Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b55f92a-4e41-4c13-a350-19677e8d8497.roa
File:                     6b55f92a-4e41-4c13-a350-19677e8d8497.roa (raw, json)
Hash identifier:          y5zDzlTWHM0yiKycqckvYI4PecuEVoxczjjGJ7uY8OY=
Subject key identifier:   E6:05:EF:25:88:0B:57:5A:31:CE:BD:BB:F7:41:11:46:16:AB:60:CB
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       67B82EC38C326391CC25EE2C4704F4D8AE49C3B2
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b55f92a-4e41-4c13-a350-19677e8d8497.roa
Signing time:             Thu 18 Sep 2025 19:52:18 +0000
ROA not before:           Thu 18 Sep 2025 19:52:18 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b8:2e:c3:8c:32:63:91:cc:25:ee:2c:47:04:f4:d8:ae:49:c3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:52:18 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=781839114e99fa316b8f2532cf9618c2fc66824cb7e5e6777c1973d84e2a3345, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c8:43:91:33:58:34:e0:3e:f2:8c:22:a9:2f:
                    21:39:86:87:78:79:21:f6:25:7c:26:57:e3:7b:a4:
                    b7:e2:28:47:22:6e:42:20:36:33:0d:59:87:f9:42:
                    05:33:1a:8b:99:6d:fe:16:2d:ac:88:0e:a1:1e:66:
                    20:4a:59:42:aa:eb:de:24:07:66:92:68:10:c7:86:
                    7f:25:9f:da:4f:34:36:61:17:3d:21:00:b4:87:e8:
                    09:19:3e:84:0f:1a:35:b7:ed:bf:8b:22:00:b9:c5:
                    89:24:cd:ec:fc:fd:3b:75:b5:93:ab:8a:c0:89:2e:
                    bd:f2:30:44:6e:8f:20:3f:34:ac:90:e3:60:2a:d5:
                    12:6d:fb:37:d0:e9:fb:19:dd:be:a4:4e:55:3f:b3:
                    79:59:67:9c:26:f5:d1:32:d0:ff:65:36:de:55:09:
                    2d:c0:45:d7:ce:a2:ed:6e:98:d5:d8:c7:88:a3:63:
                    f5:a1:a9:8a:7d:10:0a:27:a1:b7:92:e6:9d:e7:05:
                    7c:2d:0b:14:9f:f2:27:26:44:fd:fe:21:42:ef:f7:
                    33:bb:be:2e:6c:6b:57:b1:25:97:05:1d:1f:2c:ec:
                    9b:74:a1:e6:f6:12:09:af:fc:e7:96:cc:a0:c9:5c:
                    ec:83:df:3d:1c:66:6c:7c:bb:73:1c:12:4d:77:0d:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:05:EF:25:88:0B:57:5A:31:CE:BD:BB:F7:41:11:46:16:AB:60:CB
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/6b55f92a-4e41-4c13-a350-19677e8d8497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:1c:4b:b0:f6:cb:c6:89:dc:ac:92:3a:f5:d8:2a:73:2c:36:
         7c:85:c8:6d:3f:56:ae:33:36:ad:00:49:d2:a6:3e:38:be:9f:
         5a:7d:55:83:cb:1b:3f:7d:77:ee:1f:8c:6e:d4:85:0e:74:f3:
         1e:13:90:2e:12:65:59:e7:8b:fb:33:e9:72:48:48:67:e2:56:
         67:21:cc:d4:6b:d2:de:4c:4e:04:9e:1b:d4:87:1f:44:00:5c:
         11:bb:53:a3:a0:82:28:e3:16:91:fe:22:59:b1:d2:99:a6:a5:
         db:27:d7:a0:fe:1c:af:72:34:03:48:82:99:d1:b8:f4:cc:f5:
         8d:4a:fa:d7:73:33:33:77:3d:e8:e8:b6:86:3d:d9:c0:2a:cc:
         0a:3c:42:7b:55:62:36:2c:35:5b:74:74:ed:d0:dc:88:3d:d3:
         4f:6e:3c:5f:67:7e:03:dc:cf:78:5d:e1:f2:13:5d:50:9b:63:
         cc:5e:d5:ae:65:2e:09:97:98:63:04:9c:b5:ee:dd:ab:fd:11:
         9c:c7:4c:bb:e9:a7:94:a8:28:a4:dd:ab:52:ad:b2:24:a5:a1:
         87:03:b0:ad:59:37:13:94:b3:90:41:81:a9:f7:98:d3:ca:38:
         0d:5a:11:74:0b:3a:54:97:fc:ef:48:ca:cd:33:3c:df:a7:fa:
         ac:a7:25:6b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ7guw4wyY5HMJe4sRwT02K5Jw7IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTk1MjE4WhcNMjUxMDIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A3ODE4MzkxMTRlOTlmYTMxNmI4ZjI1MzJjZjk2MThjMmZj
NjY4MjRjYjdlNWU2Nzc3YzE5NzNkODRlMmEzMzQ1MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRyEORM1g04D7yjCKpLyE5hod4eSH2JXwmV+N7pLfiKEci
bkIgNjMNWYf5QgUzGouZbf4WLayIDqEeZiBKWUKq694kB2aSaBDHhn8ln9pPNDZh
Fz0hALSH6AkZPoQPGjW37b+LIgC5xYkkzez8/Tt1tZOrisCJLr3yMERujyA/NKyQ
42Aq1RJt+zfQ6fsZ3b6kTlU/s3lZZ5wm9dEy0P9lNt5VCS3ARdfOou1umNXYx4ij
Y/WhqYp9EAonobeS5p3nBXwtCxSf8icmRP3+IULv9zO7vi5sa1exJZcFHR8s7Jt0
oeb2Egmv/OeWzKDJXOyD3z0cZmx8u3McEk13DbjdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5gXvJYgLV1oxzr2790ERRharYMswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzZiNTVmOTJhLTRlNDEtNGMxMy1hMzUwLTE5Njc3ZThkODQ5Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALN++AwDQYJKoZIhvcNAQELBQADggEBACocS7D2y8aJ3KySOvXYKnMsNnyF
yG0/Vq4zNq0ASdKmPji+n1p9VYPLGz99d+4fjG7UhQ508x4TkC4SZVnni/sz6XJI
SGfiVmchzNRr0t5MTgSeG9SHH0QAXBG7U6OggijjFpH+Ilmx0pmmpdsn16D+HK9y
NANIgpnRuPTM9Y1K+tdzMzN3PejotoY92cAqzAo8QntVYjYsNVt0dO3Q3Ig9009u
PF9nfgPcz3hd4fITXVCbY8xe1a5lLgmXmGMEnLXu3av9EZzHTLvpp5SoKKTdq1Kt
siSloYcDsK1ZNxOUs5BBgan3mNPKOA1aEXQLOlSX/O9Iys0zPN+n+qynJWs=
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:16:22 2025 by rpki-client