Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2c3586-4c23-4045-b98b-d28000a3bd55.roa
File:                     ee2c3586-4c23-4045-b98b-d28000a3bd55.roa (raw, json)
Hash identifier:          pGn7m40cC3SATkLc5TL59VS7L4lOc7/FNWLiNOE4kdE=
Subject key identifier:   C2:4E:57:22:7E:9F:5A:68:FB:A3:4B:B5:FA:F2:E2:ED:B0:7F:16:B4
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       3DB2C5C31A1B8BA665368FDCA0EEAD65FA74FD08
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2c3586-4c23-4045-b98b-d28000a3bd55.roa
Signing time:             Fri 13 Feb 2026 15:10:56 +0000
ROA not before:           Fri 13 Feb 2026 15:10:56 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:f0f0:5503::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:b2:c5:c3:1a:1b:8b:a6:65:36:8f:dc:a0:ee:ad:65:fa:74:fd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 13 15:10:56 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=3c2211e8f6aac640129c542fe16e06e17d0cfe8518ba6900c4cd03743dd513a1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:84:50:76:ea:45:e8:9f:d9:05:6e:05:4e:
                    c0:32:f0:c8:cf:97:d5:4b:bc:5c:17:51:84:b1:24:
                    40:1d:03:14:2e:aa:6a:d0:b7:2f:52:40:02:d1:54:
                    ef:69:b0:33:b4:e7:cb:fc:7f:27:bf:5b:97:69:7f:
                    28:17:8d:25:fb:05:0e:6c:8f:17:d2:00:ee:30:eb:
                    82:d6:e2:ed:d3:88:e8:de:39:3b:fb:a3:9a:59:33:
                    90:f4:d6:d8:85:22:61:89:92:d1:64:6c:c8:00:37:
                    03:e4:6a:2a:8b:e8:90:22:ac:c0:89:3b:42:9e:2f:
                    01:5c:46:e6:46:97:48:3c:3c:62:f9:fb:49:3b:20:
                    0b:9e:c0:62:21:e6:d0:e9:ce:82:a9:10:5c:cf:06:
                    a2:ab:f4:f4:12:2c:dc:dc:1d:3f:a8:f2:16:94:23:
                    8d:bb:bf:0e:00:bf:a2:8e:01:5a:5e:1b:65:47:24:
                    96:17:4a:15:24:34:66:5c:4b:4a:20:64:37:92:18:
                    5b:ec:22:db:6e:69:19:07:1a:be:a8:f7:37:7a:63:
                    a8:a4:53:19:ea:3f:93:8b:6d:28:6a:d8:40:a1:81:
                    44:f7:7b:12:26:7d:da:39:07:23:a6:7a:27:3f:c8:
                    f9:21:e4:35:1b:ee:07:d4:e3:bb:82:7e:64:b8:a3:
                    bf:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4E:57:22:7E:9F:5A:68:FB:A3:4B:B5:FA:F2:E2:ED:B0:7F:16:B4
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ee2c3586-4c23-4045-b98b-d28000a3bd55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:5503::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:60:ef:48:82:d4:aa:67:4e:f4:7f:76:96:95:b2:46:5a:
         f2:05:97:cb:a3:8c:8a:07:ba:b6:9a:47:0e:a5:31:a0:59:a1:
         76:81:b1:a3:5c:ab:8e:44:55:a6:f1:c7:da:00:bd:e6:2d:5f:
         a9:ff:17:09:94:ff:4f:85:46:e0:5c:ad:21:d2:fd:17:57:d4:
         b4:30:fb:45:6d:ab:a6:09:39:b0:be:95:8e:be:7d:e6:3c:9e:
         51:8a:80:fe:76:2c:28:24:b6:0c:f9:82:75:4b:75:e8:ff:2f:
         37:e2:42:8f:5f:4c:f1:71:4c:4e:e2:54:e4:0c:9f:64:e0:34:
         f3:df:55:48:fd:95:79:6f:1f:29:3b:86:1e:f8:33:d4:c7:38:
         ee:0c:ae:10:47:71:e3:02:47:62:96:a0:b1:f1:59:8d:0a:15:
         3b:e5:a4:f4:54:5d:d3:76:26:cd:99:53:2a:52:a5:2c:c7:72:
         d5:ae:5b:fe:6f:41:f5:53:d8:cd:54:f7:06:13:c0:a8:6a:08:
         2d:76:55:9a:64:61:46:f0:7f:b7:79:2b:53:49:62:3e:19:2d:
         ab:61:82:8f:97:2e:a6:25:c7:c2:10:01:c4:b1:86:e7:aa:fe:
         31:73:46:e6:68:07:e5:92:bf:d8:7c:bc:9e:0a:89:e5:a6:2a:
         12:fb:08:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:48 2026 by rpki-client