Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b919d412-26c0-4530-894c-3c4594a7ad41.roa
File:                     b919d412-26c0-4530-894c-3c4594a7ad41.roa (raw, json)
Hash identifier:          37BOhbCiu3HNg/qFYt6Gc2v2XHf8pEkGUdaG0WkuMmE=
Subject key identifier:   27:93:90:7E:9B:EB:A3:B6:0C:F7:D9:5A:FB:77:7C:B6:20:66:39:B2
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       0896E1668CEFFCC6EA994A03312FD1B402B97EEC
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b919d412-26c0-4530-894c-3c4594a7ad41.roa
Signing time:             Mon 11 May 2026 00:40:05 +0000
ROA not before:           Mon 11 May 2026 00:40:05 +0000
ROA not after:            Sun 09 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:96:e1:66:8c:ef:fc:c6:ea:99:4a:03:31:2f:d1:b4:02:b9:7e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May 11 00:40:05 2026 GMT
            Not After : Aug  9 23:59:59 2026 GMT
        Subject: serialNumber=cf0b21cb5139f6aed363b5c961599f1fa5ab53d91217b6cfdfeb580b8ddecdfe, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:57:b5:47:91:36:f5:16:56:2e:2e:33:7b:c2:
                    25:bc:91:e5:c1:0e:41:87:b9:4d:22:6d:e0:b8:dc:
                    ea:3a:72:a8:7e:e6:4e:b7:f5:57:20:76:cf:76:73:
                    3c:22:1e:e8:69:98:0f:d1:29:06:41:23:21:46:e0:
                    a3:43:19:02:7d:59:73:0c:c9:92:34:f8:12:6e:c1:
                    4d:8b:e8:10:40:9f:12:7f:29:24:ca:24:bc:c2:2a:
                    88:0a:7c:dd:b3:45:eb:35:3e:1e:8f:bc:45:3c:29:
                    76:41:29:c4:99:3c:4a:07:7e:6f:0f:b9:54:01:dd:
                    cb:6d:58:fb:82:02:d2:ad:cb:18:a3:c9:3e:43:eb:
                    67:d4:fc:33:6d:60:7f:f8:87:ef:ca:7c:e0:77:1f:
                    5a:c0:d1:2e:e3:dc:2f:db:72:b7:2d:db:16:3d:20:
                    14:d0:83:ed:3e:89:c0:ee:6d:d1:7f:8c:eb:20:af:
                    12:3e:2e:38:7b:52:f7:64:2e:f7:ab:3a:17:0b:07:
                    76:d4:7b:09:af:37:39:2d:1b:b8:a0:76:bd:1d:85:
                    e9:83:ce:70:a2:cc:66:c6:73:45:42:e3:b5:21:45:
                    5c:d2:c3:81:7c:f2:36:d9:f5:ad:ac:46:88:9d:be:
                    13:1c:fc:fd:57:14:94:9a:7e:ef:2d:d4:bc:52:e9:
                    93:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:93:90:7E:9B:EB:A3:B6:0C:F7:D9:5A:FB:77:7C:B6:20:66:39:B2
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b919d412-26c0-4530-894c-3c4594a7ad41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:ad:04:ba:76:e7:50:a9:05:19:13:88:76:ef:37:b1:62:f4:
         02:3d:ef:ba:0d:1e:45:2b:38:20:fe:30:fd:81:3e:45:4f:c6:
         2f:34:15:69:b4:d1:59:23:1f:6d:58:f7:71:8c:13:91:21:99:
         a6:ff:d6:e4:36:15:71:19:a2:e9:21:e4:87:89:a9:db:ad:a2:
         20:4f:27:6d:3f:59:c3:f8:b2:c3:f9:e5:ec:a0:40:0d:7b:96:
         61:1b:5d:3d:c0:64:99:87:ef:ed:e7:32:f1:86:ac:88:79:76:
         c4:0f:20:5d:d5:32:80:e8:f7:9a:ee:33:8c:5a:3e:69:af:30:
         2e:a7:3f:b2:1b:95:20:aa:81:f9:06:08:3c:ba:e5:f5:7b:9b:
         d7:eb:96:35:a5:08:96:26:b7:f8:9c:28:ef:47:c6:d9:d5:0e:
         38:cb:71:12:bb:d4:48:c0:4b:22:45:2a:4d:09:6d:0f:25:eb:
         ff:9a:a2:3c:4c:86:dc:87:78:c8:5e:a5:ee:12:9a:41:72:9e:
         08:bd:35:fa:12:ea:79:0e:dd:7c:d1:74:f2:d7:28:d4:f1:f7:
         e5:eb:31:03:e7:4e:55:1a:38:67:11:63:25:db:bc:00:36:55:
         a8:41:60:f7:25:99:dd:d1:bf:62:61:34:ac:4f:ff:84:d3:50:
         f7:93:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:52:35 2026 by rpki-client