Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25d659ba-98ec-4e2b-9191-60b103d777b7.roa
File:                     25d659ba-98ec-4e2b-9191-60b103d777b7.roa (raw, json)
Hash identifier:          MZ8KWrLK8G5oHpfO25boKXVi4Z2ZKoMEkX2dEwaFy3Y=
Subject key identifier:   58:0F:39:73:B8:32:B0:C8:FB:A4:30:9C:C5:D7:72:9E:47:FC:71:DE
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       02F529089C7D56C111BB1E54D62B462FDE8EA558
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25d659ba-98ec-4e2b-9191-60b103d777b7.roa
Signing time:             Mon 11 May 2026 00:50:03 +0000
ROA not before:           Mon 11 May 2026 00:50:03 +0000
ROA not after:            Sun 09 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f5:29:08:9c:7d:56:c1:11:bb:1e:54:d6:2b:46:2f:de:8e:a5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May 11 00:50:03 2026 GMT
            Not After : Aug  9 23:59:59 2026 GMT
        Subject: serialNumber=3b936555e4c7bbb9c7b01fa403552fd9ab01d90d3c11098b2540aa84cc1a2b0b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fb:af:8c:72:c6:e6:a1:07:1f:a9:9f:24:46:
                    d7:5b:b1:2a:bc:cc:19:5a:bf:63:4b:cc:2e:0d:ac:
                    2d:93:4d:40:ea:7b:f0:f9:1b:29:05:18:dd:b8:c7:
                    2c:96:1c:8f:45:c8:24:df:09:f4:42:1e:83:86:5b:
                    0f:40:4f:c8:81:f6:3c:5b:c0:f5:20:e9:54:e0:85:
                    c4:56:69:0b:c5:f5:ee:77:aa:3f:38:20:73:be:47:
                    50:11:bf:20:d7:ff:0d:3d:8a:c4:31:a6:b0:e5:b9:
                    af:1a:3a:cf:54:21:65:32:ca:cf:67:78:ce:5f:ed:
                    e4:a6:d8:8f:92:23:90:d4:ab:4b:2e:6a:c1:a4:20:
                    51:76:c7:e2:a7:eb:af:84:fa:b6:dd:df:d7:3f:0f:
                    a8:ca:f0:03:ef:71:e1:96:28:b4:85:cf:62:df:9d:
                    6e:b0:5e:de:6f:64:93:46:6a:f4:82:01:76:1f:00:
                    98:13:17:14:d1:a9:6c:0c:6c:88:71:65:d5:6b:5a:
                    77:9b:e7:c0:c6:d5:48:e0:1d:07:30:a9:75:27:cd:
                    98:fc:d8:8b:2e:5c:e6:fb:b9:80:f0:83:c2:fa:77:
                    97:f7:da:b4:48:00:4b:bb:34:41:7a:a0:f0:6b:74:
                    b1:9b:39:fd:4f:e8:0c:96:2e:ff:a8:cd:6b:bd:d2:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0F:39:73:B8:32:B0:C8:FB:A4:30:9C:C5:D7:72:9E:47:FC:71:DE
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25d659ba-98ec-4e2b-9191-60b103d777b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:1c:54:d7:17:2b:3f:29:b5:96:9b:00:56:b5:7a:97:d0:f8:
         3f:4e:55:ee:37:3a:23:26:7a:56:7f:36:6b:cc:9b:a0:6d:10:
         db:f0:79:2e:9e:f3:f4:1f:c0:11:1d:91:47:77:da:37:ac:ab:
         6c:30:9a:a9:e0:97:86:f2:9c:1a:19:51:d2:ad:ad:3a:80:74:
         bb:c6:0a:b4:72:1a:74:fb:24:80:45:be:e0:7d:32:bc:68:93:
         b5:8a:78:21:f6:73:52:99:fb:b9:40:2c:6b:44:e0:7c:12:5f:
         4e:d3:9a:b3:ce:7f:61:2c:67:34:97:c8:68:7e:7e:19:55:78:
         8c:5a:25:89:4d:cf:34:45:eb:cd:64:43:ad:34:bb:50:6e:22:
         a6:3c:07:b0:74:a6:d6:86:fa:7c:25:86:e7:73:21:8c:c3:31:
         f7:8d:e8:c7:03:88:aa:e5:b3:62:55:2d:67:47:01:f3:e2:9b:
         0f:13:3b:2a:69:2d:5c:29:8d:71:58:e4:6b:f1:52:6c:ee:f8:
         7d:7a:68:b0:02:78:89:85:34:4a:90:03:c9:2b:b9:21:56:3c:
         64:80:dc:66:1d:02:a5:4c:c8:20:ae:57:34:9f:39:11:79:1e:
         0e:1a:fe:2e:78:3c:df:3a:35:e2:e3:39:d5:6e:08:4f:d2:39:
         52:88:a1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:24:14 2026 by rpki-client