Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e289b8b-2eb3-4694-a4fc-e8ce7237fbd6.roa
File:                     3e289b8b-2eb3-4694-a4fc-e8ce7237fbd6.roa (raw, json)
Hash identifier:          z5F9zllXWj+pwWEw2ADsONoYsBY2RYGbsYVy0pryoAI=
Subject key identifier:   89:09:E8:A3:3C:2A:0D:64:94:A3:37:9A:A2:69:6C:AC:68:EE:D7:21
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       330312D06ABB2E2A6B3F7EA63E6BB6FE84490EDF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e289b8b-2eb3-4694-a4fc-e8ce7237fbd6.roa
Signing time:             Sat 28 Feb 2026 01:51:29 +0000
ROA not before:           Sat 28 Feb 2026 01:51:29 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        18.141.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:03:12:d0:6a:bb:2e:2a:6b:3f:7e:a6:3e:6b:b6:fe:84:49:0e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 28 01:51:29 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=cc5a004990f726e61cf1b674c8513464a1b9ae3af7924c5707fc66bf0a019a6b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:de:e6:1e:6f:84:3d:d5:54:26:24:c7:6e:1d:
                    87:1e:c2:d6:f3:c0:84:6b:58:38:a8:db:45:b9:8c:
                    e4:7c:28:c2:7d:bb:be:78:65:75:4a:10:83:ef:72:
                    19:85:93:34:f6:34:ad:78:dd:e6:a8:43:bc:d3:d3:
                    a2:4d:2c:8d:f9:b7:ac:34:f3:6d:10:d8:67:6a:92:
                    b8:54:58:ea:70:b1:a3:0e:74:85:18:f8:ed:8c:c0:
                    6f:01:7a:ae:cc:04:ec:37:f2:a1:a4:f5:e7:18:5a:
                    f3:79:fd:bf:91:3e:eb:3a:97:cc:de:a9:a5:d3:5b:
                    a6:79:0a:6f:29:a4:1e:30:d5:69:7e:10:e0:50:13:
                    5f:45:42:17:27:d3:34:5f:36:b2:68:6b:57:5e:ad:
                    b4:8f:30:cc:e4:83:82:0d:00:23:70:fa:8e:58:e2:
                    ab:67:0b:03:b4:45:26:a1:7e:7d:8b:91:17:50:bf:
                    4d:1a:66:8c:30:49:84:f1:1f:21:f6:5c:58:0b:5c:
                    06:fb:7b:a2:fa:97:5b:22:9b:fd:d9:a0:29:4a:f1:
                    9e:a3:18:a6:41:08:7b:39:44:cb:44:54:f2:e4:5c:
                    1d:0f:d5:82:84:7b:b5:df:43:2f:37:a3:97:dc:90:
                    c7:cc:7f:02:06:e8:51:9b:11:66:f0:87:42:54:47:
                    b0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:09:E8:A3:3C:2A:0D:64:94:A3:37:9A:A2:69:6C:AC:68:EE:D7:21
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e289b8b-2eb3-4694-a4fc-e8ce7237fbd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.141.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:8d:33:c3:1d:c1:19:53:fc:d9:f0:43:bf:0d:74:81:50:b9:
         87:90:ee:67:dc:5f:e2:51:2f:37:ba:6f:3a:f0:96:8b:67:0f:
         7c:c5:5c:b2:2c:fb:d3:5e:7d:b1:d7:9f:13:87:89:03:e3:c1:
         13:c4:32:c0:95:90:5b:8a:b7:f3:12:15:75:4e:a7:30:30:f5:
         5f:40:d6:56:a6:6b:29:5b:d4:81:81:7a:6c:50:27:ac:54:cc:
         68:da:04:5c:77:47:38:b2:b4:b7:9f:23:af:72:b6:21:8f:23:
         22:99:aa:70:e5:5c:3b:c3:ad:b1:b9:1e:b5:cf:77:a7:ae:54:
         4f:9a:b2:4f:10:7c:96:2e:6f:44:17:a5:7a:b5:1e:f0:f4:94:
         a2:98:b8:d0:4c:e6:ba:44:1c:a1:e6:e2:5a:44:a0:91:52:b1:
         8a:ea:7a:88:66:74:f3:18:c1:f1:df:a7:fc:71:c1:02:b3:9d:
         23:8b:66:96:fa:b5:5b:3e:95:0f:d8:f9:bf:26:b1:cf:d4:a3:
         6f:cb:76:02:e0:2f:87:5b:1e:36:85:bf:f7:28:e3:c8:07:b7:
         42:79:1d:46:de:ed:d5:c4:f5:a0:a4:fe:0d:e1:31:61:ef:42:
         91:02:a1:b9:d2:50:09:43:e1:05:51:1f:20:7c:a4:ab:f5:6b:
         17:ba:80:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:09 2026 by rpki-client