Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25d659ba-98ec-4e2b-9191-60b103d777b7.roa
File:                     25d659ba-98ec-4e2b-9191-60b103d777b7.roa (raw, json)
Hash identifier:          0GAAO4JKSyFEdM33E6lzIV8FMP4nJBfEB/OBzTi7Ojo=
Subject key identifier:   B5:82:4D:A4:5F:04:B8:16:43:C6:1B:C2:C3:8E:27:A6:7A:4C:1D:9B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       7256EEACA74E7A9849A1EEAFC5A66F3B4139B482
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25d659ba-98ec-4e2b-9191-60b103d777b7.roa
Signing time:             Thu 30 Jul 2026 00:40:04 +0000
ROA not before:           Thu 30 Jul 2026 00:40:04 +0000
ROA not after:            Wed 28 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:56:ee:ac:a7:4e:7a:98:49:a1:ee:af:c5:a6:6f:3b:41:39:b4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 30 00:40:04 2026 GMT
            Not After : Oct 28 23:59:59 2026 GMT
        Subject: serialNumber=dd273d06aa7e9c7d2c085aff1195b04bed92bbd908b150268d69350911f34196, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:99:3c:e1:b5:0b:8d:4d:dd:68:9b:cb:c6:cd:
                    cf:b6:9b:4c:22:c2:30:ab:23:73:c9:94:ce:88:b4:
                    5c:af:12:9a:80:93:90:dc:93:16:25:c2:4a:af:83:
                    8e:76:dc:67:c8:d1:2f:f1:ff:1e:d0:01:38:ab:6e:
                    e6:37:86:47:0d:88:44:41:6d:16:00:1e:06:30:a8:
                    bd:c9:81:6b:92:2e:02:db:53:55:eb:fd:07:f4:e5:
                    29:89:5d:90:d9:ba:be:30:5b:8f:6e:9a:dd:8c:b0:
                    73:0b:7c:c9:bc:da:6b:25:28:2b:fe:c4:c2:a7:d5:
                    59:8c:dd:24:1d:17:56:88:7c:fd:b1:63:f8:79:72:
                    05:39:9b:c1:de:16:11:3b:3a:0d:e2:32:68:fc:88:
                    2b:cf:24:b4:ee:f8:88:a0:9a:0c:2a:5d:ee:95:0d:
                    27:33:e1:0b:0c:95:93:51:ba:ab:e5:bb:ea:b7:ce:
                    34:14:25:2f:21:65:cb:32:e5:0c:fc:d7:b5:da:b2:
                    e8:89:68:cc:28:59:2d:7c:75:2c:a8:fe:70:dc:1f:
                    d0:25:93:41:03:30:64:58:02:39:7a:c9:90:41:3b:
                    e5:f0:3c:b5:97:63:a7:71:b9:81:11:14:b1:72:5f:
                    17:d8:da:31:24:6e:23:fb:a8:18:ab:91:da:34:42:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:82:4D:A4:5F:04:B8:16:43:C6:1B:C2:C3:8E:27:A6:7A:4C:1D:9B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/25d659ba-98ec-4e2b-9191-60b103d777b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:a5:99:68:1f:94:2e:70:ae:9e:80:1e:bf:8c:6f:de:f1:de:
         97:17:91:4f:29:88:09:09:95:b3:02:20:16:de:1c:5a:d0:6a:
         40:8b:cd:5f:f3:1b:07:3d:8e:32:33:e9:dd:9f:eb:d3:f7:b4:
         6f:6b:ee:c8:32:c0:02:46:44:92:30:06:47:92:2e:16:3c:42:
         4b:bf:47:b1:96:82:1c:bd:da:ce:57:61:ab:d6:a9:4a:84:93:
         56:87:fa:ca:c8:5e:61:fb:3c:20:25:f8:1f:47:19:70:17:05:
         9c:e0:c8:94:45:47:bb:55:ea:c5:00:c7:e8:fd:e0:13:28:47:
         48:da:95:c5:45:82:df:8e:d4:41:ed:ba:66:c0:0e:1a:44:2a:
         aa:88:04:aa:dd:8a:63:3a:76:ec:15:27:d1:34:55:94:05:0e:
         ae:49:a6:6c:bb:ca:83:b4:95:f5:58:6e:76:cc:c0:c9:3f:79:
         32:90:dd:3f:98:ee:3b:71:c2:60:9d:80:a8:e7:f2:6a:a2:99:
         83:03:bd:28:ab:10:7f:26:e2:21:e5:c7:79:06:44:b1:02:61:
         15:09:6e:7d:28:5f:0e:7a:70:85:20:dd:bb:30:2e:d9:61:f4:
         b8:05:c8:35:1b:6f:95:37:32:e3:52:ef:36:4f:56:bf:6a:2b:
         9a:58:29:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:42:47 2026 by rpki-client