Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/592b4c7f-e2ce-418a-be0b-94d318db5c81.roa
File:                     592b4c7f-e2ce-418a-be0b-94d318db5c81.roa (raw, json)
Hash identifier:          ZJNmDwqfYy/Hx2E7exr3ra++QkMArkZH5JtSV46IagU=
Subject key identifier:   1D:1C:A3:1B:C1:78:AA:36:E2:C3:4E:BC:14:53:CA:BA:4A:EF:7A:94
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       354FC5CF8D9AA08405C9A0C21F5B787B6CE433DF
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/592b4c7f-e2ce-418a-be0b-94d318db5c81.roa
Signing time:             Thu 18 Sep 2025 19:39:47 +0000
ROA not before:           Thu 18 Sep 2025 19:39:47 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4f:c5:cf:8d:9a:a0:84:05:c9:a0:c2:1f:5b:78:7b:6c:e4:33:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:39:47 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=f0a8e429c9283e524a25bd8a02b6131fd1acdd73facc0a28a46797433833e2d2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:5a:42:fb:82:94:e3:91:e1:43:b3:79:8c:
                    bb:d7:c1:01:81:0e:9c:47:be:af:40:f6:75:9e:c3:
                    e4:1e:48:68:fa:51:9a:7d:59:55:70:2c:40:d7:f3:
                    e1:35:4b:56:b0:09:ee:c2:0c:f2:50:de:d2:fd:cc:
                    06:2d:21:64:c6:f2:8d:13:2e:91:aa:31:f2:36:38:
                    79:82:c0:b8:5d:8d:a6:32:62:93:11:2a:18:77:21:
                    b4:da:61:b6:5c:05:99:3c:88:ed:d8:af:ae:87:7a:
                    5e:ed:5d:03:10:4d:ee:b2:15:01:65:66:65:e5:8e:
                    89:05:f9:12:41:2a:18:30:cb:02:e0:8b:4c:62:07:
                    cd:b4:84:13:e9:a0:fd:fe:8d:87:59:b8:60:1f:06:
                    6e:6f:60:22:3d:17:a2:0e:0e:d4:2f:6f:ff:42:3a:
                    b6:cc:73:4d:3d:69:25:c9:c8:8f:3b:e0:4e:b6:8e:
                    02:5f:40:65:46:d7:7c:06:7e:da:63:07:48:79:74:
                    63:39:32:fc:38:b4:20:4b:b0:1d:f2:61:b4:80:bc:
                    64:03:6d:c9:ce:32:99:a7:e0:58:c9:9a:3f:0e:69:
                    f9:d3:4e:2f:bb:7c:11:64:82:25:d6:4d:2d:c8:de:
                    7e:a8:23:7f:03:0d:08:d6:95:c3:45:14:98:5f:40:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1C:A3:1B:C1:78:AA:36:E2:C3:4E:BC:14:53:CA:BA:4A:EF:7A:94
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/592b4c7f-e2ce-418a-be0b-94d318db5c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:c7:f0:d5:b6:e9:97:ad:09:18:8c:ca:b3:0d:21:f5:ca:8a:
         42:b0:12:c1:de:2b:3d:7a:64:58:88:1d:80:91:2b:36:de:ff:
         de:13:1a:ce:ef:b8:30:5e:e9:52:7c:ef:cf:27:7b:1f:31:da:
         53:46:bf:71:49:c1:ec:2d:48:68:d7:c6:4f:85:45:19:2d:b6:
         1c:f9:9b:22:38:49:5c:d3:28:f5:a6:99:4f:68:b8:b6:9c:7d:
         91:0d:5f:f8:04:e9:05:54:ef:13:f8:26:38:7e:a6:55:69:92:
         2e:50:d8:3a:4c:4e:c1:8e:71:56:d6:b2:9a:ff:7c:f9:cb:d4:
         a4:cf:6c:6c:d9:75:f5:17:6e:91:ea:aa:88:d1:52:47:9f:de:
         11:60:5c:92:52:f4:7f:0c:e8:f2:67:4f:28:02:85:34:6f:23:
         b4:e8:38:11:42:73:67:dc:a1:61:1b:33:84:ff:89:21:db:64:
         79:57:89:ff:3c:a2:a2:15:7d:6b:f8:04:d0:82:62:06:02:6f:
         09:10:c6:41:54:60:c5:43:de:39:91:12:7a:53:f4:ab:73:67:
         50:64:56:8c:a7:19:19:21:79:84:d6:0a:65:9f:4b:d4:c7:3a:
         44:eb:57:4a:7d:fa:23:b3:ae:fd:7e:58:ed:d2:43:59:9f:e9:
         6c:df:4b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:38:15 2025 by rpki-client