Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/5ed51049-d347-4dd0-bf4f-e1cb4adc80ca.roa
File:                     5ed51049-d347-4dd0-bf4f-e1cb4adc80ca.roa (raw, json)
Hash identifier:          TURIl/LpxVlTEPlrsVNuiYyMtubEcSJ+fLZQnluMXW8=
Subject key identifier:   CE:96:68:7B:15:59:DA:93:58:AB:46:23:4C:5B:FE:AB:D0:5B:C4:7B
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       13620C80B38F1AAC71C6C380AB8C4EA206ED3A49
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/5ed51049-d347-4dd0-bf4f-e1cb4adc80ca.roa
Signing time:             Sat 28 Feb 2026 00:50:07 +0000
ROA not before:           Sat 28 Feb 2026 00:50:07 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        96.127.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:62:0c:80:b3:8f:1a:ac:71:c6:c3:80:ab:8c:4e:a2:06:ed:3a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Feb 28 00:50:07 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=006274d303ecbc80e10d0922970e4f6aa45c1ed6c64ca261accb798efffc5dd3, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:ba:4a:4b:c7:e6:c2:dd:97:17:ee:ae:8c:
                    3e:55:99:17:d5:8d:3b:94:2f:d6:6a:3f:cd:f8:2a:
                    5f:96:c3:da:a5:86:3a:a7:06:39:f3:1b:1e:33:fb:
                    d4:1f:16:46:d8:76:c3:1a:62:c3:58:d9:01:ca:43:
                    8a:9c:d1:13:3c:c9:9d:ee:5f:cd:67:8f:4a:49:a1:
                    8d:3a:fc:4c:a4:d6:c7:6a:7b:c0:5b:1e:81:84:e2:
                    cb:96:18:ac:78:96:e9:77:8c:9f:9f:0c:04:ba:62:
                    56:39:77:54:40:6e:1a:12:77:92:5c:b3:46:f2:82:
                    4b:c9:01:cc:28:14:27:cc:16:67:ea:b9:3c:8e:78:
                    3c:85:1d:89:ed:99:a8:e0:30:8c:51:72:39:a7:92:
                    e9:85:60:5e:95:e5:76:44:75:09:f5:b9:17:6a:c1:
                    bd:e6:a6:ea:35:e0:f9:1e:76:94:1f:dd:3b:b7:85:
                    2e:9e:35:54:75:7c:92:a2:bb:55:61:ef:31:1e:4a:
                    5c:3c:af:21:53:26:5e:cc:1c:df:ed:1b:1c:85:64:
                    d9:2d:57:49:16:0f:60:f0:8f:34:43:23:34:df:46:
                    d5:b3:46:6f:85:24:d4:02:b2:c0:4f:e9:43:b4:f8:
                    4c:f6:20:78:52:fa:a4:ef:18:e8:c1:f2:2e:13:1b:
                    4b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:96:68:7B:15:59:DA:93:58:AB:46:23:4C:5B:FE:AB:D0:5B:C4:7B
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/5ed51049-d347-4dd0-bf4f-e1cb4adc80ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         77:5a:0c:4a:78:56:3e:78:53:f3:1e:f7:b0:c3:c9:1d:94:72:
         2e:13:b7:91:c3:a1:d2:48:62:38:46:d0:9e:47:f0:c9:45:ed:
         89:6b:44:aa:8d:ac:54:70:3a:e2:83:86:fd:8f:99:b6:bd:90:
         a2:39:5a:cb:84:01:4d:d4:3d:78:56:f1:56:86:3c:55:8b:5d:
         e1:49:89:2f:7c:06:f3:70:7a:95:a3:13:41:77:65:ac:4e:7d:
         b4:ac:cc:1e:9d:f6:95:5f:ef:6f:d9:fc:8c:71:3d:67:94:b7:
         e9:a5:0b:66:d0:3e:50:ee:66:c7:a8:3c:2e:f6:61:e8:b7:d3:
         4b:d1:49:0c:35:53:e6:d6:12:27:e6:10:92:d4:e1:76:80:a0:
         a8:f7:ba:9e:5a:51:9a:5a:79:bc:cf:11:45:87:3b:1e:64:23:
         95:be:0a:4b:4b:bd:92:6c:69:87:c8:d3:cc:3a:9d:84:ff:fe:
         1b:92:3c:6f:17:d5:66:00:0c:f7:a7:25:dd:e2:ac:df:ba:08:
         1e:67:60:a7:6d:7b:f7:73:41:ac:f5:17:aa:05:e5:2f:c4:72:
         f1:44:15:cc:73:6d:a4:bb:b6:68:7e:f0:c4:85:1a:9d:4b:74:
         6f:ec:60:1d:63:84:f5:b6:22:ec:d9:d2:04:8c:cc:24:78:34:
         fa:fc:75:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:46:16 2026 by rpki-client