:f3:32:aa:f3:b9:ea:12:87:17:5c:fe:38:4a:
         ae:07:c1:99:5c:fd:87:90:5d:ad:ce:60:49:ab:d0:74:01:76:
         c8:58:12:c2:58:e9:57:96:ea:d5:0d:09:92:6c:bb:8a:4d:3d:
         d1:f2:8d:fa:da:74:db:56:69:4a:45:97:0d:fb:78:32:61:09:
         f4:ea:b6:ae:1a:0e:d8:97:18:af:3c:af:ae:ec:f0:2d:14:71:
         2e:ac:91:35:96:f8:fa:d8:ef:e8:12:a9:ad:2f:a7:60:52:2d:
         32:53:11:be:e9:af:18:3f:a5:ee:a3:7e:e3:ca:4c:7f:e2:b1:
         11:b2:2b:5f:91:40:74:ae:71:ab:22:c0:c8:5c:21:73:fe:78:
         cb:42:83:cf:ee:4b:a5:70:7b:a8:82:0b:20:8f:1e:6b:18:5f:
         dd:27:d5:a8:f9:72:fd:b4:bb:99:f5:a7:9f:48:d2:29:62:93:
         93:e3:54:12:0d:05:40:5d:7a:b7:41:ff:40:ab:fd:70:af:0c:
         71:11:0f:ad:3c:52:0a:b4:48:aa:21:ad:a1:93:5a:17:4b:c7:
         54:c9:44:49:af:74:4e:0e:1f:3c:25:13:f6:47:ae:11:68:74:
         84:8b:d4:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:51 2026 by rpki-client