Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f031adc-209e-4ee5-be62-41b59b47c59e.roa
File:                     9f031adc-209e-4ee5-be62-41b59b47c59e.roa (raw, json)
Hash identifier:          0z/l39fRh5ftnsIdnvED1uw0BojzA6+0+g8hR0h0GYU=
Subject key identifier:   C9:E4:9E:BD:38:0B:54:2B:62:22:36:87:04:47:87:5B:B9:65:A0:FD
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       2699D3D8B80E9B65F745933F0383CA79367DAC86
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f031adc-209e-4ee5-be62-41b59b47c59e.roa
Signing time:             Sat 28 Feb 2026 04:21:09 +0000
ROA not before:           Sat 28 Feb 2026 04:21:09 +0000
ROA not after:            Fri 29 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        3.170.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:99:d3:d8:b8:0e:9b:65:f7:45:93:3f:03:83:ca:79:36:7d:ac:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Feb 28 04:21:09 2026 GMT
            Not After : May 29 23:59:59 2026 GMT
        Subject: serialNumber=fcd02abfd15107b5e9f9a75d4f8039a375bfd8750aa418f7c5afb4cfe9e1e127, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:05:31:7a:8e:2c:85:d8:9f:c5:e8:87:fd:
                    bb:56:a2:ac:7a:83:70:21:fa:f1:ff:18:cb:c1:93:
                    5f:46:d1:96:6b:39:e9:b4:61:11:67:57:1d:ee:d3:
                    b4:52:e5:35:91:c8:3c:f1:e1:b4:a3:3f:12:ac:b7:
                    6a:d7:16:64:3b:ae:6f:0e:66:24:32:38:79:68:01:
                    a7:ab:4a:bf:f7:d8:36:82:71:5b:44:45:2b:dc:b0:
                    12:34:fa:62:82:ee:38:f8:72:2f:f5:bf:ad:1b:e1:
                    7c:44:4a:b5:87:59:a8:5e:9b:f2:74:d6:27:69:07:
                    93:fa:a8:ae:13:45:97:1c:9a:df:ba:29:7e:60:7d:
                    69:06:c1:58:7c:a3:07:e4:b9:0b:6c:87:17:94:bf:
                    85:45:4e:f2:4b:1d:f6:b3:89:9b:93:b3:a9:75:e5:
                    0d:19:38:b6:57:3a:1d:08:c2:7a:e8:8a:05:5c:c4:
                    26:ca:d1:9d:ee:89:aa:32:91:e1:a2:51:09:5b:84:
                    e4:a2:f6:26:8e:e4:eb:91:31:34:9d:6e:ce:a9:4e:
                    2a:71:5e:6a:80:73:d1:54:a7:52:69:a4:01:34:95:
                    40:48:0f:1c:f0:87:3a:3e:98:79:89:17:ac:b0:f0:
                    70:8b:0a:e6:1d:f9:1d:02:ff:99:ec:c3:a6:55:f7:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E4:9E:BD:38:0B:54:2B:62:22:36:87:04:47:87:5B:B9:65:A0:FD
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9f031adc-209e-4ee5-be62-41b59b47c59e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  3.170.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:71:f9:21:b9:99:49:32:73:ee:d5:e3:8e:54:8b:b1:41:93:
         97:4b:2b:af:20:a8:8e:e3:c4:32:81:18:27:e1:58:44:da:78:
         af:61:bd:e7:0a:ac:d6:58:83:d8:3d:76:6e:6f:b0:0b:46:ed:
         10:6a:e9:14:d5:4f:12:13:77:d6:fb:6c:9c:10:f2:86:de:35:
         b2:fc:26:35:4b:a1:1c:9b:0a:ca:b2:e0:ff:f4:1d:16:c4:8e:
         a6:e9:7f:5c:a3:b8:a7:03:6c:44:6d:2c:aa:11:1d:c8:36:83:
         a6:42:15:00:07:e1:50:ec:54:db:97:d4:35:b6:b0:46:c1:64:
         70:e5:1b:4b:f3:ba:ae:a0:c3:45:45:3e:42:4d:bd:5e:47:75:
         8c:72:6d:2a:7f:07:2b:f8:74:52:26:fc:42:08:53:c4:58:29:
         1a:70:6e:ae:bd:db:5c:4e:d1:ec:94:e7:e2:ce:bd:6f:d4:b2:
         d8:5d:98:ac:f6:32:18:41:0a:37:7a:2c:01:ed:0e:77:90:89:
         a2:e2:cb:a0:90:ea:90:d3:86:d0:ae:30:58:5e:79:6c:cf:0a:
         69:51:2c:36:82:40:25:36:88:32:c2:17:05:e5:50:11:ae:52:
         ad:d8:fc:47:1e:4c:fd:5c:b4:60:76:40:24:26:cd:f9:e4:b3:
         0a:06:4e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:21:12 2026 by rpki-client