Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fee8c0a-7b7f-4886-a899-a31a331cbd8e.roa
File:                     1fee8c0a-7b7f-4886-a899-a31a331cbd8e.roa (raw, json)
Hash identifier:          JxtSwjYlk1hM2BJvVvIwF/jM7w4x+FYxexx2JT1sngc=
Subject key identifier:   88:DC:0F:AC:C4:0A:A3:7F:8C:FB:4D:94:FF:3E:23:35:1E:71:5E:F7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       55364118FC1957EBC7326304704174EE3C4346B8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fee8c0a-7b7f-4886-a899-a31a331cbd8e.roa
Signing time:             Thu 18 Sep 2025 19:39:41 +0000
ROA not before:           Thu 18 Sep 2025 19:39:41 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:36:41:18:fc:19:57:eb:c7:32:63:04:70:41:74:ee:3c:43:46:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:39:41 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=c467345df20710b8e117f889762aa37f3c85e8118c481a4a7b356a896a841ca0, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:c7:a6:8f:b3:95:07:c1:6a:55:ef:b7:f0:
                    43:fd:f6:c7:ac:9c:55:af:40:9c:ed:df:ea:0d:11:
                    b1:fb:88:01:ed:a6:ea:97:fa:0a:27:ab:99:b5:12:
                    f5:ae:d3:cc:45:d6:ce:1e:83:26:d5:95:1c:23:4d:
                    c4:00:c7:04:42:e4:2b:11:fd:a1:1a:14:19:b9:43:
                    f5:24:f2:55:77:7b:c4:cd:cf:59:78:8f:96:83:2b:
                    69:4b:95:6c:08:5f:4f:24:e9:ec:88:50:28:54:60:
                    0b:b9:7f:77:89:40:1f:9b:90:81:21:81:4a:59:6d:
                    f8:4a:98:e5:f2:7b:2f:37:b2:24:2a:22:7f:03:a5:
                    2e:9a:d4:d3:e2:59:bc:51:64:c6:6f:4b:f9:f2:69:
                    1c:22:63:d3:41:4a:9c:fa:a6:dd:d0:25:87:4e:68:
                    a0:73:b4:c4:bf:1b:b0:3d:fc:59:c3:1b:04:e6:64:
                    43:f2:10:9c:d6:1e:18:a9:d6:76:79:b8:79:bc:6c:
                    9e:8f:56:55:b4:2f:ac:db:3e:91:2b:3f:d3:26:b0:
                    b0:68:b6:71:72:c9:5c:8b:84:33:45:04:e9:3f:9e:
                    a6:16:a1:f5:55:1e:22:c5:44:2d:65:33:df:77:fa:
                    76:9d:28:ed:4b:d3:e4:c4:41:2f:fd:30:7e:df:c5:
                    8a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DC:0F:AC:C4:0A:A3:7F:8C:FB:4D:94:FF:3E:23:35:1E:71:5E:F7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fee8c0a-7b7f-4886-a899-a31a331cbd8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:6d:9d:8a:88:0d:b1:c5:e8:f9:fe:da:60:10:99:89:53:a9:
         ca:a0:2c:2f:b6:9f:40:37:e0:66:e2:c3:20:a4:ff:34:b4:d2:
         48:32:5f:79:ad:6a:d4:53:a0:fc:04:47:fc:63:5c:cf:e4:d5:
         01:0d:95:0e:24:d3:43:ec:b1:cc:93:c5:60:89:0b:61:f3:d7:
         31:b3:ef:5a:c1:a9:ab:c5:b3:4c:53:dd:45:16:a0:c4:77:e5:
         be:fb:e4:ef:72:9d:ea:c5:9a:a5:ac:d8:58:c6:c0:b3:5f:06:
         71:be:44:62:16:92:67:c0:f1:61:ee:00:af:11:d5:24:af:21:
         c4:21:fc:ec:a2:18:ff:53:77:30:b6:c5:50:f4:7c:1e:82:2f:
         56:e0:26:12:92:c8:dd:a3:1b:bc:78:9f:4d:22:55:c9:76:f1:
         c6:2f:11:27:62:75:a9:f4:72:7a:0e:a4:58:7b:ed:1b:ea:89:
         d2:39:c6:0e:c9:47:64:eb:69:e2:8d:bb:e3:42:07:be:8a:f9:
         da:f5:b9:60:f5:37:c3:bf:1c:93:62:27:c0:d1:37:4b:35:48:
         56:81:bf:01:38:95:6b:c3:57:3a:8f:a9:9d:16:d3:0f:48:bd:
         61:d0:ab:b1:ae:8e:c2:46:02:86:a5:05:c9:83:a9:ff:28:8b:
         c9:c8:a3:92
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVTZBGPwZV+vHMmMEcEF07jxDRrgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTkzOTQxWhcNMjUxMDIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNDY3MzQ1ZGYyMDcxMGI4ZTExN2Y4ODk3NjJhYTM3ZjNj
ODVlODExOGM0ODFhNGE3YjM1NmE4OTZhODQxY2EwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoWsemj7OVB8FqVe+38EP99sesnFWvQJzt3+oNEbH7iAHt
puqX+gonq5m1EvWu08xF1s4egybVlRwjTcQAxwRC5CsR/aEaFBm5Q/Uk8lV3e8TN
z1l4j5aDK2lLlWwIX08k6eyIUChUYAu5f3eJQB+bkIEhgUpZbfhKmOXyey83siQq
In8DpS6a1NPiWbxRZMZvS/nyaRwiY9NBSpz6pt3QJYdOaKBztMS/G7A9/FnDGwTm
ZEPyEJzWHhip1nZ5uHm8bJ6PVlW0L6zbPpErP9MmsLBotnFyyVyLhDNFBOk/nqYW
ofVVHiLFRC1lM993+nadKO1L0+TEQS/9MH7fxYobAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUiNwPrMQKo3+M+02U/z4jNR5xXvcwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzFmZWU4YzBhLTdiN2YtNDg4Ni1hODk5LWEzMWEzMzFjYmQ4ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADM9rAwDQYJKoZIhvcNAQELBQADggEBAJFtnYqIDbHF6Pn+2mAQmYlTqcqg
LC+2n0A34GbiwyCk/zS00kgyX3mtatRToPwER/xjXM/k1QENlQ4k00PsscyTxWCJ
C2Hz1zGz71rBqavFs0xT3UUWoMR35b775O9ynerFmqWs2FjGwLNfBnG+RGIWkmfA
8WHuAK8R1SSvIcQh/OyiGP9TdzC2xVD0fB6CL1bgJhKSyN2jG7x4n00iVcl28cYv
ESdidan0cnoOpFh77RvqidI5xg7JR2TraeKNu+NCB76K+dr1uWD1N8O/HJNiJ8DR
N0s1SFaBvwE4lWvDVzqPqZ0W0w9IvWHQq7GujsJGAoalBcmDqf8oi8nIo5I=
-----END CERTIFICATE-----
Generated at Fri Sep 19 08:02:13 2025 by rpki-client