Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5cf04103-6f0b-4795-a89d-5b7d9bf11f72.roa
File:                     5cf04103-6f0b-4795-a89d-5b7d9bf11f72.roa (raw, json)
Hash identifier:          f+lXSKAaQ0sEDTmgytKUWaRMNPubPeEKEZteaKsUbBI=
Subject key identifier:   1D:85:37:FD:FC:93:83:50:81:A7:D3:D4:57:F8:E4:A3:A4:10:18:8F
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       13AAD8F1B853BFA59B8AA10B79945D06C5FA49C5
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5cf04103-6f0b-4795-a89d-5b7d9bf11f72.roa
Signing time:             Mon 16 Feb 2026 00:00:09 +0000
ROA not before:           Mon 16 Feb 2026 00:00:09 +0000
ROA not after:            Sun 17 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.111.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:aa:d8:f1:b8:53:bf:a5:9b:8a:a1:0b:79:94:5d:06:c5:fa:49:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Feb 16 00:00:09 2026 GMT
            Not After : May 17 23:59:59 2026 GMT
        Subject: serialNumber=8d9262a62236e818d02d3501294e4bb49a2a36484485c9da901a6dd99cd34e1c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:87:29:e3:2a:6f:97:d8:1d:ee:e2:27:ef:21:
                    17:6c:a5:8e:59:eb:bf:0d:f9:7b:a4:49:5a:ce:ab:
                    cd:55:ab:e6:c8:56:83:7b:90:1b:36:c1:5b:17:53:
                    c0:11:06:23:f1:a7:bf:e1:61:06:d0:23:06:cc:d1:
                    4c:82:4c:2f:65:b6:9d:40:19:21:b5:2c:5b:f9:7e:
                    6e:3f:b9:89:5b:53:3b:d0:c4:f5:ba:33:10:9a:c3:
                    bd:8c:5b:20:87:9a:ca:14:d2:9a:6d:22:25:66:a1:
                    e3:e2:5d:25:43:f2:a8:36:58:a7:25:0e:50:2c:97:
                    8c:80:a9:45:84:fc:fc:43:fd:3c:6a:e6:07:fb:e7:
                    98:fb:4a:a1:3f:f8:46:31:af:30:8f:3f:af:c1:a3:
                    e2:e0:91:b6:66:93:96:c2:f1:aa:19:e8:e5:db:35:
                    c9:9c:89:6f:1f:71:e9:75:9b:ec:cb:4e:3f:60:e2:
                    6d:5d:4a:8c:e5:bd:35:18:3e:6e:bc:71:b8:20:07:
                    15:39:8b:6d:c0:5d:3f:f6:9d:81:06:4e:5b:ce:83:
                    f9:31:50:58:f8:74:9f:20:b0:5d:1e:7c:f7:85:21:
                    47:0d:9e:c4:26:97:65:0d:f6:fe:d3:10:c4:54:0c:
                    46:5a:5f:b9:c8:dc:f7:19:c3:2d:5c:1f:e9:aa:9c:
                    2c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:85:37:FD:FC:93:83:50:81:A7:D3:D4:57:F8:E4:A3:A4:10:18:8F
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5cf04103-6f0b-4795-a89d-5b7d9bf11f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.111.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:c8:58:19:70:ce:72:86:fe:bc:03:cf:9c:9f:c9:1a:b0:f8:
         4e:36:18:68:71:a7:28:7d:25:2d:75:c9:4f:cc:42:4c:13:a4:
         4b:6b:4f:21:8f:29:8c:c0:1e:b0:88:03:c0:20:36:1a:cd:42:
         c9:19:63:17:a2:fc:c5:7a:b7:06:11:99:60:c8:9d:90:fc:7d:
         59:ed:bd:3d:94:3d:d9:7e:63:87:c7:5f:8c:89:a6:a1:c6:aa:
         bd:e3:1b:61:ea:7f:38:f3:53:b2:92:2f:8a:a2:d1:9c:80:64:
         48:0e:70:3c:a9:03:01:f1:77:2f:65:a1:5c:03:d9:13:68:65:
         1f:d1:e2:51:f0:75:99:94:0e:94:77:db:6d:52:f4:8d:29:48:
         9d:38:77:65:d3:d2:dc:ab:c8:e6:3e:e3:3b:39:96:ac:13:32:
         98:4b:a6:eb:3f:62:79:c2:c0:9d:89:66:ee:bc:c4:11:c6:22:
         39:d6:24:3a:49:e9:cb:a1:15:bc:cd:89:75:07:0d:e4:00:dd:
         d7:f6:40:bf:42:18:4e:01:44:f5:32:bd:61:10:8e:d5:1b:b6:
         6c:c3:08:62:f8:61:1c:11:e9:7f:f4:0d:a2:db:08:f6:b7:ae:
         46:55:a3:1f:79:6f:78:3d:bc:28:10:4a:4d:4a:39:55:4f:64:
         5d:71:2c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:52:02 2026 by rpki-client