Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46c9b07d-d588-4151-925e-9973bff7595d.roa
File:                     46c9b07d-d588-4151-925e-9973bff7595d.roa (raw, json)
Hash identifier:          OSgUBkfDhf0fgEFgC7QaRj9Mmk4nUIevEZJkdXUO9f0=
Subject key identifier:   93:A8:11:FF:73:C2:AD:1F:D4:90:41:15:64:72:89:90:72:0D:CA:EA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       197D7515282408BAD60F3D6D396C998791FEECF6
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46c9b07d-d588-4151-925e-9973bff7595d.roa
Signing time:             Thu 18 Sep 2025 19:39:56 +0000
ROA not before:           Thu 18 Sep 2025 19:39:56 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7d:75:15:28:24:08:ba:d6:0f:3d:6d:39:6c:99:87:91:fe:ec:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:39:56 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=83ada3a1e93fc03c07657949dffe8f6923f73b2273b884bee6d555ebe05325a7, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:15:f2:2c:07:61:c6:91:d1:00:30:ef:7e:
                    11:32:a7:19:8a:da:4f:a8:fa:22:2b:53:c9:a5:5f:
                    67:38:97:9a:c6:5c:41:76:85:db:a3:19:43:4b:a7:
                    90:4c:0b:bd:ae:c3:23:d9:52:45:70:14:85:47:91:
                    eb:de:fd:f5:2d:e1:8d:19:54:62:11:83:70:97:04:
                    b6:ca:49:d6:a7:79:76:57:70:f5:f5:1a:aa:88:c7:
                    3b:19:31:6b:78:f3:86:2f:bb:76:9e:26:e9:32:c6:
                    f2:9f:9e:08:a3:91:9d:06:e2:9c:4b:86:05:76:9f:
                    35:2a:db:98:55:3a:10:d4:b7:02:de:5c:83:e0:7e:
                    5f:4b:1a:4b:68:a1:5c:b5:f3:28:74:f2:32:19:3a:
                    30:86:67:df:aa:38:e2:c9:9c:50:01:f3:1e:04:94:
                    2f:94:da:9b:d8:ed:cd:22:37:17:85:ae:52:a9:4e:
                    8e:39:69:aa:b3:7e:eb:7c:0e:79:0d:3b:34:6a:bc:
                    61:a7:28:91:48:62:99:71:8b:3b:fa:9d:b1:35:69:
                    45:0d:0c:54:c6:b7:b6:3c:95:26:6a:fe:5c:4e:85:
                    03:58:d0:b2:2a:c1:b8:c2:9e:4b:26:1a:5e:ad:08:
                    d0:22:0c:34:c8:f2:c0:b0:5f:47:6e:89:ea:86:46:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A8:11:FF:73:C2:AD:1F:D4:90:41:15:64:72:89:90:72:0D:CA:EA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/46c9b07d-d588-4151-925e-9973bff7595d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:25:f7:95:17:10:77:8b:e3:c8:0f:00:d0:42:f0:ff:81:f8:
         1b:92:be:1f:83:d5:5f:d1:20:a9:7e:80:d6:a1:ac:cd:32:b7:
         74:41:b9:4e:9d:23:db:69:b7:39:91:ab:c9:8b:6c:62:57:04:
         1a:1e:21:59:e7:aa:63:8a:f7:43:5f:57:06:3a:eb:f2:bc:ef:
         ba:84:c4:38:58:a0:a5:bd:fe:ac:81:82:34:86:e7:6d:01:ae:
         eb:69:9f:8d:60:84:53:3d:ac:b9:de:75:27:60:ea:6d:99:b9:
         30:e3:07:a3:8d:66:1e:d8:2e:62:f1:b6:94:d7:de:66:b9:31:
         96:a9:51:16:ec:38:01:8c:a5:af:88:d2:82:24:8b:8b:ab:16:
         b2:f6:83:05:ec:b6:dd:d3:e1:90:be:1a:ed:ec:0e:7a:c6:af:
         90:c9:29:3f:a2:be:75:06:9a:67:d8:d4:bd:d2:2f:a8:36:3e:
         3f:24:71:71:c1:80:dd:e9:fc:b5:bd:90:dd:f8:a3:47:ca:7c:
         55:66:f1:18:18:73:0c:49:84:36:6b:29:a1:35:3e:c5:3d:32:
         fa:cc:c6:81:6c:9e:cd:63:00:eb:c2:6f:3b:11:00:18:47:2e:
         84:2c:5b:c1:ed:7a:e1:a0:b2:85:fb:ff:a7:f0:ad:a3:45:01:
         c9:59:c6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:10:31 2025 by rpki-client