Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3690ae7-599f-481b-adce-ff62babd51d5.roa
File:                     b3690ae7-599f-481b-adce-ff62babd51d5.roa (raw, json)
Hash identifier:          YifSwnwMr1TVKM0lnb6fbX2Q0NsZVr8d9Hc8kM7Q4IE=
Subject key identifier:   81:46:2F:3D:13:5A:DA:DD:2D:EE:B4:34:69:C3:A2:44:96:EE:48:BA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3EBF19EE209B4ED928DB4788119D3799B22FAA10
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3690ae7-599f-481b-adce-ff62babd51d5.roa
Signing time:             Thu 18 Sep 2025 19:52:31 +0000
ROA not before:           Thu 18 Sep 2025 19:52:31 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bf:19:ee:20:9b:4e:d9:28:db:47:88:11:9d:37:99:b2:2f:aa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:52:31 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=bd0762bd9bf7bd96d5506b10126235e794d32bad917264415f1204e258c393c2, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6d:f2:03:bd:d9:36:6d:04:d7:42:d3:17:04:
                    3f:73:a4:8f:d4:5d:2e:35:f9:3d:31:6e:ea:9c:1d:
                    9f:50:b4:b9:39:05:d1:7b:76:01:b2:66:ee:a6:85:
                    2a:64:73:b4:0b:44:2d:b5:1a:68:f6:c1:ee:d3:e8:
                    3c:50:05:c9:21:5e:d7:9a:89:aa:bf:40:80:91:68:
                    c6:6b:c0:60:27:9b:ac:2b:8a:21:67:6f:2a:d0:53:
                    be:19:d6:bb:4e:c6:bc:72:19:b8:92:8f:97:90:78:
                    e3:6e:40:6f:74:66:88:9b:f6:55:96:05:c1:c3:02:
                    6d:0d:ba:52:0d:36:b5:f4:47:6e:19:de:9f:b8:aa:
                    6c:4a:18:55:ac:f9:c6:13:8d:73:d7:72:96:fd:33:
                    1b:47:81:36:7a:5a:a9:95:7d:40:93:8c:ca:fd:10:
                    26:b0:91:1b:31:34:f4:7c:6d:cf:3f:5a:53:e1:04:
                    13:50:41:86:7b:76:fa:4b:ef:8c:be:7b:dd:70:fb:
                    ec:76:6c:5a:48:2e:0c:01:7f:9c:54:46:e7:9b:cd:
                    50:7c:84:11:67:aa:6b:b1:1d:55:a4:c9:c5:45:67:
                    f3:c3:ae:f3:a8:af:9f:be:ab:24:2e:77:e2:6b:ec:
                    63:02:27:2d:53:6f:37:ff:db:1c:a7:87:3b:5d:05:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:46:2F:3D:13:5A:DA:DD:2D:EE:B4:34:69:C3:A2:44:96:EE:48:BA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b3690ae7-599f-481b-adce-ff62babd51d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:2c:e7:a9:12:ff:be:ad:f6:3f:c5:9a:6a:85:30:ea:6a:6f:
         b8:b8:41:b1:40:cc:93:78:03:10:16:ea:6c:13:8c:37:05:1e:
         dc:51:05:12:31:9f:91:b5:8d:93:cb:c1:21:82:d6:52:bd:d9:
         c3:bb:f7:6d:3a:8b:2b:90:53:9d:d6:64:fe:f2:45:c1:0b:62:
         31:0a:1b:f8:93:5c:dc:d4:1e:65:c4:e0:52:d5:c6:1b:16:48:
         3c:45:ff:a0:cd:7d:a3:f5:45:78:67:36:ce:b0:e3:c5:8d:2e:
         b4:32:8b:58:05:c7:8c:9f:e2:2b:bb:ec:cb:ff:a9:62:b1:45:
         b8:ad:f3:9c:33:fb:ba:f4:a8:bc:c5:df:64:88:4b:ef:87:c5:
         18:5e:91:0b:7b:67:5e:46:77:11:c5:38:7d:35:25:9d:d7:82:
         97:82:63:7b:8d:f1:89:69:8f:73:db:0d:22:1c:82:18:80:92:
         eb:4f:75:d3:75:9c:16:c0:77:0c:e4:62:4a:6a:a5:80:cd:33:
         34:bb:3a:89:96:3d:0a:a3:a8:34:a8:f4:3c:7e:dd:1d:f5:c0:
         86:bc:c7:8a:6e:e8:88:0f:ae:a6:12:4b:6e:2a:b9:10:e9:df:
         da:d6:96:94:26:3c:14:96:b0:06:3d:4c:ee:26:8a:1c:3e:44:
         f2:df:82:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:38:24 2025 by rpki-client