Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/978d02aa-60d3-4d9d-a519-826716493d74.roa
File:                     978d02aa-60d3-4d9d-a519-826716493d74.roa (raw, json)
Hash identifier:          hcdCMlR8a2eK+7IHsdXI/l8QgLABxuNgyrF4vZ7T5s4=
Subject key identifier:   99:01:EA:4D:FB:51:8F:84:68:B6:AB:3C:2B:79:01:74:8B:C5:83:B8
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       5A819D7681E2CE80CF7CD8577E4D4E0718F53310
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/978d02aa-60d3-4d9d-a519-826716493d74.roa
Signing time:             Mon 16 Feb 2026 00:00:08 +0000
ROA not before:           Mon 16 Feb 2026 00:00:08 +0000
ROA not after:            Sun 17 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2631::/24 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:81:9d:76:81:e2:ce:80:cf:7c:d8:57:7e:4d:4e:07:18:f5:33:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Feb 16 00:00:08 2026 GMT
            Not After : May 17 23:59:59 2026 GMT
        Subject: serialNumber=3e412ce4fe553912d1ee54c85481f6ff06981d8d620fd3e0674357129dc7748f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:3b:46:43:99:8a:19:0e:e9:89:ad:f3:86:
                    9a:cf:b5:55:d6:f5:24:fb:23:81:38:6a:10:5d:cc:
                    56:2e:35:ae:d3:f8:81:e4:33:24:db:72:76:b1:03:
                    e9:92:06:e9:3a:ec:7b:ef:25:ba:8d:0b:38:e6:11:
                    84:d3:0a:7a:5b:10:14:88:e9:c4:3e:8a:e6:13:51:
                    ea:aa:96:4c:9f:19:f2:77:a6:2a:45:f0:48:26:b5:
                    53:a3:27:80:27:89:16:bc:bd:9f:21:71:62:d1:d8:
                    76:5b:7f:ab:7a:ed:9f:09:dc:1f:3e:4e:57:53:ab:
                    87:f2:7e:3c:46:50:05:b8:c0:64:e3:51:b5:41:f9:
                    03:ed:33:dd:37:46:76:a5:33:30:92:6d:9d:c4:da:
                    56:1c:ec:c8:c0:f3:a6:dc:f8:e3:25:fe:f6:55:56:
                    fd:39:12:e5:86:10:86:ce:bd:8c:e4:34:a6:3d:74:
                    40:3f:cf:bd:e4:11:2c:ae:89:fe:c7:51:ed:f3:17:
                    bc:01:1c:60:80:c2:d4:19:9f:7f:f4:05:70:14:1c:
                    1d:a0:2a:49:6e:04:69:12:43:be:dc:d9:1d:29:41:
                    bc:e8:dd:56:b7:74:87:cd:bc:97:02:ae:73:41:51:
                    23:c3:86:5a:18:df:61:b3:77:8c:b1:8a:bb:b3:52:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:01:EA:4D:FB:51:8F:84:68:B6:AB:3C:2B:79:01:74:8B:C5:83:B8
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/978d02aa-60d3-4d9d-a519-826716493d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2631::/24

    Signature Algorithm: sha256WithRSAEncryption
         60:fa:7d:c2:d4:e6:9d:11:c8:37:0a:a2:34:df:7c:a3:f3:91:
         fe:f8:e7:d8:19:61:72:bb:d3:a5:81:30:c5:ee:e6:b4:9f:bd:
         f8:47:b2:03:fb:bf:1c:f6:3b:05:17:96:2b:d0:67:cb:3e:14:
         2a:6e:4a:68:83:e3:30:80:ca:43:b7:f2:b0:19:5b:10:44:bd:
         f6:28:f6:46:ad:21:fc:3d:ae:24:4b:4b:5b:b1:91:b2:04:75:
         2a:51:6d:ae:98:81:21:7c:b9:8a:81:be:4f:19:6d:2b:09:2a:
         6c:ef:02:96:0d:4f:b9:f5:cd:60:ab:1b:73:36:9a:03:c6:8c:
         a7:33:ad:de:6a:d8:d5:50:a7:5a:02:0b:e5:be:3d:d5:c3:34:
         0c:f7:a5:c3:6f:0a:43:23:7a:ea:0e:36:db:e0:d3:d2:5f:ee:
         9b:1a:3c:a7:20:01:a0:51:00:aa:d2:73:60:ed:49:f8:e4:d0:
         43:a9:38:48:5b:d9:1a:08:eb:42:da:b0:7d:22:c7:04:69:d1:
         38:21:7c:4a:1c:0d:65:28:b1:01:1a:c5:95:2e:33:91:d2:a4:
         24:ef:76:d9:d1:1e:27:e8:3f:05:2d:4e:59:e4:9b:1c:76:f7:
         78:db:f6:f4:93:48:8e:9e:44:3c:b7:b5:da:85:69:21:51:ba:
         d3:38:1c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:33 2026 by rpki-client