Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/981f3ae3-dc19-4bda-b83b-6478b60f8c89.roa
File:                     981f3ae3-dc19-4bda-b83b-6478b60f8c89.roa (raw, json)
Hash identifier:          CBJgQSIeaENYjGpYEtIa6UHvBOPTvHxRgq8jT4nywqI=
Subject key identifier:   D5:3F:5A:6B:C1:85:22:78:73:C6:E7:A4:70:EC:95:86:16:DA:3C:8C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2662C79ED3902043B8700D0972D633B8C09D4917
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/981f3ae3-dc19-4bda-b83b-6478b60f8c89.roa
Signing time:             Thu 18 Sep 2025 19:39:58 +0000
ROA not before:           Thu 18 Sep 2025 19:39:58 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:62:c7:9e:d3:90:20:43:b8:70:0d:09:72:d6:33:b8:c0:9d:49:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:39:58 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=f23fb8756bb5892863b0cd972c2b6ec5a02c12ad85576d1b36aa6b2cb49e50f8, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:9e:80:1d:cd:27:17:6f:f9:1d:96:ae:10:
                    ae:c6:27:21:db:bc:1f:33:97:7b:7c:d3:8c:4b:41:
                    54:8a:49:a8:ed:c9:4f:a3:43:7d:47:c0:66:10:cc:
                    41:ef:c7:d8:df:6f:88:e5:86:d0:a1:55:bd:f5:d0:
                    89:70:1f:6c:e4:38:4e:bb:ef:da:d0:72:73:3c:9c:
                    a3:25:d9:f9:10:bd:4e:b6:b1:06:38:8c:bc:a7:bd:
                    f7:98:8b:a2:06:37:ea:5a:50:e7:72:dc:30:e5:92:
                    51:7b:e8:a1:93:cf:5f:79:47:db:5b:71:07:dc:2c:
                    d7:31:dd:6f:e9:f8:7f:5e:b1:1e:21:c3:ce:51:c8:
                    d6:77:1b:00:7f:f2:ca:ad:69:4b:c2:e6:db:24:f6:
                    96:62:2c:a2:d0:d8:5c:51:b8:31:12:b8:1c:e5:08:
                    f2:d3:7b:64:a8:25:f2:79:76:4b:02:44:ea:fa:f2:
                    0d:cd:c5:d3:f1:12:69:5e:cd:e8:55:a1:11:19:a4:
                    28:5d:c8:42:d1:97:4c:09:21:1a:96:2c:ec:e1:ff:
                    6d:64:e3:c7:01:e5:f0:99:e8:43:10:0f:af:89:47:
                    87:e2:3e:e7:3f:8d:53:34:ce:ee:27:b8:1a:eb:5b:
                    b9:1e:82:6d:68:97:7b:db:2a:27:70:34:19:53:9e:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3F:5A:6B:C1:85:22:78:73:C6:E7:A4:70:EC:95:86:16:DA:3C:8C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/981f3ae3-dc19-4bda-b83b-6478b60f8c89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:b0:94:b3:b7:5a:a5:08:07:74:f8:f7:83:37:59:36:a6:
         03:c0:d1:fb:77:b3:cd:52:3e:df:c9:e7:38:05:3b:07:06:2f:
         40:1e:2b:2c:9c:4e:08:3b:be:6c:f6:9b:d7:e0:bf:38:3f:af:
         9d:bc:5b:f7:5f:6c:b6:9b:a8:e2:9c:9a:70:34:0a:c4:97:7c:
         66:d2:cd:e5:0d:62:27:0a:84:c2:85:e5:2c:cb:bb:01:e7:de:
         33:8f:eb:d8:45:8e:3f:74:ad:f2:29:33:ad:71:2d:d1:67:7b:
         88:d3:50:92:c4:96:4a:f9:7d:c8:d3:93:0e:98:5d:1b:6e:10:
         de:93:fa:1d:75:ce:f9:62:6b:a9:dc:6d:8b:73:a2:56:80:57:
         61:d1:47:16:23:9c:12:74:df:2c:9c:54:a0:73:e8:48:57:3b:
         38:a7:43:0f:76:9a:ce:58:c8:5d:8d:2e:78:10:5d:b3:91:78:
         41:9a:30:27:b1:aa:52:c2:74:f2:fd:b1:f0:75:69:aa:ef:76:
         2b:d2:b0:77:2d:67:23:c6:e2:29:03:4d:ba:a8:cb:da:46:b2:
         4e:00:11:1a:57:af:e6:5b:8a:a6:0c:90:1a:b1:61:9a:3e:d6:
         2f:2b:21:97:73:62:f9:46:69:b2:79:86:70:5a:6e:6c:b8:4a:
         ec:c8:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:38:20 2025 by rpki-client