Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c711dee8-b869-4c2b-b70f-55b1d4486f99.roa
File:                     c711dee8-b869-4c2b-b70f-55b1d4486f99.roa (raw, json)
Hash identifier:          yaS9eqNd0XDUAze9+qIkHpIuKIwOVKoLEQWjjrPJryw=
Subject key identifier:   36:D5:9E:74:78:1D:66:4A:69:76:CC:0D:FC:9B:2A:C9:1B:14:19:D6
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       15360403FCBC6525CD074835D5A43A3A6FE1CBF9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c711dee8-b869-4c2b-b70f-55b1d4486f99.roa
Signing time:             Thu 18 Sep 2025 19:54:35 +0000
ROA not before:           Thu 18 Sep 2025 19:54:35 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:36:04:03:fc:bc:65:25:cd:07:48:35:d5:a4:3a:3a:6f:e1:cb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:54:35 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=dc9d3a559a5d77ba2bde12b1c491bc8b174fb9d87a479af457a2b6ccf4ecedf4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:64:af:e3:c7:a9:6b:a0:3a:80:14:fe:c5:
                    9e:da:8c:ba:92:38:66:02:39:68:33:8a:b2:ea:2d:
                    69:0a:97:fb:9b:e1:60:48:a8:79:ee:d6:f9:c9:56:
                    80:32:5f:64:a2:b0:00:fb:55:99:50:a3:11:46:17:
                    4a:a6:bb:ed:5e:bc:af:1f:00:e2:fe:81:44:19:31:
                    f2:f4:f5:80:89:04:b3:3a:38:90:35:f3:bb:aa:ad:
                    e5:0e:34:17:aa:7a:32:c2:db:6b:2b:9c:71:57:d7:
                    b9:b5:14:06:02:9a:e7:37:ef:d2:5e:c5:d8:c8:52:
                    10:77:f3:93:30:a8:16:84:62:14:d5:f4:3b:d8:c6:
                    9a:fe:6c:8d:9a:18:ab:06:72:2c:93:e3:d9:b9:04:
                    9e:5c:18:ab:84:3c:56:83:c0:0f:dd:1c:5a:78:5e:
                    4d:0f:bc:e7:76:d0:9a:be:9c:6a:dd:01:e8:5b:1a:
                    3f:c5:3e:fc:9d:84:e9:fd:29:3d:3f:56:42:af:f0:
                    b4:6f:cb:6e:a1:65:1e:78:89:4f:b7:79:9c:36:a8:
                    7b:1b:b1:f2:57:00:d2:70:70:b7:7b:a5:72:14:70:
                    53:61:b1:97:1a:8d:65:5d:58:ff:ea:ee:d0:24:2a:
                    3c:bd:c9:17:ce:48:f6:04:84:d4:2a:6f:48:1f:50:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D5:9E:74:78:1D:66:4A:69:76:CC:0D:FC:9B:2A:C9:1B:14:19:D6
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/c711dee8-b869-4c2b-b70f-55b1d4486f99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:11:d5:dd:6d:bb:f8:91:90:6b:4d:b8:ad:6e:69:c5:06:1a:
         cc:1e:6b:cb:d5:72:23:86:25:7f:ce:71:20:2d:47:30:7b:6f:
         e7:f6:83:b1:dd:18:6c:12:72:1d:e2:8c:4e:7b:35:12:e7:6a:
         43:e2:05:46:7e:14:54:ff:b2:89:81:03:70:6b:af:3f:af:ef:
         33:ca:2d:b4:ba:91:89:27:4f:47:5a:2d:75:55:f5:10:b2:1e:
         08:8d:c8:72:93:d5:62:62:04:bf:7e:ae:4a:43:a2:c5:e1:81:
         00:bd:0b:20:73:80:f7:d9:95:99:da:82:64:22:c0:d3:9e:54:
         d1:12:b1:b1:7c:27:fa:f5:4d:db:b1:13:6f:06:de:1a:e3:b5:
         a2:b2:48:8c:fb:d0:18:9e:1c:1b:1a:ed:c8:ff:3f:c1:60:20:
         06:07:5d:c1:79:73:2e:07:76:83:28:0c:89:bd:c2:3c:3b:07:
         87:01:6f:c9:0b:25:9f:d2:69:ff:0e:d0:bd:16:0c:f5:75:e7:
         70:5e:40:9c:a5:63:81:89:5d:de:1d:6e:f2:d2:88:d5:b3:47:
         fa:50:3f:c3:ac:97:36:11:3d:77:44:fd:85:b4:e3:21:e8:a5:
         85:a3:8c:a7:39:02:24:d4:94:12:6e:da:23:f1:21:90:2b:fd:
         62:40:6c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 04:35:50 2025 by rpki-client