Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09324f72-174c-4531-a3c3-417a0ebf8a11.roa
File:                     09324f72-174c-4531-a3c3-417a0ebf8a11.roa (raw, json)
Hash identifier:          QbcJkhcYs94Py0nHAkp7YWHDa0eGp5v8tsuoq3xpMM0=
Subject key identifier:   80:6F:23:69:55:66:B4:B4:84:86:F0:9B:AF:5F:90:6D:CB:C9:F3:F8
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0389F84EA297BCFAB32DCE568B6C28B7BFFF4D18
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09324f72-174c-4531-a3c3-417a0ebf8a11.roa
Signing time:             Fri 20 Feb 2026 00:40:55 +0000
ROA not before:           Fri 20 Feb 2026 00:40:55 +0000
ROA not after:            Thu 21 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:89:f8:4e:a2:97:bc:fa:b3:2d:ce:56:8b:6c:28:b7:bf:ff:4d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 20 00:40:55 2026 GMT
            Not After : May 21 23:59:59 2026 GMT
        Subject: serialNumber=c60d517bed46a9bede37b4cfa3e3e16bd86b3babaefcff0f599927db8c1e937d, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:0d:59:0e:dc:e3:46:ef:ab:16:6f:dd:56:
                    5a:c8:0c:ce:4f:6b:1e:3f:4f:80:65:08:e3:5e:8b:
                    77:ad:7b:57:61:32:1d:6f:ec:89:03:ac:83:bd:a0:
                    f9:4b:14:d9:04:8f:44:49:2b:dd:4c:a0:af:bb:48:
                    c9:e0:dd:30:27:38:f0:34:be:6f:58:ca:ed:e3:c4:
                    76:ec:f2:c4:6f:a2:03:09:ce:5c:52:dc:fb:8f:98:
                    48:db:e3:62:5a:1c:17:70:13:73:35:fe:27:66:41:
                    fb:19:bd:ee:72:a7:ac:4d:d4:31:50:5f:e0:df:ab:
                    27:00:a5:93:fd:e5:97:1d:f0:67:93:7f:f6:8b:76:
                    1d:31:b7:43:0f:6b:62:73:b9:54:ed:ee:8d:80:85:
                    09:05:de:ea:62:8c:f7:67:8c:cc:e3:c7:fe:3f:24:
                    c6:d6:ef:b1:4e:75:81:2c:cf:b3:79:ab:e4:72:9b:
                    d9:b1:e8:04:40:1b:63:4f:a3:8e:47:8f:a6:55:9b:
                    75:bf:b6:93:a5:53:66:86:06:70:28:1f:3b:5f:a5:
                    52:09:3e:88:a7:c1:c3:86:52:80:c1:08:d4:31:91:
                    04:e7:a7:34:a8:17:5c:e8:9f:f9:d6:84:11:bf:6d:
                    72:70:3a:e5:53:ae:0d:6a:36:c1:8f:3f:2d:e8:8c:
                    21:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6F:23:69:55:66:B4:B4:84:86:F0:9B:AF:5F:90:6D:CB:C9:F3:F8
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09324f72-174c-4531-a3c3-417a0ebf8a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:88:e7:11:00:28:28:4a:7a:2a:3a:0a:f4:0f:25:83:d9:08:
         cd:ed:ad:0c:38:ad:1b:8f:0a:0b:29:72:53:3e:af:9a:cc:0e:
         81:ac:ce:de:a4:a0:50:18:19:8d:57:08:c2:19:34:ae:d8:d0:
         9e:f6:59:27:01:e2:c7:9a:de:d5:88:10:f4:8d:4a:64:b5:67:
         3e:03:b3:ba:db:a3:83:d9:08:7b:f0:4f:11:79:83:0f:0b:d6:
         a6:a6:07:6b:2d:87:bf:3b:f0:c4:f7:79:fb:6c:33:06:17:49:
         50:ad:06:28:5a:19:42:54:51:8f:ae:e8:72:42:73:b1:0c:c8:
         ea:6f:ca:7c:34:05:34:bf:06:a9:62:ab:4d:c4:ca:92:a3:6e:
         e4:31:f4:6f:0e:19:86:7a:77:e2:cb:c3:70:c7:6d:52:e6:32:
         ed:56:cd:ec:d9:86:fa:98:8f:ad:89:af:d5:3d:76:72:6c:99:
         65:7a:ee:5f:ad:99:dc:ef:2a:23:2a:44:c0:bc:79:1a:61:c8:
         30:30:af:88:8e:1b:64:a5:62:69:cc:b3:1c:dc:f7:de:25:12:
         30:ce:96:d0:59:1f:57:27:c6:3e:e1:f2:f5:50:99:35:af:34:
         d4:a7:f1:63:62:90:71:18:b9:d9:3a:66:59:77:34:12:f0:8d:
         58:ca:3c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:50 2026 by rpki-client