Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15f154ae-dbff-4e56-ad28-5b255629b881.roa
File:                     15f154ae-dbff-4e56-ad28-5b255629b881.roa (raw, json)
Hash identifier:          /qBQc7hJYhS2v+CsFGoS2cYxgiFbSwhRRj57iAZ0UxI=
Subject key identifier:   FE:1B:8D:D5:B9:67:9E:77:06:10:D3:6A:DE:0D:2D:2C:0C:5C:8D:70
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       32925D26DBB89A1C83C7F3D81D083F7FCE567AD3
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15f154ae-dbff-4e56-ad28-5b255629b881.roa
Signing time:             Thu 18 Sep 2025 19:39:53 +0000
ROA not before:           Thu 18 Sep 2025 19:39:53 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:92:5d:26:db:b8:9a:1c:83:c7:f3:d8:1d:08:3f:7f:ce:56:7a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:39:53 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=d8a7f2fa1cc71f550bd91118189d17359cd31cd6d25aa7ee886856f3450bd551, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:98:7a:a4:7a:47:be:82:74:2b:7c:d5:7b:
                    1c:ce:7f:90:39:fa:ac:87:7d:7c:2f:58:e0:5f:2c:
                    db:21:02:2a:02:7e:f1:75:41:eb:c4:1d:f0:85:09:
                    b8:4c:f0:c6:7c:32:bc:b0:34:28:67:1c:f7:13:2e:
                    5c:65:49:b4:10:0b:44:1e:0d:d7:f5:1f:75:04:97:
                    12:90:89:b5:d3:0e:56:b8:39:1e:8a:5c:ff:62:92:
                    0f:be:ad:89:55:15:51:a4:25:dd:26:20:9f:04:40:
                    4a:f3:8e:74:90:88:47:94:2b:aa:dc:84:3f:23:13:
                    78:ce:51:fd:08:42:a3:eb:b9:31:97:0c:29:aa:41:
                    1d:6a:47:3e:59:3e:b0:33:f3:f7:e9:7f:4e:f5:3c:
                    c0:d5:1c:e3:26:fa:2c:40:03:b5:b1:40:75:9e:4f:
                    e6:1d:2f:b0:e7:d0:54:7b:d9:e2:94:9c:34:3f:c5:
                    5c:13:01:2c:72:2a:ac:0b:b1:7a:96:39:0f:2a:96:
                    17:31:b3:6f:9b:a7:01:08:18:06:86:9f:43:b1:4d:
                    97:fe:13:75:77:03:47:3e:03:88:03:8c:7c:0a:07:
                    5b:f7:65:5e:48:69:ac:f5:2e:28:c2:34:28:04:f0:
                    c3:4b:58:a8:cf:e6:42:46:fe:0f:ad:49:d8:3b:72:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1B:8D:D5:B9:67:9E:77:06:10:D3:6A:DE:0D:2D:2C:0C:5C:8D:70
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/15f154ae-dbff-4e56-ad28-5b255629b881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:2d:8f:8a:26:15:aa:9e:88:fa:6a:04:53:99:0e:33:bd:6b:
         a0:a9:32:0d:26:0b:c5:b7:b9:e3:42:ba:61:79:be:9e:3f:2d:
         80:dc:99:9f:ca:3f:18:03:80:7a:be:33:76:23:cb:28:bd:cf:
         4b:4e:3f:29:f6:3c:4b:12:73:bc:23:69:81:ec:86:c6:c6:27:
         86:03:7d:31:28:79:b7:e5:05:e0:ca:1e:9d:86:19:b9:42:89:
         e8:80:b7:b9:2c:a8:28:53:6c:cc:30:7b:8e:3c:7d:74:81:9f:
         fc:b9:42:63:65:96:b6:08:78:a3:d1:29:76:df:7f:16:bd:f5:
         4f:f6:1b:4d:e1:4d:9e:44:ee:32:45:55:aa:38:fd:a1:15:6f:
         ba:42:5f:f5:7b:61:3a:84:23:7a:a2:ac:71:82:78:1c:8d:ab:
         76:31:8b:f3:c4:82:7d:ce:ff:f3:2a:25:88:b4:8d:5a:bd:7a:
         30:61:60:9f:33:c4:8b:eb:11:65:ac:56:05:d5:bc:8f:b3:0e:
         7e:67:6c:0f:4b:a8:e2:46:a6:6e:cc:4a:55:12:6b:d8:12:2c:
         5e:d3:fe:c9:91:ac:b0:31:3c:bb:aa:d3:06:66:50:d3:78:e1:
         c1:c4:ff:48:e0:0b:e7:18:fa:51:bd:2e:55:5a:bf:ce:02:63:
         2e:aa:64:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:03:44 2025 by rpki-client