Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/177bed01-261c-46d0-a6bf-7f605df9b6f1.roa
File:                     177bed01-261c-46d0-a6bf-7f605df9b6f1.roa (raw, json)
Hash identifier:          JVOfJhOowSmmXDtpvXm1XwqWuluX7GFDnSJRnYx2p8E=
Subject key identifier:   6B:7E:D7:68:B4:74:29:BD:48:66:D4:59:52:8E:09:AE:91:F4:A9:FC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1FCC62BE60C663D769F47D4BF2D01653BDF16935
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/177bed01-261c-46d0-a6bf-7f605df9b6f1.roa
Signing time:             Thu 18 Sep 2025 19:40:03 +0000
ROA not before:           Thu 18 Sep 2025 19:40:03 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:cc:62:be:60:c6:63:d7:69:f4:7d:4b:f2:d0:16:53:bd:f1:69:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:40:03 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=94eb5c049c26dd52214145bb7bf21e8c8aaf846c4bfed92fec35da9b585eae6c, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:75:b4:97:41:cb:03:e8:b2:fb:51:2c:f2:
                    ed:ee:8c:ab:f8:1d:a2:8b:af:ba:22:52:34:0c:78:
                    7b:56:ca:57:b5:3a:d3:c0:94:9b:ad:18:10:75:81:
                    01:e2:e8:29:7e:89:a3:b2:1e:74:bd:36:c9:a0:47:
                    75:44:a7:56:39:cd:8e:4e:09:23:9d:f1:1c:ba:1a:
                    f7:e6:8e:c8:26:9a:2f:64:b6:fa:b7:3d:71:10:19:
                    71:3d:91:02:60:86:a9:39:01:c5:4a:b8:c7:f3:d9:
                    3c:06:ae:79:09:55:3d:02:b5:16:e7:e5:6e:a0:5b:
                    2a:09:b6:58:e9:2a:1e:d0:b3:e2:a0:94:75:d3:8e:
                    6b:17:81:81:67:74:b4:86:6b:7a:5e:4a:39:3f:ea:
                    71:49:78:78:58:36:0f:90:0f:86:7e:03:00:ae:c2:
                    4b:93:4e:67:3c:71:c1:c0:8c:a5:c0:2c:c5:87:0c:
                    e2:ae:76:f2:0b:7b:b3:52:56:a2:b4:35:e7:cd:b3:
                    13:39:26:7d:18:88:21:4d:83:50:7b:c6:c9:1a:fc:
                    2c:d8:20:8f:6b:c7:f7:3c:e8:8b:78:d7:7e:5a:9f:
                    22:a1:d1:ee:b5:57:45:28:8f:98:b3:30:17:f6:b0:
                    aa:85:26:eb:eb:5c:43:b9:07:05:08:1b:c6:67:b6:
                    ba:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7E:D7:68:B4:74:29:BD:48:66:D4:59:52:8E:09:AE:91:F4:A9:FC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/177bed01-261c-46d0-a6bf-7f605df9b6f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:b4:46:c6:4b:b9:8f:a3:57:b7:ab:86:aa:5c:52:35:d6:47:
         d6:3b:47:b1:d5:89:1b:b0:bc:11:5e:fd:86:b6:d7:6a:4d:b0:
         6a:de:21:3e:b5:c5:59:9d:bd:79:0f:37:8c:b7:b6:02:07:ac:
         ce:2f:48:1f:74:68:4b:f9:89:f3:88:23:7d:9b:5f:d7:e3:33:
         d6:78:fa:ef:44:c8:de:82:05:17:01:c6:a1:04:35:a7:b5:c7:
         f2:94:51:a9:2f:29:1d:08:de:0f:5d:3e:86:62:1b:be:21:fd:
         9c:d4:92:a0:c1:90:4d:d5:7c:43:d5:64:6c:f6:35:19:df:bf:
         8b:19:24:32:56:92:5f:39:22:04:1c:40:60:34:de:a9:7e:35:
         13:e8:20:f1:c0:94:f7:2c:57:2b:64:26:7b:9b:77:51:d6:e8:
         3a:c7:d3:5e:ec:23:fe:83:c0:5d:01:7d:96:7e:6b:eb:c7:9f:
         56:07:ca:7e:29:70:a3:0c:c5:a9:a6:83:f0:c6:dc:ed:26:fb:
         cc:10:d5:a9:43:8d:b0:91:e8:3c:10:63:49:ed:0a:ab:36:13:
         4e:d1:d2:d4:48:c3:8c:47:56:b3:21:f7:40:7f:f1:d7:21:04:
         71:c0:9e:06:65:cd:c7:7d:ff:2b:be:74:bd:c3:93:9d:f2:c2:
         dc:3f:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:38:18 2025 by rpki-client