Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4572f970-7843-4c7d-acbd-2a8779e47ceb.roa
File:                     4572f970-7843-4c7d-acbd-2a8779e47ceb.roa (raw, json)
Hash identifier:          CdSYG55Epmf4Z3aNNvV8ahZBZGjkii6YSUwKswL1SjE=
Subject key identifier:   C3:1C:5A:1B:58:8D:F2:8B:A7:8B:ED:1B:9E:F6:C8:A9:A4:F7:A8:29
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2C1450E130B718B63536F8DAED9CFB369701DB87
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4572f970-7843-4c7d-acbd-2a8779e47ceb.roa
Signing time:             Thu 18 Sep 2025 19:52:51 +0000
ROA not before:           Thu 18 Sep 2025 19:52:51 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:14:50:e1:30:b7:18:b6:35:36:f8:da:ed:9c:fb:36:97:01:db:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:52:51 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=ac8211122dab5b739041fc430211155e4553b97f275ec8fc2f03f8ec8959745b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:08:e6:e4:82:72:15:74:2b:70:53:84:1f:
                    6a:4f:71:a8:70:7d:76:bf:5d:22:ba:2c:c3:80:88:
                    f5:a0:ae:38:4e:f6:7e:65:39:8d:4d:80:da:22:c9:
                    5e:6d:23:c4:c8:ec:09:db:dd:8e:ba:50:7f:4b:47:
                    53:9e:e1:39:0f:fd:4b:1c:aa:d1:e8:3f:f5:a2:79:
                    d2:dd:8e:87:cc:61:ca:82:dc:ca:fb:d9:ef:2f:85:
                    2b:f7:be:ed:27:1e:c1:75:fc:47:33:ca:00:9b:cc:
                    71:1e:a6:71:41:7d:80:83:78:d7:26:dc:9e:14:ef:
                    9d:05:c2:f2:23:d4:75:fb:47:12:11:b3:c0:7b:64:
                    3b:22:02:bb:d2:51:c3:16:18:b2:c7:e7:6d:07:f5:
                    81:ec:29:13:02:2f:e5:80:a0:b9:33:ba:66:5d:7b:
                    75:c0:05:95:03:55:35:a4:92:95:d6:58:18:ff:d1:
                    6d:e8:64:09:78:5f:3e:99:e2:9e:3d:29:a6:4f:99:
                    a8:b8:81:e6:e1:91:d6:5c:5a:9f:12:02:c6:1c:cd:
                    90:bb:91:89:70:1f:7c:24:a2:53:1b:b6:1e:39:0d:
                    11:de:38:84:3b:01:3d:1d:c7:82:4d:a5:5d:2a:aa:
                    1f:b9:1c:fa:0f:88:00:56:aa:6a:4d:b9:0d:8c:1a:
                    75:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1C:5A:1B:58:8D:F2:8B:A7:8B:ED:1B:9E:F6:C8:A9:A4:F7:A8:29
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4572f970-7843-4c7d-acbd-2a8779e47ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:ab:0f:0c:53:12:2d:82:03:69:ac:1f:73:f5:1a:18:6b:ad:
         11:95:ff:ca:43:26:7d:b2:24:46:6d:af:be:57:33:12:08:0f:
         94:da:43:b5:60:76:07:6f:7f:7e:ba:dd:af:e3:2d:0d:20:fd:
         27:3c:2d:03:8f:88:b5:80:e3:24:bf:03:cc:fa:50:68:8b:99:
         55:f0:87:b1:1b:fc:17:f5:e8:44:0f:e3:f1:df:7c:5a:c5:5e:
         07:4d:57:7f:82:6a:57:2f:92:c0:d8:c8:50:ff:1c:e5:81:a8:
         9f:9c:e8:80:e8:86:ef:5d:96:5b:79:e2:2f:fe:b1:b4:a2:7e:
         42:ca:86:56:09:cc:eb:f9:4d:f3:81:f9:b7:72:98:2e:bc:4b:
         07:26:a5:88:c9:47:74:4b:e5:48:d4:0c:ca:60:db:dc:e7:68:
         79:0a:f8:d2:ea:03:d8:a5:4f:57:b5:fd:a9:55:0c:71:fd:b2:
         d3:98:76:17:d9:5a:af:d0:3e:31:37:ee:66:86:77:1c:43:f6:
         dc:e9:46:5e:90:0e:3e:30:60:d2:40:bf:2c:c5:57:f4:5f:21:
         4b:f9:28:6d:5f:e4:5f:04:15:1b:39:3e:d8:68:34:e3:79:85:
         59:ab:1c:b4:c7:bb:6b:d1:93:7e:e4:3c:04:1d:24:1d:6c:62:
         9f:73:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:06:36 2025 by rpki-client