Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d59817e-f27b-40f8-a374-4d35dfcce928.roa
File:                     4d59817e-f27b-40f8-a374-4d35dfcce928.roa (raw, json)
Hash identifier:          uSW/RegjNmKv8xCTQzGXZyYZwN7oi/sthed2Xu7FfpE=
Subject key identifier:   FE:8B:EF:FD:8C:1B:47:5B:60:CE:94:DE:29:33:02:D6:3C:8B:68:21
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       782DC3EAD6E573A43FE31E545B23985AF0B6FA4D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d59817e-f27b-40f8-a374-4d35dfcce928.roa
Signing time:             Thu 18 Sep 2025 19:54:41 +0000
ROA not before:           Thu 18 Sep 2025 19:54:41 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2d:c3:ea:d6:e5:73:a4:3f:e3:1e:54:5b:23:98:5a:f0:b6:fa:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:54:41 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=f79d7316b409a54b1cbc45c7a73eff35ce75283c520ff81dbbeffd90cfc15ee5, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:34:13:54:16:6b:eb:b6:12:f1:78:2a:70:32:
                    d7:a2:3a:65:74:a1:45:b1:95:c9:23:74:fc:07:44:
                    d6:c2:fc:9c:ef:9d:e5:51:bb:3f:eb:df:b5:2e:17:
                    50:e1:72:5a:4f:89:aa:91:55:28:07:16:33:aa:18:
                    05:04:53:dd:c5:b7:b0:8b:dd:e9:0b:18:0d:53:50:
                    f0:ea:c4:cf:d3:58:30:a4:c9:d6:16:52:16:a6:07:
                    1e:fb:07:9d:2b:41:ce:ea:cc:2b:aa:eb:26:84:3b:
                    bc:91:fc:99:e4:20:84:80:3a:7b:f9:90:aa:fa:fd:
                    f7:7a:12:26:37:5c:5c:e0:dd:76:66:54:7f:0c:66:
                    9c:01:88:1d:db:16:ce:00:d0:d3:60:a0:7d:b0:b6:
                    ba:c0:7b:d9:1c:66:06:b3:46:00:11:21:b9:e6:2c:
                    ca:b7:df:e4:a2:a8:d0:df:cb:38:31:e2:21:9b:94:
                    11:5b:aa:8c:bd:23:fd:60:53:f7:34:ff:cf:a6:5d:
                    bd:b2:5e:05:83:38:1b:6d:8f:e2:95:13:b1:3b:36:
                    0e:bc:aa:80:a7:35:85:52:ca:9a:6c:20:9c:9c:e8:
                    5d:02:af:3b:b8:47:8a:cb:98:b2:f5:86:2c:81:4c:
                    fe:ca:4c:a6:e3:99:a0:89:c2:bc:b8:49:c6:53:f0:
                    0d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8B:EF:FD:8C:1B:47:5B:60:CE:94:DE:29:33:02:D6:3C:8B:68:21
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/4d59817e-f27b-40f8-a374-4d35dfcce928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:c0:d7:8b:b3:e0:b8:4d:9c:57:85:c8:c5:76:0b:dc:4c:c9:
         bc:71:fa:4c:f0:a9:6f:6d:98:77:a4:d2:f6:65:0d:33:ff:ad:
         4d:21:16:c0:1a:2b:b5:ce:72:d6:48:b6:a7:d1:7e:79:c8:c6:
         32:9f:e8:3e:84:67:ad:bc:ef:ec:17:14:b3:7d:d4:e7:6f:ce:
         a2:0d:ce:30:2e:2c:2b:2c:2e:d0:e8:28:59:87:c7:d7:04:5f:
         d8:9d:ec:55:95:5b:69:1d:64:a4:35:52:ff:47:11:24:86:94:
         98:54:44:44:22:b9:9a:1c:3d:55:c7:a7:7d:cc:23:e1:70:79:
         98:21:c1:a9:d9:88:bf:2d:bb:56:2b:d5:3a:7d:ad:d1:95:2d:
         e5:09:9e:d0:fc:ec:d2:5f:df:6e:89:09:e8:f5:5c:13:7b:2f:
         e0:27:dc:1f:cb:30:ee:90:43:be:24:b5:f2:27:60:e4:61:2d:
         0c:20:87:ea:a2:e3:52:68:26:2c:c7:f0:fe:f0:ed:54:5b:b5:
         3c:52:9e:9b:bc:7a:d7:f2:54:74:62:02:42:4a:ae:32:6b:37:
         7c:1a:33:e7:7b:1e:44:49:6e:55:43:d0:07:16:e9:08:fc:9c:
         ec:5b:f6:96:67:d1:fd:6d:63:7b:8c:66:ee:32:9e:ab:49:85:
         7c:2a:7d:38
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeC3D6tblc6Q/4x5UWyOYWvC2+k0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTk1NDQxWhcNMjUxMDIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNzlkNzMxNmI0MDlhNTRiMWNiYzQ1YzdhNzNlZmYzNWNl
NzUyODNjNTIwZmY4MWRiYmVmZmQ5MGNmYzE1ZWU1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmNBNUFmvrthLxeCpwMteiOmV0oUWxlckjdPwHRNbC/Jzv
neVRuz/r37UuF1DhclpPiaqRVSgHFjOqGAUEU93Ft7CL3ekLGA1TUPDqxM/TWDCk
ydYWUhamBx77B50rQc7qzCuq6yaEO7yR/JnkIISAOnv5kKr6/fd6EiY3XFzg3XZm
VH8MZpwBiB3bFs4A0NNgoH2wtrrAe9kcZgazRgARIbnmLMq33+SiqNDfyzgx4iGb
lBFbqoy9I/1gU/c0/8+mXb2yXgWDOBttj+KVE7E7Ng68qoCnNYVSyppsIJyc6F0C
rzu4R4rLmLL1hiyBTP7KTKbjmaCJwry4ScZT8A2tAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU/ovv/YwbR1tgzpTeKTMC1jyLaCEwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzRkNTk4MTdlLWYyN2ItNDBmOC1hMzc0LTRkMzVkZmNjZTkyOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATN+9AwDQYJKoZIhvcNAQELBQADggEBAJfA14uz4LhNnFeFyMV2C9xMybxx
+kzwqW9tmHek0vZlDTP/rU0hFsAaK7XOctZItqfRfnnIxjKf6D6EZ6287+wXFLN9
1OdvzqINzjAuLCssLtDoKFmHx9cEX9id7FWVW2kdZKQ1Uv9HESSGlJhUREQiuZoc
PVXHp33MI+FweZghwanZiL8tu1Yr1Tp9rdGVLeUJntD87NJf326JCej1XBN7L+An
3B/LMO6QQ74ktfInYORhLQwgh+qi41JoJizH8P7w7VRbtTxSnpu8etfyVHRiAkJK
rjJrN3waM+d7HkRJblVD0AcW6Qj8nOxb9pZn0f1tY3uMZu4ynqtJhXwqfTg=
-----END CERTIFICATE-----
Generated at Fri Sep 19 04:37:53 2025 by rpki-client