Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa
File:                     b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa (raw, json)
Hash identifier:          NKBzr1R+jnY9CzMEWymlvj99M0qVvrlUqvKh8kKztC8=
Subject key identifier:   56:A8:9B:23:D6:7D:CE:CB:EF:77:CC:08:50:0D:B6:FC:55:6D:6E:F3
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       7D25F13C55BC6182F5AC4AA7D1024F222C867CB1
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa
Signing time:             Sat 28 Feb 2026 00:50:40 +0000
ROA not before:           Sat 28 Feb 2026 00:50:40 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        96.127.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:25:f1:3c:55:bc:61:82:f5:ac:4a:a7:d1:02:4f:22:2c:86:7c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Feb 28 00:50:40 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=cd2059e91da1bda22bd759c90e265f4806c53e6b624909d2d35cae9d1a1f5c06, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:97:59:3e:af:69:fc:0c:19:21:89:49:a0:c8:
                    38:61:8a:30:55:c5:f4:e3:63:49:f6:05:a2:27:2d:
                    3c:1d:2b:c0:9e:3d:71:6d:6b:a7:76:b1:d3:6e:5a:
                    c3:54:76:33:04:e2:3d:51:9a:04:c6:fe:18:38:1a:
                    40:9f:16:1b:8e:ec:22:15:f5:bd:19:cd:ea:29:50:
                    ae:75:c9:06:e5:6b:17:cd:21:85:ae:8e:1a:14:02:
                    e0:0e:fb:f4:72:64:53:59:67:48:2b:34:d9:8b:e5:
                    30:71:b6:76:04:78:09:72:05:33:6b:94:79:87:d8:
                    d7:15:fd:86:84:c8:82:be:a6:03:16:a1:6b:aa:c4:
                    f7:9f:51:bf:52:8f:e0:6b:de:4f:08:8b:fb:12:1a:
                    04:e9:c4:02:74:28:8a:a5:6f:47:fa:37:08:a0:78:
                    0c:32:79:cd:43:fc:9f:7b:7f:fe:23:42:3d:f0:a8:
                    50:44:a1:e9:02:c0:f0:5f:34:d7:31:c9:cd:8c:f2:
                    eb:8d:11:f9:7e:c9:95:fb:3c:af:16:47:a7:c6:91:
                    c1:b0:ba:7d:18:b6:66:9a:28:49:85:75:b7:a0:34:
                    dd:39:c4:15:87:8a:21:1b:c5:4b:1d:c7:db:e5:e4:
                    34:2a:8d:eb:55:62:a5:6e:25:15:43:c3:df:11:3d:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A8:9B:23:D6:7D:CE:CB:EF:77:CC:08:50:0D:B6:FC:55:6D:6E:F3
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:7e:63:c7:f5:ac:44:2c:51:0c:39:9d:ab:35:19:dc:1d:aa:
         d8:0e:fa:41:07:dc:a9:7f:d8:dd:97:4f:0c:92:b1:58:c3:ce:
         45:8d:f1:f5:ce:c9:d5:f5:c2:ec:6a:df:8b:df:5f:29:54:5b:
         ec:45:3f:ec:65:9f:a1:e2:36:ee:ad:5a:eb:76:ed:f6:7b:30:
         1b:d8:36:c7:08:55:61:0e:4c:f9:b7:b8:2c:22:cd:76:a9:f7:
         f0:aa:21:14:af:09:23:50:cf:c6:75:e2:04:90:5b:17:39:bb:
         0a:24:9d:64:b7:42:51:2c:57:37:eb:59:a2:bf:ec:5e:2a:ea:
         bb:87:e8:3d:d1:2b:8b:54:7b:ba:e3:4a:65:3f:e8:cb:1c:2a:
         3a:d5:f8:d7:7e:66:4d:61:ec:b5:fe:09:27:0e:26:82:a6:99:
         50:22:46:ee:98:6c:81:0f:32:17:07:a1:91:34:7c:c6:e0:c2:
         0e:c8:61:5f:18:2f:e3:92:84:bc:83:bc:9a:94:45:01:89:40:
         e5:51:c2:81:02:e8:d5:14:00:78:87:3f:49:67:f8:b8:f2:7f:
         e8:1b:ed:76:aa:9a:af:ed:14:33:8c:4c:b3:a9:3a:94:09:b1:
         21:0a:b3:c9:45:2a:53:9e:e6:49:8d:b1:a7:1a:19:06:2b:7b:
         3e:64:0d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:07 2026 by rpki-client