Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9861d33-799b-4111-939b-a8685ada4b76.roa
File:                     b9861d33-799b-4111-939b-a8685ada4b76.roa (raw, json)
Hash identifier:          SwCdDjSR2cA2OQPcH4Z3B227PtupMSZiqgqAbcmNE4s=
Subject key identifier:   65:AD:31:86:5A:9A:AF:64:2D:0E:4B:B8:3F:22:8C:B8:02:D3:9B:0B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       48C06F92CB3D3185962E0B7009AD0B7F0618F596
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9861d33-799b-4111-939b-a8685ada4b76.roa
Signing time:             Thu 18 Sep 2025 19:52:25 +0000
ROA not before:           Thu 18 Sep 2025 19:52:25 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c0:6f:92:cb:3d:31:85:96:2e:0b:70:09:ad:0b:7f:06:18:f5:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:52:25 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=1ab50683a6873a98b4b643cead326c9d069e94e2e41266db24cd782e1c7cad5e, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:30:37:1e:ce:3a:94:79:85:1a:45:29:07:
                    aa:57:ff:a5:e0:a2:c2:29:d2:c7:de:58:2e:d6:14:
                    1c:15:05:83:a0:0f:19:f5:9d:c9:ab:7f:e7:8e:05:
                    d1:12:77:dc:8d:3c:6a:f8:ee:f5:78:1e:5e:9e:8d:
                    70:20:d9:4a:e1:d7:bd:89:a9:4c:bf:a2:97:7b:2c:
                    1b:f4:50:cd:36:62:6a:f4:dc:2e:bb:36:83:44:2e:
                    b2:ff:c7:46:35:c0:df:02:b4:d0:ac:9d:d6:09:66:
                    ef:e5:ba:52:cf:74:a6:dd:56:66:3f:61:b8:44:84:
                    a7:94:39:fc:1d:86:ed:f4:c4:87:38:07:79:e7:fb:
                    2c:35:47:68:d9:4a:61:67:a8:51:e9:52:41:da:9d:
                    41:cd:6e:95:15:30:46:10:06:a9:d2:d3:f4:68:6c:
                    45:5a:29:3f:94:f4:8d:14:07:9f:af:79:77:92:5d:
                    0e:1e:7c:1e:9f:9a:35:ff:d9:de:1c:a1:36:de:db:
                    66:ad:f9:4d:1b:bf:09:0f:31:5c:bb:14:57:05:4d:
                    ff:05:0b:21:54:08:02:13:a9:bb:55:ed:14:91:40:
                    10:b7:14:ed:75:b0:71:2c:15:02:fd:02:a8:e3:11:
                    e3:a5:26:02:9e:8a:94:cc:b1:f3:63:dc:89:88:1a:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AD:31:86:5A:9A:AF:64:2D:0E:4B:B8:3F:22:8C:B8:02:D3:9B:0B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/b9861d33-799b-4111-939b-a8685ada4b76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:c6:14:cd:1b:89:50:d8:8c:ce:d0:be:9e:79:10:64:ff:34:
         b5:19:8a:34:0a:56:e3:8d:83:49:24:d6:d6:8e:d5:06:26:f0:
         73:84:0e:a1:a0:da:cf:d4:68:5a:0e:2b:af:7e:36:8c:7d:4f:
         d7:35:5a:58:bc:74:6d:98:c0:ea:d2:f1:59:7e:3c:5a:53:50:
         61:ce:46:cd:79:cd:a3:1f:d8:3d:a1:a4:30:3c:91:e0:54:3c:
         d9:ff:da:a8:0d:28:74:f3:fe:94:a7:9c:fa:86:25:d7:62:b5:
         b3:38:af:22:2c:bd:d0:2b:bc:43:3a:35:39:63:91:94:75:e0:
         0f:99:90:ed:f6:5a:08:d9:57:21:53:43:47:6f:64:5e:64:5f:
         84:87:ab:a5:85:2d:ec:54:8e:71:7c:f1:02:e9:67:51:65:4c:
         9b:89:b2:ec:c8:b9:a1:5a:9e:00:c1:05:b0:bc:67:0a:c4:fb:
         3e:75:36:dd:38:23:8e:f9:93:cc:98:53:29:dc:93:46:5d:ef:
         a6:9a:e9:8e:f1:f5:bc:1b:70:f0:ee:ef:bb:16:d2:f9:90:c2:
         9e:b6:13:29:be:71:c1:75:86:d3:86:8e:65:20:15:5e:3f:6e:
         28:82:f2:e5:65:18:18:6b:94:a1:01:d9:2f:ba:8d:a9:ab:1a:
         65:d5:c5:07
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSMBvkss9MYWWLgtwCa0LfwYY9ZYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwOTE4MTk1MjI1WhcNMjUxMDIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxYWI1MDY4M2E2ODczYTk4YjRiNjQzY2VhZDMyNmM5ZDA2
OWU5NGUyZTQxMjY2ZGIyNGNkNzgyZTFjN2NhZDVlMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyADA3Hs46lHmFGkUpB6pX/6XgosIp0sfeWC7WFBwVBYOg
Dxn1ncmrf+eOBdESd9yNPGr47vV4Hl6ejXAg2Urh172JqUy/opd7LBv0UM02Ymr0
3C67NoNELrL/x0Y1wN8CtNCsndYJZu/lulLPdKbdVmY/YbhEhKeUOfwdhu30xIc4
B3nn+yw1R2jZSmFnqFHpUkHanUHNbpUVMEYQBqnS0/RobEVaKT+U9I0UB5+veXeS
XQ4efB6fmjX/2d4coTbe22at+U0bvwkPMVy7FFcFTf8FCyFUCAITqbtV7RSRQBC3
FO11sHEsFQL9AqjjEeOlJgKeipTMsfNj3ImIGkIPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZa0xhlqar2QtDku4PyKMuALTmwswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2I5ODYxZDMzLTc5OWItNDExMS05MzliLWE4Njg1YWRhNGI3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADN+8swDQYJKoZIhvcNAQELBQADggEBALfGFM0biVDYjM7Qvp55EGT/NLUZ
ijQKVuONg0kk1taO1QYm8HOEDqGg2s/UaFoOK69+Nox9T9c1Wli8dG2YwOrS8Vl+
PFpTUGHORs15zaMf2D2hpDA8keBUPNn/2qgNKHTz/pSnnPqGJdditbM4ryIsvdAr
vEM6NTljkZR14A+ZkO32WgjZVyFTQ0dvZF5kX4SHq6WFLexUjnF88QLpZ1FlTJuJ
suzIuaFangDBBbC8ZwrE+z51Nt04I475k8yYUynck0Zd76aa6Y7x9bwbcPDu77sW
0vmQwp62Eym+ccF1htOGjmUgFV4/biiC8uVlGBhrlKEB2S+6jamrGmXVxQc=
-----END CERTIFICATE-----
Generated at Fri Sep 19 06:06:36 2025 by rpki-client