Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa
File:                     639621c0-050e-4e66-b3a2-1dd129de2c24.roa (raw, json)
Hash identifier:          byTDvysJrvkjEY7W1JIJyNoXZMYX9FEyuOJMSfbkt/E=
Subject key identifier:   9A:39:FD:D9:55:44:19:BA:13:D4:E3:9A:90:12:58:37:03:75:F2:37
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       7B8B619AE06885350A7E1C1591FB5F8788715BDC
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa
Signing time:             Wed 11 Feb 2026 00:30:29 +0000
ROA not before:           Wed 11 Feb 2026 00:30:29 +0000
ROA not after:            Tue 12 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8b:61:9a:e0:68:85:35:0a:7e:1c:15:91:fb:5f:87:88:71:5b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Feb 11 00:30:29 2026 GMT
            Not After : May 12 23:59:59 2026 GMT
        Subject: serialNumber=2ed84dce639ec32daa56ff356a18ac5a7c1dc5243147ce7057d503bc2e41d49e, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:37:79:8b:c1:02:4b:9a:46:2c:cc:bf:e3:bf:
                    09:28:c7:a1:02:50:72:fa:ec:67:2b:44:87:97:4d:
                    92:3e:7a:4d:f4:a6:9f:41:2f:7a:02:cd:d1:6d:15:
                    93:55:37:e0:c7:d0:39:24:59:19:18:66:4a:a9:50:
                    aa:89:b4:45:2a:97:f0:33:da:bd:52:e0:68:0e:fa:
                    78:c3:13:da:f5:84:72:ff:2a:8f:61:6c:7f:37:45:
                    b8:4a:5c:35:d1:f1:6e:f7:7d:b2:a3:ee:0f:6b:59:
                    c9:69:68:db:a5:56:1f:63:74:e2:26:47:56:c5:a8:
                    28:c9:72:56:8e:4b:00:05:0f:e1:18:45:08:4b:62:
                    ab:5f:e9:08:52:8c:30:da:48:8c:80:ef:3d:f8:61:
                    9c:17:c0:69:19:fc:eb:d8:81:7c:b7:33:db:39:83:
                    91:17:4e:06:f2:8a:10:5f:5c:90:85:21:b6:c2:1f:
                    85:ef:58:ec:9b:3c:3b:40:68:a3:11:fb:3e:d6:6e:
                    4e:b6:85:0a:12:30:2f:08:12:bd:20:4a:56:89:90:
                    fe:36:ca:0e:0f:84:4b:c0:d6:55:fa:d5:92:04:79:
                    cb:fc:bf:f9:07:b7:08:1b:50:72:01:ef:12:c5:5c:
                    f0:d5:b1:90:99:a6:59:2b:6d:5e:81:8d:49:6d:62:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:39:FD:D9:55:44:19:BA:13:D4:E3:9A:90:12:58:37:03:75:F2:37
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:bd:03:4d:ef:ea:f8:aa:39:a2:fa:ab:63:9a:50:96:58:b8:
         5e:20:9f:b3:52:f8:03:bd:91:1e:3e:52:a4:43:23:4d:03:d2:
         83:bc:07:48:91:8b:af:82:e9:d0:c3:cb:4c:ff:28:6e:a3:28:
         1c:f9:61:9a:50:99:d6:88:6a:c4:6c:49:59:0f:a9:cd:fc:80:
         70:7d:b4:d0:82:9c:2d:38:81:b9:2a:35:3c:5f:80:1a:5c:fb:
         53:4b:08:dc:c5:f8:33:63:51:1d:b0:e7:a9:c2:d6:2d:fc:89:
         78:61:23:3a:3a:40:ee:6f:01:e3:a9:26:c9:85:e9:e4:4d:73:
         d4:e0:11:56:1f:d5:d9:1c:47:37:e1:20:70:6b:df:7e:04:81:
         a5:db:53:46:93:1e:d8:fa:90:ef:54:26:86:02:f9:46:22:f5:
         3f:69:6a:a6:ea:fc:95:9f:da:46:63:f5:30:58:2e:31:3c:2e:
         cc:30:1f:45:1c:3e:b2:cb:65:54:d7:60:e8:bf:75:05:a8:68:
         ea:13:ce:8c:e0:ea:79:39:d0:e9:bf:d9:c3:6a:cf:ea:04:58:
         71:59:ef:47:8a:fa:9d:0c:32:e4:7a:1b:28:de:cf:39:07:e8:
         db:8e:31:1f:de:97:0e:b6:2b:84:83:6a:8e:69:76:c0:fc:7b:
         c3:ac:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:27:25 2026 by rpki-client