Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/2f44b632-2720-4ef0-917c-4b1813ed903f.roa
File:                     2f44b632-2720-4ef0-917c-4b1813ed903f.roa (raw, json)
Hash identifier:          wOEvWsFPcwH5ESKFZsqSD1cE8ia+HI7TGV7SJm4VN0g=
Subject key identifier:   53:03:48:15:94:A2:05:A9:0F:AA:6A:CD:FC:C0:95:E6:5F:7F:67:4E
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       2E8D908502EF4740D33AD09983F628F7FA916E87
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/2f44b632-2720-4ef0-917c-4b1813ed903f.roa
Signing time:             Sat 28 Feb 2026 00:50:39 +0000
ROA not before:           Sat 28 Feb 2026 00:50:39 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        96.127.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8d:90:85:02:ef:47:40:d3:3a:d0:99:83:f6:28:f7:fa:91:6e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Feb 28 00:50:39 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=328c13f85cde9ba7df3065eeec99e4164546bc2033ccfeff64ef56a8c3b47654, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:5c:27:47:36:02:b2:65:e7:33:3b:30:d1:
                    cd:f6:5b:ee:99:07:4e:49:8d:55:e7:fe:62:45:d7:
                    0d:5b:fb:47:19:b8:b4:fe:20:8c:94:73:08:f8:b4:
                    8d:94:21:4c:ca:d3:26:17:4e:d6:dc:df:b7:6d:aa:
                    95:62:b8:bf:9b:31:18:eb:45:c8:94:85:c7:ab:4a:
                    7e:6f:58:77:3f:c5:9a:6b:d7:e2:bd:a1:ff:69:45:
                    50:06:91:64:53:aa:69:c2:42:67:a8:ca:0d:c8:a8:
                    81:e2:f3:34:0a:78:c0:b1:a3:77:57:f3:44:46:c3:
                    0e:9b:a8:fe:cc:4c:5d:ec:50:97:8b:5d:eb:4e:0e:
                    f0:dc:08:41:bb:4b:7f:35:b7:f7:44:d0:fa:83:85:
                    54:99:a2:85:b8:aa:5c:f4:6a:05:1f:12:6f:79:31:
                    38:54:be:7a:b2:51:d7:3f:a2:e5:8a:05:d8:08:c0:
                    9a:66:79:01:e5:e2:72:26:34:ea:0b:f4:6a:cb:27:
                    af:85:a2:39:eb:e9:dd:3a:70:c1:f1:62:90:70:10:
                    34:48:c2:01:f4:72:c5:e3:47:40:58:47:dc:fb:fd:
                    db:51:1f:fe:d3:c9:4e:20:07:48:ff:da:66:af:3d:
                    d3:67:ed:38:4b:a5:50:97:06:e5:0e:91:64:df:32:
                    c8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:03:48:15:94:A2:05:A9:0F:AA:6A:CD:FC:C0:95:E6:5F:7F:67:4E
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/2f44b632-2720-4ef0-917c-4b1813ed903f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         20:27:bf:e9:28:f5:e0:aa:2a:12:dc:73:a9:50:df:2f:47:0e:
         64:d2:3b:05:4f:d4:1c:50:63:5e:15:43:86:61:1d:1f:7a:41:
         14:ca:32:eb:7b:b8:8b:aa:96:f4:62:1f:6a:35:9e:be:bd:e1:
         8f:89:b3:84:ac:20:21:3b:e1:a1:6c:06:5e:9e:e0:86:d0:a3:
         ea:70:ec:4a:3b:90:ce:cb:aa:10:f0:07:b7:3b:2c:84:4a:32:
         2d:b0:3d:4f:ac:93:71:5b:db:db:cc:3d:cf:5c:1f:a8:b1:4f:
         04:11:73:84:63:85:1e:46:58:b1:32:44:53:58:c1:bf:c9:de:
         7f:d7:f1:17:94:f1:ca:21:37:03:01:d0:e2:6d:d9:15:08:e4:
         01:95:f7:14:7d:20:28:a5:f5:ae:96:84:d1:73:b3:22:4a:ed:
         ef:f8:45:e0:8b:cd:57:c2:5c:0e:6d:89:0e:8b:1d:c8:28:da:
         c2:a4:45:20:76:13:59:79:96:79:17:c9:91:ed:77:81:1d:6e:
         84:2b:62:72:45:a8:cf:f0:ac:dd:15:a6:18:d8:f0:90:14:c6:
         96:be:04:14:3e:c1:9f:4b:d3:aa:91:5a:18:37:65:5e:6b:91:
         1a:0e:ec:ac:2b:5a:31:5e:ba:13:0a:de:c5:b4:46:5e:92:19:
         1e:c4:3d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:26:20 2026 by rpki-client