Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9be0b8b-2448-407c-a805-6695193230d5.roa
File:                     d9be0b8b-2448-407c-a805-6695193230d5.roa (raw, json)
Hash identifier:          Zg59brpppWds9GijW+588dYcBWL8AiTdKuSv50pr/0M=
Subject key identifier:   D0:58:11:E5:17:44:59:AD:26:39:B2:15:6F:94:F9:84:32:09:A6:03
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       17A9E6FC1F3C5DDD4D84F4A7922B86AFC4FB84B7
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9be0b8b-2448-407c-a805-6695193230d5.roa
Signing time:             Thu 18 Sep 2025 19:41:07 +0000
ROA not before:           Thu 18 Sep 2025 19:41:07 +0000
ROA not after:            Thu 23 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a9:e6:fc:1f:3c:5d:dd:4d:84:f4:a7:92:2b:86:af:c4:fb:84:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Sep 18 19:41:07 2025 GMT
            Not After : Oct 23 23:59:59 2025 GMT
        Subject: serialNumber=764cce04802f7f3104f22281b7f85ca09d92849f398cc2f5afe73246f0dfedd6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:04:8f:97:3d:0d:47:1c:2a:26:82:ae:c8:
                    bb:88:89:e7:b2:93:a5:a2:94:b5:67:01:a7:e5:c9:
                    6e:60:5d:45:b3:78:4b:04:8f:0d:12:b2:c1:ef:a3:
                    00:41:4e:3b:05:ea:0e:d3:02:0b:0c:2c:b7:fc:1e:
                    37:a4:3c:f8:c7:66:f9:71:f9:af:39:79:81:5a:59:
                    b3:23:8d:4b:a4:bd:f4:d9:da:f0:2d:6f:f0:d6:67:
                    e4:1c:b3:39:93:44:a8:0e:a5:fc:0f:4d:7e:5e:a3:
                    42:8b:b0:b0:c5:ce:6b:3e:f8:22:cf:ca:de:a0:78:
                    7a:62:cd:63:6a:82:92:1d:34:22:5f:da:e2:63:7d:
                    62:b2:be:2a:c2:3b:9c:6d:b5:9d:4f:96:9e:ba:cb:
                    dc:8d:17:6e:5d:52:ae:47:d9:7d:38:c3:f0:1d:82:
                    57:c7:7e:03:5e:a2:fc:cc:85:5d:c6:95:5a:90:60:
                    76:f5:e7:90:a9:e4:43:85:e0:7d:d2:a2:14:d5:99:
                    8b:1a:e7:0b:57:c3:f0:7c:c1:94:ab:32:ec:99:0f:
                    36:c0:f2:c8:67:5c:f8:c7:4e:91:e4:3c:de:45:4a:
                    1e:0e:d2:fa:e6:6d:6a:ba:b9:96:79:43:f8:3f:f8:
                    57:a4:c6:db:df:a6:9c:15:d7:2c:b8:3d:10:5d:34:
                    7e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:58:11:E5:17:44:59:AD:26:39:B2:15:6F:94:F9:84:32:09:A6:03
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/d9be0b8b-2448-407c-a805-6695193230d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         35:27:b4:3b:20:b1:13:5c:63:a7:c6:ef:d5:e4:a9:ed:44:9d:
         97:d8:5a:66:bd:5e:bd:e1:51:54:46:94:0b:ce:71:e3:bf:ca:
         31:f0:eb:8b:2d:76:37:cc:34:1f:be:ad:f2:b2:5b:9c:40:d9:
         b2:ab:3e:f5:6c:39:68:d0:e6:a5:ca:f9:54:e8:7b:ab:03:fb:
         f7:97:a0:aa:12:87:b0:59:4e:c2:bd:7d:7b:06:83:e3:30:4a:
         29:10:ad:e5:63:ef:90:0c:fe:68:61:02:66:ee:98:0c:8a:34:
         3e:0a:29:89:23:c6:46:c4:73:ef:2a:21:a5:ea:e1:a8:0a:6c:
         16:65:d8:2a:53:70:9e:2e:c9:aa:60:16:5e:2b:3b:42:0f:ff:
         ed:23:f4:6d:1d:f9:69:c2:96:47:88:b3:1e:02:2d:b2:1f:45:
         e3:a0:7a:4b:27:e4:67:fd:7b:27:a3:f7:8e:a3:c0:be:cb:8b:
         69:9e:33:67:ba:e9:61:28:e2:dd:00:2d:87:ff:46:99:31:4d:
         60:92:28:ad:35:6f:ea:93:c9:e7:3e:c6:fa:d7:50:a9:1c:9f:
         7b:3b:31:1f:1d:0f:e5:b8:35:f5:af:ae:07:00:88:36:3c:aa:
         3c:b3:2f:4b:3e:2e:15:68:c0:32:c0:74:bd:02:f9:63:68:27:
         44:2b:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:10:29 2025 by rpki-client