Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/e1092ae6-33f4-4cca-ad63-40e3b49039bd.roa
File:                     e1092ae6-33f4-4cca-ad63-40e3b49039bd.roa (raw, json)
Hash identifier:          TTaoVbsNVqa9pMVMwnGQb+3qAbgfpqH/8ygEzlhpAFA=
Subject key identifier:   01:A0:7A:D0:4B:45:4B:52:53:44:9E:74:3B:13:CF:27:F6:5F:AC:B5
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       556CEF3CBA2E0EBA4A0FE5BF00FF9C721CB292A8
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/e1092ae6-33f4-4cca-ad63-40e3b49039bd.roa
Signing time:             Thu 30 Apr 2026 00:00:07 +0000
ROA not before:           Thu 30 Apr 2026 00:00:07 +0000
ROA not after:            Wed 29 Jul 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        96.127.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:6c:ef:3c:ba:2e:0e:ba:4a:0f:e5:bf:00:ff:9c:72:1c:b2:92:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Apr 30 00:00:07 2026 GMT
            Not After : Jul 29 23:59:59 2026 GMT
        Subject: serialNumber=18a00cf2a244d542edb486b66f2d662a6960dfe8f0faeee21f29ed673b801abf, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:00:58:6c:fa:60:f3:e7:39:36:30:ae:1f:
                    18:7d:d3:7d:0f:2f:75:29:35:36:7a:39:0e:9c:8b:
                    af:38:ed:f8:0f:45:2e:6f:c8:b9:a2:b6:5f:67:e6:
                    b8:eb:0e:28:2b:17:c5:cb:ff:71:fb:1b:1f:04:ed:
                    8e:fb:40:0f:12:73:3e:8b:d8:1e:5c:67:8b:90:b7:
                    da:07:68:12:e0:ce:fe:15:2a:12:a7:07:66:a8:8b:
                    66:b6:5d:0c:77:2b:6e:7f:16:4d:2a:4b:da:43:57:
                    28:a7:fd:98:21:a9:82:71:d3:aa:10:14:4e:39:67:
                    64:2b:0b:5a:cf:f1:93:4e:2b:4f:1d:cf:ef:ce:0a:
                    ea:e9:34:a9:bd:2d:42:1a:54:7f:64:27:80:41:a0:
                    0c:2c:5c:65:ef:75:27:e3:da:e9:c8:d8:94:f8:e2:
                    1f:30:fd:26:fe:2e:4e:4c:47:42:9a:94:b4:f9:ac:
                    0e:99:11:f7:5c:21:21:e0:90:fc:15:a5:1b:ad:e8:
                    ed:27:e9:c9:5c:f6:74:cf:b4:45:cf:3b:b3:ca:37:
                    d5:97:12:31:b9:f4:e0:cc:fd:b3:fc:c1:e6:3f:b6:
                    54:d4:00:3b:b0:5b:53:49:ae:b7:fb:73:38:84:80:
                    b1:9a:f2:dc:94:05:e2:3f:62:c3:b6:78:92:15:46:
                    37:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A0:7A:D0:4B:45:4B:52:53:44:9E:74:3B:13:CF:27:F6:5F:AC:B5
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/e1092ae6-33f4-4cca-ad63-40e3b49039bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:f9:33:f9:bb:1c:1e:1c:3f:c8:59:a8:b2:be:83:24:5b:b0:
         ab:ab:db:44:36:bd:72:a4:e6:ea:36:41:e7:4d:0b:0c:b3:22:
         d3:d2:ac:17:d4:12:af:90:3c:7d:e4:24:1d:44:fd:ec:bd:ec:
         f8:82:95:6d:5e:d2:69:7a:82:d9:e1:3c:4a:8c:55:64:c2:1b:
         b0:88:7d:77:36:a5:3c:9d:01:19:2e:7a:0e:99:49:c4:af:10:
         b4:15:ba:61:29:60:f1:c8:12:2c:22:f7:c2:d0:df:09:61:91:
         c2:0a:33:26:1b:c3:a4:0c:ad:ff:88:af:d3:24:1b:8b:21:9e:
         dd:3a:1e:5f:8c:55:c3:61:1b:a0:96:9d:35:f6:88:0d:23:1b:
         a1:52:08:14:23:d3:b6:fd:7b:8f:bc:70:8f:b8:58:98:c0:9b:
         a8:42:7a:3f:b1:d2:84:73:08:db:60:33:94:ea:e5:5f:47:c8:
         4d:46:c4:ee:41:62:d9:86:ac:9b:84:bc:2f:3b:47:34:b6:cf:
         cf:a9:95:4c:78:34:eb:ba:3d:b3:f5:fd:1f:a8:3e:6f:99:e5:
         11:2e:eb:07:37:31:a6:e3:c2:26:70:b6:77:93:b4:9b:2e:2e:
         07:cf:14:44:81:61:fa:17:76:d5:d3:a2:29:d6:b2:ce:a1:22:
         f6:70:fa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:38:33 2026 by rpki-client