Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22ed20bf-987a-4327-b754-36561e31301a.roa
File:                     22ed20bf-987a-4327-b754-36561e31301a.roa (raw, json)
Hash identifier:          yUSXwHwrDl8vAvFaDglYfntU278E5yWVX+kco0wb5ZU=
Subject key identifier:   F8:B9:78:CB:31:82:99:AF:DD:0B:9E:27:F8:2E:08:BF:3B:22:F1:2D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1E152E74A904A5A7D6752AFB155F60B302E48B66
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22ed20bf-987a-4327-b754-36561e31301a.roa
Signing time:             Fri 20 Feb 2026 00:40:52 +0000
ROA not before:           Fri 20 Feb 2026 00:40:52 +0000
ROA not after:            Thu 21 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        216.137.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:15:2e:74:a9:04:a5:a7:d6:75:2a:fb:15:5f:60:b3:02:e4:8b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 20 00:40:52 2026 GMT
            Not After : May 21 23:59:59 2026 GMT
        Subject: serialNumber=4895acb5210280455b43f5f31f390becb4d6ee81974a7e2cbca368bd35bf6a8a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:a6:03:94:d7:6a:ee:70:21:6c:8d:26:50:
                    c3:d0:65:e7:72:cf:02:74:72:07:d3:f1:a2:a8:df:
                    80:be:11:3e:2c:40:83:d1:9c:0b:33:07:e9:31:bf:
                    21:99:27:6d:3c:c8:14:02:63:5b:48:a7:ad:cd:8f:
                    a4:e2:40:be:71:e3:8b:ca:c7:64:29:f0:d7:3c:28:
                    ad:74:85:4f:25:14:2a:01:f2:7b:8d:bc:b0:c7:fa:
                    ea:f7:6c:74:bb:32:26:5e:f6:1e:0d:d2:3c:c0:31:
                    6f:d7:8d:05:aa:13:ff:9b:ce:46:16:8e:7c:5a:8f:
                    c2:a5:05:a8:dc:f5:24:c5:9c:4e:f8:d5:9f:7a:90:
                    f4:89:ae:e8:97:77:53:48:3b:4e:cc:0e:7d:e1:0d:
                    82:ff:20:c0:e9:70:7d:ce:1a:4d:aa:04:ce:69:93:
                    0f:09:15:3a:11:e8:4b:62:be:cd:7d:ed:c6:21:09:
                    f5:97:26:6a:60:9d:45:6a:89:3a:d1:63:f9:9b:81:
                    8c:69:df:d7:f4:31:36:23:98:55:d5:76:99:6b:83:
                    fd:96:f4:9d:ec:bf:2e:1c:a4:03:58:e7:58:8a:30:
                    71:d7:7a:58:35:a7:86:b2:a9:98:e0:01:33:82:97:
                    24:0b:58:b1:2c:cf:14:78:8a:49:b4:2e:76:0b:c2:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B9:78:CB:31:82:99:AF:DD:0B:9E:27:F8:2E:08:BF:3B:22:F1:2D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/22ed20bf-987a-4327-b754-36561e31301a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:91:af:e7:40:17:1b:9a:9b:a3:4c:af:cd:26:08:1f:ec:
         e4:31:fd:b1:1e:89:9f:13:71:80:02:fa:a0:85:48:41:5e:91:
         b5:48:b4:b9:bc:e3:8b:a1:80:46:f7:2b:cb:d1:74:e7:80:f1:
         a1:cf:c5:e0:2f:3f:c3:e6:48:10:da:11:91:ab:90:14:2f:99:
         23:44:35:44:42:d4:c8:94:67:ae:79:6e:17:26:62:87:81:13:
         ee:ea:97:9b:cc:36:42:fc:00:7b:2d:26:bc:f5:56:20:3d:dc:
         84:b9:12:c5:21:7d:70:cb:e4:67:df:c8:fe:5c:5e:f5:fc:64:
         2c:ce:f8:09:81:75:c9:80:0a:53:85:bd:d0:f1:cb:71:14:f2:
         c3:a1:21:de:2c:b4:81:3f:16:05:1b:96:86:2f:15:01:28:1e:
         a6:e8:30:0e:25:3c:3a:bc:a7:28:1a:04:51:04:c5:b4:19:82:
         d2:60:e1:9a:98:bc:fb:a5:95:42:f6:dc:93:80:fc:4d:07:a3:
         cc:0c:cf:9a:c6:04:07:20:4e:da:dc:ac:ae:35:8e:c4:de:f7:
         16:6e:31:0c:40:44:50:d7:44:ee:95:ef:fc:03:c1:b3:d8:7a:
         93:00:dd:c8:a4:22:a6:1a:9d:27:b4:ae:ed:a4:73:e6:6c:c7:
         43:30:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:36 2026 by rpki-client