Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc882972-2da5-4c53-a9e6-a34bfb909ce0.roa
File:                     fc882972-2da5-4c53-a9e6-a34bfb909ce0.roa (raw, json)
Hash identifier:          eJo7eSvZi6oLN3JsCylQVhGUeB+4DT+OdWXFbjmKqjY=
Subject key identifier:   A4:E2:11:35:06:48:FD:77:4B:65:85:AB:DB:75:FD:1A:2F:34:3F:6C
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       088B15DDDFA42097996435AE153146651443DB4F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc882972-2da5-4c53-a9e6-a34bfb909ce0.roa
Signing time:             Wed 18 Feb 2026 21:06:55 +0000
ROA not before:           Wed 18 Feb 2026 21:06:55 +0000
ROA not after:            Tue 19 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f3:f000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8b:15:dd:df:a4:20:97:99:64:35:ae:15:31:46:65:14:43:db:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Feb 18 21:06:55 2026 GMT
            Not After : May 19 23:59:59 2026 GMT
        Subject: serialNumber=f3e27f2b313e10bd22cef7ad8006b2f5802edaf25bbadce71141e15aa77a3c42, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:df:9b:48:8e:e3:49:ce:ca:fd:e2:08:47:
                    be:34:da:ea:32:3a:b5:f7:3d:e4:36:70:19:af:f1:
                    4c:cc:74:bb:82:ad:c6:1e:ac:7f:49:97:de:8b:b4:
                    1c:a6:13:5f:1f:d5:cd:6e:f0:42:ab:eb:88:33:56:
                    c2:6a:14:3a:4e:4a:89:aa:3a:16:58:b5:b8:e1:e1:
                    dd:ab:cf:73:33:f5:57:6e:9b:31:33:fa:8f:12:1c:
                    cb:84:94:ae:a4:90:fd:9a:40:0d:e0:48:f0:98:8e:
                    d5:de:87:d8:5b:65:b3:98:d5:80:ec:b3:37:d9:96:
                    f8:9c:0f:85:6e:9a:c2:6e:69:ab:76:43:58:8c:b1:
                    45:08:47:c7:81:16:bb:5a:32:28:87:89:0d:e3:c0:
                    11:ad:9b:39:f9:08:bc:37:f8:5f:e7:cb:0f:6c:1b:
                    ce:a0:03:00:9a:c6:c7:5b:f9:d4:06:9f:37:9b:31:
                    ec:19:38:cb:a8:d5:44:96:d8:58:eb:c4:a1:3a:a7:
                    91:b1:a6:30:ab:a7:8e:f0:c1:d0:5f:04:4f:04:ff:
                    2e:93:3a:3f:3a:d9:46:25:3a:12:87:52:b6:65:f9:
                    77:8b:e4:4c:78:e0:2c:11:b8:fe:68:c4:79:b6:ab:
                    89:28:33:a9:0b:da:14:f9:b2:2e:5e:e0:02:c4:be:
                    5b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E2:11:35:06:48:FD:77:4B:65:85:AB:DB:75:FD:1A:2F:34:3F:6C
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc882972-2da5-4c53-a9e6-a34bfb909ce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f3:f000::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:72:37:4e:dd:28:99:3b:30:b4:e5:24:85:2a:cb:b2:3b:ba:
         51:4c:5c:89:c0:ba:7d:5f:47:42:0b:4a:77:c7:83:71:af:c8:
         40:38:50:0e:e2:df:55:30:b4:13:fd:85:c9:df:8e:dc:50:8a:
         1b:7b:a0:de:99:82:c7:9b:89:15:9c:61:6b:c7:8c:93:3a:1e:
         ab:39:8a:f4:54:27:e7:22:a1:81:39:bd:b5:97:fd:e1:52:3c:
         90:d3:3a:62:78:68:68:8b:c3:03:5a:23:98:da:af:6e:32:cb:
         f1:34:07:fe:b2:37:04:af:64:b2:82:5d:2b:df:0c:5d:31:58:
         20:26:21:5b:16:ae:53:0f:9a:79:66:f9:71:1d:33:29:f8:ac:
         05:7c:c8:03:a7:1e:ea:69:d4:00:10:03:9d:0f:46:8d:0d:90:
         62:d4:55:20:87:fa:2e:0d:e0:5d:d3:ae:ef:a6:81:95:1b:ac:
         e7:4f:36:c8:b4:48:10:69:96:18:57:2c:12:bf:97:e5:6f:77:
         f6:1f:6e:e2:f9:fd:2f:76:16:10:53:ab:d5:9b:cc:f2:f4:a0:
         42:3f:c6:0a:61:42:39:5e:c5:ec:9b:5b:86:0e:ed:15:ab:c0:
         79:47:21:7a:16:55:68:c4:b7:c7:84:5a:a6:bd:25:6d:ed:44:
         f8:67:29:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:50 2026 by rpki-client