Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa
File:                     b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa (raw, json)
Hash identifier:          UT86D9WAjWc4p8AqhMg0HeR1vxqcBk15mya77D9H+HM=
Subject key identifier:   9A:37:D1:22:42:AA:BA:3C:87:2B:DE:2C:53:64:26:46:FE:C9:99:A0
Certificate issuer:       /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial:       2C985E4A3696395DDB99B4ACC44592C616BF6E7B
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa
Signing time:             Fri 26 Sep 2025 00:50:08 +0000
ROA not before:           Fri 26 Sep 2025 00:50:08 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        50.112.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:98:5e:4a:36:96:39:5d:db:99:b4:ac:c4:45:92:c6:16:bf:6e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
        Validity
            Not Before: Sep 26 00:50:08 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=6eba1f9ce5f7da15de4cfd2467dfe73e9b64c6de99ab61045bb72f163157b805, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cd:a7:8f:5c:a0:57:c4:2f:5c:2e:54:ae:0c:
                    b0:6a:82:61:5c:23:ef:43:c7:15:ae:9b:ef:d8:81:
                    71:97:a1:52:52:f0:6e:4d:39:8a:2c:b8:af:18:53:
                    73:89:ee:33:4c:80:83:98:af:a7:dc:96:d9:48:d4:
                    91:b8:7a:c7:29:41:f8:d2:68:c1:6f:ff:ee:d5:86:
                    cf:16:8a:e7:08:59:b5:63:f6:cd:d1:de:c6:ef:1e:
                    50:16:6a:ff:52:a9:8e:7c:31:b9:c2:66:88:0f:a2:
                    49:1c:64:6d:f5:a2:ed:40:7f:92:93:79:42:dd:33:
                    a1:82:58:bb:50:07:2e:f8:4b:37:fc:8c:bd:04:c2:
                    38:2d:ae:6c:a9:41:ed:89:3f:af:f0:16:60:74:eb:
                    b1:61:0e:8c:42:a7:34:71:33:bd:23:ff:bc:c5:56:
                    1b:87:d1:c3:e6:13:d7:10:92:3f:a7:3d:29:6d:5a:
                    3d:36:8b:25:7d:bf:9b:cd:58:cd:ea:4e:55:6d:8c:
                    74:42:97:9e:75:6c:4e:c3:2c:02:f4:9b:c5:38:e2:
                    3c:e1:e2:67:f6:91:0b:b7:47:c4:d2:99:86:e2:6e:
                    c4:ee:52:ab:b7:9b:fd:8e:ae:75:ab:84:b4:40:70:
                    32:96:c5:ca:6b:bd:cb:30:d7:ea:9b:ea:22:70:b2:
                    da:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:37:D1:22:42:AA:BA:3C:87:2B:DE:2C:53:64:26:46:FE:C9:99:A0
            X509v3 Authority Key Identifier:
                keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/b1121dfe-8b77-4852-8504-3b11c27ee5f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.112.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:33:b0:b1:bd:7e:ec:e7:a0:15:19:12:8f:95:7d:4d:18:e4:
         36:86:4c:09:ca:f6:d0:5a:26:b1:b8:d6:c7:0b:e2:44:f6:06:
         00:0e:07:27:7f:b9:07:dd:42:40:97:37:6a:43:e5:f2:fd:22:
         e8:0a:2f:54:71:61:54:95:20:92:af:4e:31:c2:62:e0:cd:30:
         08:79:e2:a2:09:19:fa:7d:9b:c9:c8:0c:fd:14:05:6d:65:55:
         b2:48:c3:ee:67:a3:1a:3b:ef:d5:7c:73:df:14:b5:43:00:d1:
         6c:67:6b:d2:a0:07:2f:a3:2e:dd:c6:d8:4f:17:95:75:0a:e9:
         6c:96:fd:85:4f:6c:ed:3e:a5:fc:d0:a4:06:ff:e4:fb:9e:9f:
         4d:73:21:cd:14:ff:2e:4b:3e:84:f6:53:1d:21:52:0d:56:b6:
         25:f3:dc:20:19:5b:33:3c:a7:19:aa:57:10:1e:2f:d2:d4:d9:
         7b:10:fd:6e:12:6a:ed:d8:32:f0:b8:a2:d6:a0:e9:5e:ef:01:
         56:9b:4c:6c:05:c6:27:66:99:9c:e6:f4:e8:7b:74:db:92:ca:
         bc:29:38:75:1b:31:5d:42:5b:a9:0f:42:dc:76:73:3a:01:1a:
         bf:ed:fc:23:1a:4e:03:3b:49:66:e4:5b:43:dc:1a:61:7f:85:
         39:06:53:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:52:20 2025 by rpki-client