Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e085a5b-c3b0-4c6e-8e4a-9650ec18279c.roa
File:                     0e085a5b-c3b0-4c6e-8e4a-9650ec18279c.roa (raw, json)
Hash identifier:          GiS1P8OBLLKYx9AIvM9/TNXm798vaJGZpMh5ZNJqckI=
Subject key identifier:   E7:0E:C7:81:AD:B1:E9:44:CF:E4:F5:D3:EE:30:BC:55:70:3C:DF:1D
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3D7DA30E23ECD2C2082A2F14B21D7C1B1BC756B0
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e085a5b-c3b0-4c6e-8e4a-9650ec18279c.roa
Signing time:             Fri 07 Nov 2025 01:00:09 +0000
ROA not before:           Fri 07 Nov 2025 01:00:09 +0000
ROA not after:            Fri 12 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7d:a3:0e:23:ec:d2:c2:08:2a:2f:14:b2:1d:7c:1b:1b:c7:56:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Nov  7 01:00:09 2025 GMT
            Not After : Dec 12 23:59:59 2025 GMT
        Subject: serialNumber=afc07ca353ef748020fcc5f764a935ae09c45789f122e7af474c7cf73045ddbc, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:3d:ae:c6:b6:fc:cd:06:13:a4:45:76:53:
                    c2:72:25:a8:27:85:0b:14:c1:2f:5c:81:ba:42:f8:
                    39:af:9e:5a:08:49:a5:31:08:90:86:15:18:46:4a:
                    4b:f4:9e:09:29:d1:cb:1a:66:1e:de:d6:5f:a5:ee:
                    25:29:1d:57:a6:30:d7:9d:20:ab:9b:16:9c:15:af:
                    3c:9e:4f:77:08:6b:a2:7b:7e:3f:a1:24:c9:8f:a5:
                    fe:1a:3a:23:dd:57:48:dd:35:00:ba:d4:43:8b:22:
                    f6:91:a5:5e:b2:63:17:a9:99:dd:e4:3f:d2:41:5b:
                    2e:19:1e:32:2e:ac:8c:14:f6:73:3f:a2:33:57:83:
                    d2:54:f7:cd:9f:c8:7d:7f:8e:e2:d8:00:b1:c9:60:
                    53:85:c0:07:33:6d:26:0f:1f:d3:ba:56:88:3d:b7:
                    78:89:8c:f7:8e:d4:9c:be:b4:bb:75:5d:af:33:02:
                    a8:5e:af:5b:6e:f8:8c:2b:c4:9d:a8:6b:3d:6a:b9:
                    41:70:b3:09:eb:ca:5c:46:ef:48:fd:38:3c:ee:2f:
                    35:64:93:92:ca:ca:f8:4b:ba:fc:ff:17:26:4e:60:
                    b9:a7:8e:22:d4:41:d9:ba:61:ef:c0:7f:d3:62:49:
                    66:49:c5:7d:81:b6:c6:58:70:f3:6f:48:80:42:bd:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0E:C7:81:AD:B1:E9:44:CF:E4:F5:D3:EE:30:BC:55:70:3C:DF:1D
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/0e085a5b-c3b0-4c6e-8e4a-9650ec18279c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:b3:69:ce:2c:a9:53:02:db:a3:84:36:b3:43:a7:2f:41:73:
         c8:b4:b1:01:7a:39:fa:4f:81:c3:c0:8a:49:36:f3:c0:3d:36:
         f3:c8:31:c8:90:5b:e5:54:54:95:14:3d:b0:2c:78:ac:1f:86:
         94:84:94:d0:53:6b:3c:8e:53:ba:d7:88:6a:0a:ec:fa:7d:a2:
         ec:bf:3b:c5:89:b9:5f:09:68:40:72:c4:c8:10:c0:79:4c:de:
         f4:bd:6e:7a:9d:ca:14:74:ee:29:e2:c0:97:8b:02:c9:2e:32:
         2d:28:85:c5:03:18:a2:b1:e6:0d:2b:62:36:c8:fc:2e:b7:42:
         90:b7:7d:a8:ab:e3:da:1c:a9:b1:21:70:68:8f:a0:37:f7:b8:
         5b:e1:59:2a:35:8b:2d:fa:f4:ea:1f:88:75:b4:a5:6b:02:72:
         f3:ec:92:00:d1:16:4f:f4:0e:c4:0e:2f:b8:74:60:a4:8c:4e:
         03:47:42:79:a9:22:41:1a:a8:8a:ed:be:78:45:01:2d:4d:20:
         86:9f:d5:aa:f5:03:ff:0b:59:2e:91:fa:6d:fa:86:da:27:10:
         03:4d:11:a3:3b:c3:93:44:fb:af:a6:65:c5:ab:b4:d3:87:fb:
         49:8c:26:6b:83:3d:19:d3:6a:ec:d5:94:cd:0f:fe:45:d2:98:
         64:fe:41:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 10:40:01 2025 by rpki-client