Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09324f72-174c-4531-a3c3-417a0ebf8a11.roa
File:                     09324f72-174c-4531-a3c3-417a0ebf8a11.roa (raw, json)
Hash identifier:          PsXTTza2tIMTQxDq7/iqYRgejsDA+/N0NqmC85dw3I8=
Subject key identifier:   82:B0:68:9F:1D:F9:F9:D1:6E:54:9A:2E:27:76:34:37:A1:91:25:59
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2901310F0B8BCE36492E0AA880A5DB6CA801A6AD
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09324f72-174c-4531-a3c3-417a0ebf8a11.roa
Signing time:             Mon 11 May 2026 00:40:10 +0000
ROA not before:           Mon 11 May 2026 00:40:10 +0000
ROA not after:            Sun 09 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:01:31:0f:0b:8b:ce:36:49:2e:0a:a8:80:a5:db:6c:a8:01:a6:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May 11 00:40:10 2026 GMT
            Not After : Aug  9 23:59:59 2026 GMT
        Subject: serialNumber=93e5a0b692da45ad7cb2a29dfe90228eb934b59ff380301196959871d42e299a, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:2b:d8:2d:40:48:f5:0a:57:02:7a:3a:3e:
                    02:e9:f5:ef:72:7b:63:7e:34:4b:0e:8a:03:2d:5a:
                    bb:42:a8:75:20:e9:1b:d9:cc:f6:93:23:25:de:3a:
                    1b:e8:46:ba:83:86:f8:6a:ac:70:bf:bd:69:85:9b:
                    27:3f:79:87:aa:11:18:05:69:ac:5a:b3:97:63:08:
                    fd:2f:61:9e:bb:26:c5:27:d7:29:e9:f2:6c:ad:3a:
                    9c:41:4c:34:60:1c:4b:54:40:a3:ca:70:d9:de:3a:
                    b3:0b:27:ec:ac:3d:fc:66:74:a1:3b:21:e8:e9:ed:
                    3f:4a:96:e4:1e:77:23:cc:41:28:89:2c:a5:97:1e:
                    cd:78:54:58:93:4c:aa:6d:90:2d:25:63:d7:c0:b3:
                    d7:ee:64:ad:af:90:2b:e2:28:da:ba:aa:df:7b:69:
                    e9:9a:9a:c0:22:0b:9a:18:c2:a5:57:1e:04:b3:fc:
                    8e:01:32:87:84:0a:f7:f3:48:c0:86:3e:2c:1c:6f:
                    11:af:b2:3e:4b:e3:ce:37:f6:76:07:ed:4a:75:e7:
                    13:fd:b0:ed:14:ca:65:6c:b1:73:b5:ea:c7:e8:e2:
                    55:24:bd:9b:64:62:c0:89:60:56:cf:34:31:af:f7:
                    8c:5e:05:6d:ec:d2:00:9b:ac:5c:c3:dd:e1:be:8d:
                    68:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B0:68:9F:1D:F9:F9:D1:6E:54:9A:2E:27:76:34:37:A1:91:25:59
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/09324f72-174c-4531-a3c3-417a0ebf8a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:57:5a:f6:5e:85:42:5c:f0:a3:fb:2c:28:cf:c4:5d:ca:16:
         13:b3:d6:80:38:90:cc:f8:2f:b7:c0:77:b7:cc:c7:2f:09:f8:
         f6:98:74:a9:ae:a9:e1:04:62:4a:db:a7:3b:19:bb:2e:9a:d6:
         7f:2c:3f:eb:ee:97:98:46:5f:bb:e3:c8:8e:2a:40:88:3b:62:
         5a:1e:dd:f8:3d:c1:fd:5d:d1:a3:01:a3:12:23:e6:94:2e:6d:
         35:37:c6:24:df:bc:14:c2:c0:00:f0:f9:a2:7e:b5:71:36:f3:
         1d:ec:68:91:f5:f6:1b:de:e4:9c:f1:6d:ee:d9:7a:22:4c:31:
         a8:bb:ef:8b:1c:d3:c2:1f:30:1d:77:d2:c4:32:2c:f1:3b:d2:
         e2:90:9f:5a:98:46:c7:91:4d:00:43:b4:59:cf:09:63:06:fd:
         d8:8a:a7:65:26:a2:1c:8f:aa:d8:25:de:b5:dc:43:74:d0:79:
         40:53:06:af:07:75:0f:96:f2:15:0f:56:73:6d:1f:97:b5:f3:
         a1:67:0d:87:b3:46:cf:94:70:7e:ae:19:ee:a0:69:29:3a:76:
         5e:32:5a:62:56:42:d5:29:24:7a:cf:b8:78:fd:b2:c0:fa:50:
         49:7f:7d:d6:f0:36:c0:1b:82:0b:41:18:dc:ef:57:0d:97:8c:
         7c:e4:be:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:30:50 2026 by rpki-client