Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2160c47d-edb1-421e-baa8-9dfb9c7e19eb.roa
File:                     2160c47d-edb1-421e-baa8-9dfb9c7e19eb.roa (raw, json)
Hash identifier:          61/4dOJtfioG6y9C5TG/Ztl8vg+nF3Qigl1cfZDPYvA=
Subject key identifier:   FC:2F:17:36:7C:B9:10:8B:E3:AB:D0:42:B1:6A:7B:A1:64:D9:4E:2A
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1A628E742CE59D8D743FB9AA726F88F8857F88B0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2160c47d-edb1-421e-baa8-9dfb9c7e19eb.roa
Signing time:             Fri 20 Feb 2026 00:40:05 +0000
ROA not before:           Fri 20 Feb 2026 00:40:05 +0000
ROA not after:            Thu 21 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:62:8e:74:2c:e5:9d:8d:74:3f:b9:aa:72:6f:88:f8:85:7f:88:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 20 00:40:05 2026 GMT
            Not After : May 21 23:59:59 2026 GMT
        Subject: serialNumber=9255ce7f1b11e58f946e58091737d281d3fb92b27bc4a01048069f43b11b36ea, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:01:5b:1f:e7:1c:2c:33:20:c3:61:3a:8b:
                    8a:e1:42:d7:8f:77:fc:b0:f0:e8:b8:ca:4e:75:fd:
                    d0:25:41:07:33:2c:c9:e7:7b:d8:2b:47:3a:24:1d:
                    54:f3:13:c8:5c:86:8c:66:ad:7a:8d:7e:0a:cd:e6:
                    ec:e2:08:ea:e8:99:e5:7d:b6:9e:8a:87:3c:a5:cc:
                    96:a3:94:28:3e:98:af:f1:ba:3e:a0:fa:5e:19:49:
                    a2:28:23:be:de:49:83:16:8f:14:99:a5:47:0f:04:
                    43:ea:25:8c:f4:9c:e6:b8:1a:6f:3b:94:bf:04:a1:
                    b6:92:52:a1:fe:37:63:63:dd:29:12:8e:95:f4:56:
                    7e:db:cd:68:72:1b:a4:d0:2c:08:87:fc:60:dc:bd:
                    ec:84:9c:30:6b:7b:16:85:b6:42:53:62:ef:bc:b4:
                    2c:1c:e5:6b:99:3b:cb:fa:0c:39:48:88:50:81:e6:
                    a8:f1:b7:63:bb:68:57:f4:f4:a5:11:be:73:65:ff:
                    b3:e5:49:4d:2e:bc:72:ff:3c:af:33:f3:e8:ef:2c:
                    fe:47:43:81:f1:14:f3:4c:74:27:c4:5d:b5:c4:9e:
                    5a:30:63:22:bc:aa:d8:8d:43:c5:85:cf:a4:da:6b:
                    65:3a:07:f4:e8:75:fc:2c:f0:72:94:cb:c9:a1:6c:
                    46:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2F:17:36:7C:B9:10:8B:E3:AB:D0:42:B1:6A:7B:A1:64:D9:4E:2A
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/2160c47d-edb1-421e-baa8-9dfb9c7e19eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:13:18:ac:35:af:6f:f6:fa:c7:16:d4:31:95:2f:90:5a:9c:
         ce:d6:70:c0:56:c6:7b:1b:a2:c2:b0:89:51:d9:4f:e1:7a:ba:
         f5:40:ae:d7:2d:3b:a0:ef:21:9f:78:fb:65:19:a5:2e:48:14:
         12:f7:11:6f:0c:61:79:3a:22:1b:19:7b:31:33:2c:e0:f1:da:
         b4:27:3a:d9:17:d3:06:d5:15:7a:2b:55:f1:40:ca:ad:ac:16:
         90:6b:a3:44:87:a1:1a:81:0d:86:95:9d:c3:90:63:2c:6a:9c:
         7a:f9:ee:88:c3:46:30:00:13:bb:c3:3b:9d:b2:3f:1a:9e:5b:
         42:a7:b2:66:41:9f:ba:bc:4c:87:89:90:38:ec:cf:c7:81:d7:
         9d:b8:29:08:7e:6c:7d:23:48:da:dc:95:d5:f0:ba:39:30:1a:
         51:26:8c:ee:d4:14:dc:00:45:d3:36:24:d0:8a:a7:18:59:54:
         4c:28:3c:e0:32:b1:2e:64:3b:76:ed:de:be:b2:52:5b:12:18:
         db:b7:92:c3:26:83:a9:bf:65:d6:92:6a:b6:e1:9f:e3:07:bf:
         dd:fd:31:c0:2a:54:8b:c8:36:99:f0:10:9b:d7:a7:66:1a:31:
         48:32:06:49:92:b6:b7:63:dd:37:d3:15:d4:e7:19:a3:bc:8b:
         54:f3:2e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:50:27 2026 by rpki-client