Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/db0b227f-9958-4ebb-9f23-65cc24c5c799.roa
File:                     db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (raw, json)
Hash identifier:          fMsGCZeAV0EfH4fL2Iy6rpL0f/UdfkpSZA8/b76QPX0=
Subject key identifier:   1C:F9:F4:6E:E5:97:58:0C:28:0C:4D:32:62:10:F6:B2:EC:E0:5A:86
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       3077AA07A92F963B2ACEC0C2078A6D7DE2ECC065
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/db0b227f-9958-4ebb-9f23-65cc24c5c799.roa
Signing time:             Tue 17 Feb 2026 00:10:08 +0000
ROA not before:           Tue 17 Feb 2026 00:10:08 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     62785
IP address blocks:        172.96.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:77:aa:07:a9:2f:96:3b:2a:ce:c0:c2:07:8a:6d:7d:e2:ec:c0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Feb 17 00:10:08 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=f67cdd2f2052a15632859260a48fe98cf73aacab16a29bac9af1b36f1740707f, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dd:44:92:58:7e:93:ef:86:ea:d4:ad:8a:49:
                    68:71:8c:31:7e:cf:14:a8:b4:07:17:98:25:70:e9:
                    74:3e:c7:2e:50:a4:a5:ae:1a:b4:45:a2:83:39:26:
                    55:84:f0:de:48:74:1e:c7:a7:61:a6:c1:fc:2e:79:
                    44:c3:9e:6a:9e:75:9b:84:e8:e0:d9:03:3a:4a:49:
                    18:eb:25:b2:2a:1e:f7:4d:79:b3:82:a2:51:3b:2b:
                    1b:09:14:ee:51:4c:5e:cf:a7:34:c5:5d:ee:d7:d6:
                    66:fc:93:d4:78:4e:ad:1a:df:b2:f4:7c:c6:52:31:
                    af:25:c5:cb:22:ac:de:1f:71:35:54:7f:1f:8a:12:
                    2d:96:dd:58:ad:98:2c:1f:b2:cc:21:a8:6f:3d:6c:
                    cc:33:0e:60:d8:85:8d:d2:27:8d:35:24:f1:19:f6:
                    14:82:df:06:7c:e4:ee:d5:b5:4f:3e:7c:40:bc:b3:
                    8a:38:3d:a2:c7:2e:d2:ea:06:a1:e2:73:03:b6:6d:
                    c3:15:7d:f7:76:d9:88:a8:6b:5a:33:eb:1b:08:45:
                    2e:63:15:48:b8:e7:ac:31:cb:8c:b0:01:00:95:ce:
                    28:be:72:74:1e:fb:47:bb:35:5e:68:84:20:fa:f5:
                    62:c3:c4:67:ca:f7:8e:5a:06:7f:40:a6:72:5d:d1:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F9:F4:6E:E5:97:58:0C:28:0C:4D:32:62:10:F6:B2:EC:E0:5A:86
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/db0b227f-9958-4ebb-9f23-65cc24c5c799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:b4:e8:c0:f7:d4:a2:89:af:01:1b:2a:12:ef:f2:b3:cc:21:
         24:15:5e:9a:05:59:56:49:48:1f:61:8c:79:df:e7:41:f1:38:
         40:0e:e8:3b:81:e6:0e:41:a9:d0:97:ba:a4:96:79:1d:eb:7d:
         4d:86:51:f7:fe:2f:88:7d:c2:fa:a8:23:08:c5:3e:08:9e:cd:
         52:97:5c:49:9d:d9:5a:0c:3f:19:f8:32:60:92:3f:74:4c:09:
         6b:12:ed:da:b9:06:6e:a4:45:80:c4:f8:1b:e4:94:45:54:1c:
         c7:ea:00:6a:03:0c:12:f8:41:9a:7c:4b:aa:8b:8f:81:71:a7:
         5e:07:6a:e4:2b:2a:e7:d9:89:2c:bb:76:45:34:29:6a:a4:82:
         49:55:a8:0a:5d:2a:8b:63:ac:4f:b1:81:42:28:e7:d3:49:d6:
         14:c9:b3:3b:bc:00:55:2f:23:84:ba:0d:2a:ce:c6:4e:36:67:
         23:02:22:74:24:93:bd:c8:da:10:87:c3:ce:03:50:d4:ee:f8:
         6c:bc:d4:c1:61:87:39:c6:64:d7:03:65:c0:65:02:1f:a6:b2:
         15:6f:fa:a7:67:23:ea:45:bd:8e:15:8f:f0:0c:14:88:8f:49:
         ef:7d:7e:02:62:09:9e:4c:7a:24:d8:f3:75:26:fe:67:91:2b:
         4e:6d:98:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:56 2026 by rpki-client