Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2bb31ac-01a0-4e71-907b-7505af3898df.roa
File:                     a2bb31ac-01a0-4e71-907b-7505af3898df.roa (raw, json)
Hash identifier:          A67V/fFFqmnmqWiMaOXLbJDkTgCRRBDUfVCdVkGmWDU=
Subject key identifier:   6F:F0:93:C7:83:F7:C1:37:96:23:70:19:E9:20:69:DD:92:A8:69:70
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2A92504CB530239A9D5507B1717464142B65BA9F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2bb31ac-01a0-4e71-907b-7505af3898df.roa
Signing time:             Thu 18 Sep 2025 19:57:38 +0000
ROA not before:           Thu 18 Sep 2025 19:57:38 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.137.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:92:50:4c:b5:30:23:9a:9d:55:07:b1:71:74:64:14:2b:65:ba:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:57:38 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=476ca7a8bbc8fdc7e3607fb6fd4307b8a93a66da3fee589637b27863cfb20297, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:54:4e:3a:57:0a:9f:cd:3f:86:85:5d:4f:
                    4b:50:03:79:0b:ad:ba:a6:f4:60:f6:36:4e:e0:67:
                    49:b5:33:f7:b7:9c:49:9a:f6:e4:fd:d1:65:cc:37:
                    f2:3e:a0:33:98:53:2b:e5:c8:36:33:8c:13:f9:86:
                    d8:33:49:f8:76:e7:be:e9:66:6b:2a:30:4b:df:ac:
                    87:be:36:1a:80:3a:8a:3a:5c:25:41:cc:a9:73:b1:
                    6a:6d:db:b3:be:22:47:1c:1d:fb:b0:00:c8:10:10:
                    1f:b3:de:32:19:0e:7f:2f:bc:0c:85:93:7a:cc:19:
                    31:2e:02:04:cd:16:8e:2f:9e:57:0f:ae:9c:b2:99:
                    12:f1:6d:cb:74:57:16:f3:88:50:f9:67:85:ce:a1:
                    57:1e:bf:7b:20:d7:d3:f9:3c:b4:45:e8:bb:0c:fa:
                    96:8d:12:98:3f:3e:10:70:5e:ec:e3:94:ee:89:bf:
                    0f:b8:a9:f8:84:6e:66:0e:5b:cb:f5:89:0d:61:14:
                    30:97:3f:83:52:3a:ad:96:52:08:d4:c4:bb:40:bc:
                    f4:00:ef:34:ef:05:98:ad:1d:3d:c2:41:ab:9a:f3:
                    ee:16:c9:96:0b:9e:7f:33:ea:18:fd:81:aa:75:90:
                    7a:7c:22:b0:60:c9:5e:79:8b:a4:a6:46:24:5c:95:
                    b7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F0:93:C7:83:F7:C1:37:96:23:70:19:E9:20:69:DD:92:A8:69:70
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/a2bb31ac-01a0-4e71-907b-7505af3898df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:b9:03:45:ea:ff:d1:d5:4d:7f:c1:6f:88:f9:16:23:60:d6:
         0e:04:a6:40:b3:18:d7:66:48:fb:a4:72:c5:3e:25:df:b1:71:
         fa:41:cb:39:a0:39:08:19:80:30:3e:4e:1d:4f:86:d4:67:5d:
         3b:85:45:21:b0:3a:14:d6:2e:b4:40:ab:da:95:64:aa:84:56:
         a1:e1:9b:da:a2:e4:07:76:7e:d2:6d:b4:97:e1:f7:39:83:11:
         d5:cb:84:e1:14:17:a5:af:8d:9f:89:a0:33:71:88:ed:95:8a:
         51:a2:27:65:3d:16:cc:4f:ee:fd:6b:2f:e6:59:c2:25:de:7a:
         1d:a6:ab:de:d9:e5:41:1d:aa:3c:74:f4:76:b7:61:a6:c8:46:
         25:69:2c:f7:e7:5e:05:23:19:cb:98:9f:1e:e1:5b:3a:e2:13:
         49:f3:60:79:4c:a5:3e:6e:96:f4:a5:b8:00:d1:18:6f:00:cb:
         a8:5c:43:94:ac:e7:bd:f8:90:d1:0e:85:c5:48:8a:e6:bb:61:
         ca:8d:69:55:be:45:3a:d0:51:fb:47:27:db:16:0d:15:a6:af:
         bc:60:7f:6f:ab:1a:e9:24:d4:40:8e:a7:a1:9e:10:a7:8a:96:
         88:eb:07:7f:81:c0:c6:de:76:a1:3b:32:0a:10:ed:60:c8:d5:
         71:55:e1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:06:31 2025 by rpki-client