Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa
File:                     a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa (raw, json)
Hash identifier:          CFO4FvxDyMVzoR+7jip6SJp2XDUiHnWQOh2Y5I13ezo=
Subject key identifier:   6A:3A:ED:17:9C:34:A2:C5:06:AB:CE:8F:E6:18:BC:66:8E:7D:B0:8A
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       04BEDBCC23258EC83209F9BC3F0B8BF5902C7A2F
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa
Signing time:             Tue 19 May 2026 00:50:09 +0000
ROA not before:           Tue 19 May 2026 00:50:09 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        96.127.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:be:db:cc:23:25:8e:c8:32:09:f9:bc:3f:0b:8b:f5:90:2c:7a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: May 19 00:50:09 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=565f7c4fa2cfd83b76cd88daecae4d5f589310608e102a0a02975921c9d7db67, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:72:57:c6:8d:db:e4:b1:d9:06:00:c3:1e:
                    1d:51:0d:d3:10:d9:54:87:74:25:58:c1:75:ed:09:
                    85:14:b7:26:17:71:1b:4e:55:ac:d1:a2:2e:7c:df:
                    80:9f:cd:e9:d1:a7:4a:e0:3f:49:af:6b:4b:f3:7d:
                    83:a8:b4:c5:2b:37:c1:a1:5a:94:f7:92:15:96:0e:
                    80:c3:a0:6d:a9:6f:08:38:ca:81:ae:48:b7:d1:e9:
                    70:6b:0a:13:37:bf:79:b7:dd:5e:7a:ed:a5:19:7b:
                    8a:ae:86:c1:3e:14:d4:6b:bc:10:62:92:c1:a6:0b:
                    ee:3f:b5:5c:ac:8c:3a:12:ac:d7:ee:46:80:82:9d:
                    ae:e4:9e:c8:4b:76:af:c5:e0:21:92:32:27:31:34:
                    6f:50:40:b7:96:a3:69:a2:ca:9b:08:70:f6:45:6e:
                    7d:e8:81:35:3b:30:cd:b0:0d:e3:40:8c:b7:3c:7a:
                    57:0c:74:c7:cf:1a:55:61:a4:d1:b1:73:37:94:48:
                    c8:ed:4a:5d:6b:22:8c:42:ab:12:6a:61:ce:a9:b1:
                    ef:f6:ce:63:2e:54:77:23:21:10:ba:7c:55:cc:db:
                    af:5c:cf:1c:68:e8:01:d1:df:75:91:68:c8:67:c9:
                    1c:4c:ca:6b:1d:9e:d4:bd:9e:b7:ed:4d:ca:6b:35:
                    81:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3A:ED:17:9C:34:A2:C5:06:AB:CE:8F:E6:18:BC:66:8E:7D:B0:8A
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:58:aa:60:e5:25:2d:bd:7f:0e:a7:38:5b:5d:a2:2f:f7:7c:
         8a:dc:00:e6:d8:4e:aa:e5:6d:4e:45:81:36:40:ed:89:f5:5f:
         76:e3:4d:34:b2:ef:86:f5:27:83:87:22:81:5e:2f:80:da:af:
         7d:67:dd:72:27:c8:59:44:43:4a:9a:b7:88:16:41:03:3f:13:
         7f:05:c7:4f:c3:78:9d:24:d2:b4:75:bc:68:96:73:53:f8:c7:
         34:3b:11:d2:6b:fa:ae:a3:3e:99:1a:ff:0f:91:ea:2a:02:16:
         24:90:42:cd:a1:ed:07:94:2d:36:51:17:5e:5e:c1:5b:bf:71:
         a4:52:95:4f:e1:f6:c7:e9:fe:df:6c:0b:fe:b1:10:af:09:8a:
         52:bf:ad:01:04:4c:51:24:c9:47:5c:e3:19:e4:d6:ea:ea:3f:
         40:70:6e:e5:f1:e5:7f:ca:7b:94:33:28:4c:56:87:fe:2a:42:
         33:b9:1c:e3:18:10:dc:f6:de:8c:d3:00:01:6c:e2:a7:0f:1a:
         d5:73:4a:95:e2:97:fd:ea:b2:5f:64:9a:cd:1b:b9:e0:2e:71:
         9e:36:de:07:a7:31:52:bc:ef:95:62:0f:7f:6c:59:4c:b8:a3:
         91:df:5a:50:82:3c:a5:20:07:d9:9a:50:40:83:bf:8b:cd:c6:
         d9:33:3c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 13:52:49 2026 by rpki-client