Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/154534d5-da69-43fe-9f0c-aad88b97483b.roa
File:                     154534d5-da69-43fe-9f0c-aad88b97483b.roa (raw, json)
Hash identifier:          +ChFOcqvElD9w595S79GnC/VH2Uq2JJL09aaRG7rrYA=
Subject key identifier:   74:D2:B1:AB:83:A2:D1:9A:41:72:7B:C9:01:89:2C:A4:E7:DA:97:45
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       6CBD8294B3D0DFC7B9F239460CF988FEE4045B34
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/154534d5-da69-43fe-9f0c-aad88b97483b.roa
Signing time:             Tue 24 Feb 2026 00:10:09 +0000
ROA not before:           Tue 24 Feb 2026 00:10:09 +0000
ROA not after:            Mon 25 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bd:82:94:b3:d0:df:c7:b9:f2:39:46:0c:f9:88:fe:e4:04:5b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Feb 24 00:10:09 2026 GMT
            Not After : May 25 23:59:59 2026 GMT
        Subject: serialNumber=6878da028b44188df0244904600d8db6aba51251106e119aeb9a0ecdc57e585f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b0:5b:d4:6a:71:e0:7a:d8:ce:0b:44:6f:f2:
                    af:41:b9:cf:19:cd:6f:ad:33:ce:3d:7e:c7:61:e9:
                    ce:68:f1:7c:3d:5f:7b:47:20:35:61:b3:d1:16:56:
                    a4:9b:92:26:af:88:4a:f4:ca:95:23:81:5f:76:96:
                    aa:21:ea:70:d1:20:13:eb:83:69:b5:47:18:3a:e3:
                    df:76:90:80:93:db:3e:17:08:66:e0:28:d5:e6:a8:
                    1d:7a:f5:e5:4c:66:68:5a:5d:df:fc:2b:83:b7:a4:
                    5c:a9:09:6f:27:24:7a:9b:08:12:aa:11:24:de:54:
                    ae:63:ee:da:51:7f:15:d8:cb:44:cc:bd:e5:8b:b8:
                    ff:3f:de:65:66:d6:6a:8b:18:e6:68:f8:df:c4:29:
                    60:93:2a:e6:41:fe:a9:05:ff:a3:a2:ab:ba:24:29:
                    75:bf:af:1f:ea:41:da:92:f6:c9:3c:4e:a9:b1:38:
                    65:03:4e:a6:13:6d:15:a7:da:b3:72:6d:07:99:a4:
                    b0:0e:90:81:86:fb:0a:0a:1e:ea:68:e4:bf:2e:1e:
                    c5:61:15:0b:85:32:58:ca:83:81:5a:4f:bc:04:d9:
                    b1:75:07:bb:c8:13:a8:e0:ef:ae:11:38:ea:4b:b4:
                    46:12:a5:97:75:86:b1:1f:c9:59:f9:31:d0:60:29:
                    b5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D2:B1:AB:83:A2:D1:9A:41:72:7B:C9:01:89:2C:A4:E7:DA:97:45
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/154534d5-da69-43fe-9f0c-aad88b97483b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:05:aa:02:19:03:dd:1f:2d:c5:e2:5f:24:0d:9f:ce:70:67:
         69:7a:e3:22:ae:5e:d2:e7:70:2e:bd:7c:c0:b1:fe:bc:f6:9e:
         60:50:02:bb:00:9e:dc:c0:78:7f:67:b1:7a:cf:b9:97:33:bf:
         f4:2d:13:5a:f3:58:99:21:64:ca:f1:f2:d7:97:be:1b:20:88:
         8b:74:76:d8:39:58:0d:8b:69:d3:67:b8:66:d8:5e:f8:ba:86:
         b2:4c:f9:9c:a4:c3:48:a7:a0:2c:29:b2:b6:a4:a6:4f:c4:ce:
         58:99:66:12:64:9f:68:8c:a1:6c:9a:1b:76:d8:fe:9b:f1:de:
         bd:99:04:7e:51:1c:6b:ec:38:e5:56:49:ec:59:89:af:19:f7:
         40:25:13:2b:12:03:69:a4:5a:ec:14:e8:db:eb:57:33:ae:ba:
         08:6c:b9:8c:f1:f9:1f:08:f6:7b:95:33:51:b0:ca:88:eb:32:
         a7:fa:4a:6f:58:d6:d0:38:bb:88:08:42:11:7a:9f:e2:43:7e:
         f2:06:e3:b8:06:69:dd:fa:90:18:7c:e3:40:a3:a5:35:f4:8e:
         58:b7:8e:8b:ed:64:29:5b:38:de:8f:86:cc:54:70:84:72:1a:
         63:ec:2e:ed:75:98:00:4c:7d:e4:cd:74:df:51:27:96:47:70:
         9b:8a:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:21:49 2026 by rpki-client