Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e5c03c1-1776-40ee-8363-6b56b1ba9c27.roa
File:                     4e5c03c1-1776-40ee-8363-6b56b1ba9c27.roa (raw, json)
Hash identifier:          VSBcugfcUr79NqwnPWRAevoIB2eoepRN3W8vdwTvCWM=
Subject key identifier:   06:AA:7B:E0:51:1D:AC:4F:9D:C2:70:33:3F:98:E7:5A:CF:63:D4:1B
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2B429363A2A0F40FF026A8B2ADB60EA9B105CFFC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e5c03c1-1776-40ee-8363-6b56b1ba9c27.roa
Signing time:             Sun 22 Feb 2026 01:10:13 +0000
ROA not before:           Sun 22 Feb 2026 01:10:13 +0000
ROA not after:            Sat 23 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        144.220.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:42:93:63:a2:a0:f4:0f:f0:26:a8:b2:ad:b6:0e:a9:b1:05:cf:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 22 01:10:13 2026 GMT
            Not After : May 23 23:59:59 2026 GMT
        Subject: serialNumber=114c912e790dfb5ff20f721e1ae7087c04a983dde954b3e3c20c453136f50265, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d5:2f:6c:9b:bc:8f:d9:05:8a:a7:aa:d3:7e:
                    a6:08:bd:2a:9d:bf:44:cb:8d:31:ba:7d:29:61:e9:
                    a8:78:a3:38:2d:ae:2c:52:f9:27:06:3b:11:91:17:
                    77:6f:e9:39:41:f0:1f:c3:a7:c6:89:e6:a4:04:e9:
                    24:02:f5:4c:78:60:75:e3:5a:7c:83:1f:2d:72:4c:
                    ca:52:a0:c5:82:99:cd:1f:1a:db:e4:83:b7:dd:41:
                    33:d7:38:52:ff:e4:1b:b3:dd:0b:5a:88:43:03:20:
                    4c:62:f8:9e:a4:49:a3:12:e3:39:38:fa:c7:95:a2:
                    3c:03:b9:df:02:f8:c3:79:fc:98:3a:fa:61:ca:b4:
                    8a:ba:6f:1d:cb:07:3d:15:be:41:e1:b8:b5:6e:9b:
                    6d:fa:c0:20:39:a9:e2:43:84:91:a7:c6:d1:bb:26:
                    3d:02:cb:34:5c:5c:21:47:e3:2d:67:25:62:58:39:
                    1d:07:56:d2:a9:95:03:c3:21:45:73:a8:36:55:1a:
                    b5:08:26:cc:52:55:c4:7e:0b:58:38:ff:aa:a3:a3:
                    e2:ae:b0:18:95:60:b3:2a:61:ea:91:92:95:83:ce:
                    24:2a:42:1b:a4:2d:0c:7b:3f:6e:92:5b:7c:5f:fd:
                    2a:20:74:94:a1:76:73:c3:45:e5:b6:93:36:a5:c5:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AA:7B:E0:51:1D:AC:4F:9D:C2:70:33:3F:98:E7:5A:CF:63:D4:1B
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4e5c03c1-1776-40ee-8363-6b56b1ba9c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.220.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:0d:68:c8:9b:2a:bd:8a:4b:b0:03:f9:c0:57:7b:be:99:a5:
         49:8d:26:5b:e1:79:c7:99:f6:ee:13:cf:53:b6:65:f5:9f:cc:
         75:9a:35:82:f4:1b:3a:70:7d:2e:98:31:6c:13:16:9d:4f:57:
         ca:a7:be:87:e4:c9:cb:4c:d5:ba:15:f4:ef:c8:fd:41:0e:9a:
         42:17:23:5b:8d:6c:52:fa:a9:d6:fd:35:e6:e6:37:ac:90:89:
         cb:a4:c3:73:5e:c7:2f:7a:ed:a1:82:e4:31:93:87:50:84:90:
         eb:e2:ad:08:ed:e2:7b:2f:10:3a:29:35:28:8b:6d:4e:97:c3:
         9d:3e:b9:fe:15:b8:08:c0:22:95:9f:ef:aa:22:e2:92:8d:5f:
         49:7a:ad:b5:e2:d2:ea:5f:cc:91:2d:68:96:73:51:60:67:95:
         21:4d:26:81:55:84:67:c8:a0:6d:68:22:77:d4:cd:4b:e5:1d:
         27:22:36:21:95:74:83:1c:5c:e6:a2:06:2f:f4:7a:5f:ed:cd:
         68:36:4b:81:53:cd:20:fd:35:d1:63:b0:06:dd:5d:a3:1b:5a:
         ed:2d:65:05:7d:ea:5c:72:bc:2a:f8:ea:15:c9:22:84:4b:2b:
         44:a7:41:57:9b:2c:24:5e:27:6d:8b:ae:fd:e7:bc:29:34:30:
         d4:97:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:46:31 2026 by rpki-client