Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2605890-7b4e-4aa1-ad8c-6fd4cc72b304.roa
File:                     b2605890-7b4e-4aa1-ad8c-6fd4cc72b304.roa (raw, json)
Hash identifier:          p9rSLq8NrIcPijPDEst2aeAqOZW4memVD2tSihe8u7w=
Subject key identifier:   08:53:8A:FC:DC:29:FC:9B:6A:2C:3C:B9:FF:43:1B:DB:DE:32:1A:B7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       17D7EEA6C4946AE9806F00149AAC8E491AAD0E4E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2605890-7b4e-4aa1-ad8c-6fd4cc72b304.roa
Signing time:             Thu 18 Sep 2025 19:52:29 +0000
ROA not before:           Thu 18 Sep 2025 19:52:29 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d7:ee:a6:c4:94:6a:e9:80:6f:00:14:9a:ac:8e:49:1a:ad:0e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:52:29 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=b8abcd6d8ea353aae7984fb66ba96ca35834771bb0579e2c48b32f99364774f1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5e:a5:5d:5a:63:8b:71:45:7f:3c:de:6d:05:
                    8b:30:75:ed:62:ca:91:e8:11:ea:1d:b1:94:73:09:
                    70:be:3e:6b:84:7a:50:37:9d:55:89:45:66:b6:ce:
                    ad:8f:bb:a5:c9:28:94:36:47:cd:65:ea:7d:f6:4c:
                    57:fa:e3:2d:34:6b:88:bd:74:3f:ab:56:99:9c:ce:
                    ed:ac:c4:59:da:8a:28:cf:b4:56:ed:bb:23:10:bd:
                    50:94:71:5d:50:2d:50:34:56:79:58:e6:ee:0f:1e:
                    fb:2b:b7:03:3d:c4:cc:b2:c9:e3:5d:5d:0a:19:99:
                    0d:00:ff:94:f8:f8:6a:a4:58:cb:da:47:e2:07:21:
                    6a:e7:3a:d3:2c:2a:24:8f:c2:6f:e9:52:92:36:84:
                    38:b0:ad:48:99:90:9e:24:3f:df:59:5c:71:46:5b:
                    49:f6:59:77:07:a0:9c:e2:a7:3a:7e:25:4a:6e:18:
                    23:cf:12:78:77:18:83:1f:07:89:ae:7f:d0:0b:02:
                    e4:0a:38:ce:1e:c9:eb:bb:13:76:68:be:a9:b9:09:
                    fd:9c:3b:de:7b:bf:21:76:2d:68:bf:65:8c:f4:d1:
                    3f:61:c5:d4:d1:eb:8d:32:3a:51:b5:ea:27:97:5b:
                    ab:f8:3d:39:b4:f5:d4:0e:ce:ac:35:3d:76:b2:9e:
                    04:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:53:8A:FC:DC:29:FC:9B:6A:2C:3C:B9:FF:43:1B:DB:DE:32:1A:B7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b2605890-7b4e-4aa1-ad8c-6fd4cc72b304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:1c:06:4b:48:6f:52:ce:54:c1:bd:01:f7:75:30:a7:37:5c:
         45:07:d1:26:07:7e:bd:ab:bc:16:51:84:a0:a7:9e:61:8a:d9:
         e8:e7:b5:0c:ee:5c:63:af:b9:ec:00:14:1a:9a:d5:25:8f:24:
         00:9d:ab:41:fc:92:40:fb:9c:78:d2:e1:69:f9:ea:e0:5a:63:
         66:e9:03:b9:88:db:17:55:06:8f:03:61:e1:85:02:ee:a0:f6:
         dd:14:4c:48:91:65:06:ae:48:30:c7:d6:39:35:18:3b:60:32:
         51:82:70:0b:72:a2:d3:05:60:8e:06:e7:90:35:a7:c5:f6:75:
         e8:52:f2:9b:bf:cc:d1:6f:19:d4:6d:0a:4f:09:2b:63:4b:60:
         94:74:87:4a:d8:a2:90:54:e1:53:61:bc:d9:c8:1a:f1:b6:a2:
         31:20:93:f2:e6:8d:89:4e:ba:98:a4:c5:0d:b0:fd:4c:62:78:
         d3:a5:74:d1:af:35:9c:0e:0a:4f:3d:c3:d7:6c:e4:7b:50:50:
         00:5c:32:a3:2f:8a:d3:cd:69:c5:a0:a8:b2:a7:c1:0a:28:27:
         77:d9:1c:ae:f7:2f:09:b7:c3:c6:e2:d2:d6:14:f1:fc:c8:f6:
         0b:df:25:52:c4:a5:c2:f9:58:7a:8c:83:d7:df:05:44:da:e2:
         64:18:c2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:19:17 2025 by rpki-client