Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4696ceb-f833-43c4-af53-9960894ce08d.roa
File:                     b4696ceb-f833-43c4-af53-9960894ce08d.roa (raw, json)
Hash identifier:          kSLuIMUUXYTbNGZOTNjO+e1mrWlUN6lDN8O4Fxla6ds=
Subject key identifier:   21:33:AE:CD:89:5C:20:71:27:CD:3A:DD:D8:C3:35:EC:DC:EF:F2:33
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55E91944502E8F482E3403B062F5226F763B0C54
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4696ceb-f833-43c4-af53-9960894ce08d.roa
Signing time:             Sun 15 Feb 2026 00:40:09 +0000
ROA not before:           Sun 15 Feb 2026 00:40:09 +0000
ROA not after:            Sat 16 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        205.251.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e9:19:44:50:2e:8f:48:2e:34:03:b0:62:f5:22:6f:76:3b:0c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Feb 15 00:40:09 2026 GMT
            Not After : May 16 23:59:59 2026 GMT
        Subject: serialNumber=59e85d2d315a3edc4c70511761f321f64203fd84bd1c87a74cc32110e2733ecc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:c3:e1:06:38:d2:7d:b5:27:39:31:e2:f2:
                    dc:e8:6c:bc:ca:9c:8b:34:e4:8a:bf:71:ce:6a:f7:
                    37:4d:aa:9f:1e:11:0c:80:a0:fc:d7:1a:ef:83:27:
                    eb:9b:7c:bb:c0:f8:83:61:d7:5c:48:fb:66:37:cf:
                    10:8f:36:77:e5:0a:b0:5b:9d:63:09:42:95:a6:2d:
                    92:85:6f:41:fe:a2:16:cf:bd:a7:eb:63:c4:74:ea:
                    4e:14:2d:08:17:03:11:43:ae:f0:40:1c:0e:55:8d:
                    47:06:81:d4:fa:0e:43:4f:6d:ad:a6:5e:f3:23:98:
                    31:e3:b7:b6:12:7e:e6:2e:3b:e7:a8:fe:08:ea:0f:
                    0f:56:a6:ac:36:ba:ce:f1:0a:5b:cd:84:52:76:4e:
                    c8:b3:4a:81:d7:05:80:01:4d:7d:40:89:05:99:d5:
                    ee:87:03:7b:58:ee:16:ce:70:1a:b3:7f:55:56:85:
                    45:08:b1:7f:be:1a:5b:76:d1:bc:e4:5c:e4:1d:78:
                    ff:ba:cc:6b:3d:34:1a:6c:65:7d:a8:46:1e:04:6e:
                    c1:c3:74:84:6d:cd:5c:82:6c:13:1b:bd:6b:30:38:
                    6b:66:d9:fd:4e:81:ab:42:70:74:22:ec:bb:33:f4:
                    45:c8:11:9f:4b:ea:a7:f2:69:71:e5:a0:00:17:14:
                    5a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:33:AE:CD:89:5C:20:71:27:CD:3A:DD:D8:C3:35:EC:DC:EF:F2:33
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b4696ceb-f833-43c4-af53-9960894ce08d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:00:0c:58:b2:f7:10:37:54:11:16:d5:f7:3a:bd:cd:01:8b:
         12:be:ad:39:3f:d7:ef:23:b0:d5:71:58:30:28:93:8d:96:3b:
         8e:d1:ea:1f:0f:28:94:f3:02:ea:dc:e2:01:c4:04:d9:7d:ff:
         f5:79:bf:4c:98:6e:c0:6e:15:8d:de:4b:cc:68:b9:f9:f0:d6:
         c1:95:cf:cd:23:65:4d:7a:cc:22:a6:43:55:65:19:22:78:61:
         cb:a2:2f:c3:84:a4:f7:d4:47:53:36:39:d5:7a:bd:bf:d0:fd:
         39:5f:de:f6:1f:3e:d3:89:13:dd:e2:9e:85:9d:97:3f:e9:6d:
         7b:3c:99:10:27:3b:ee:e3:a5:dc:0d:b8:86:ad:90:c3:c2:8e:
         bd:c9:88:c7:3d:d8:95:be:de:73:0b:ed:91:3f:1d:2b:b7:ea:
         34:30:bc:c2:ec:e0:8b:e6:d3:ee:f2:32:dc:1c:d5:99:42:d2:
         ac:e3:4b:e5:27:87:ee:0a:7b:e0:8b:61:d2:67:12:61:3f:14:
         94:ea:10:55:9e:d3:4b:70:96:1a:ad:d2:9a:f9:f9:cb:fb:9f:
         8d:0f:a6:9e:78:cc:27:d6:25:1d:7b:a1:3a:33:76:ff:ed:79:
         f7:86:61:21:c0:01:2f:c3:10:b1:7e:5a:cc:ac:a7:77:8d:ac:
         2f:52:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:27 2026 by rpki-client