Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa
File:                     5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa (raw, json)
Hash identifier:          pA/Wr/hkKnrV4Khc9XACa3mEB22d83iZn6/BFJsOLCw=
Subject key identifier:   27:C3:C6:4B:A9:D9:EC:DF:9D:82:1D:90:D6:22:D6:E3:44:4F:60:48
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       76F9AEF07869DD12A903618ECF1941B15B320B72
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa
Signing time:             Mon 30 Jun 2025 15:40:18 +0000
ROA not before:           Mon 30 Jun 2025 15:40:18 +0000
ROA not after:            Mon 04 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f9:ae:f0:78:69:dd:12:a9:03:61:8e:cf:19:41:b1:5b:32:0b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun 30 15:40:18 2025 GMT
            Not After : Aug  4 23:59:59 2025 GMT
        Subject: serialNumber=930be49ef201b996e18da9783038b7103a6eef7232e452bbe84e9383e1ff24b1, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:29:6c:f3:59:8e:c6:8c:78:01:d5:75:be:85:
                    6d:54:db:63:70:92:e6:9e:3d:fd:bf:b7:82:1b:49:
                    c6:4d:83:da:09:82:d5:1e:22:a1:8f:c1:2f:fb:39:
                    a2:75:52:c1:7b:31:a8:bc:2e:ce:46:2e:61:19:c4:
                    2b:fe:49:e7:99:38:8b:96:14:4a:df:c4:7f:ce:54:
                    8c:18:2f:76:fa:45:9f:6d:67:ee:03:90:c1:7b:ed:
                    62:9e:b2:9c:a1:3c:0e:e1:81:40:ee:84:3e:9d:48:
                    6d:bf:2e:d6:8e:a6:f6:45:91:92:6f:dc:23:19:f1:
                    35:68:d9:5f:54:c7:b5:31:72:38:8d:20:ac:f1:d5:
                    b3:de:ee:19:e9:fe:f4:ed:2b:5d:4c:7e:94:f5:59:
                    f3:d8:3c:23:13:c6:02:e7:6b:12:47:38:da:d1:cf:
                    5f:ed:f3:bd:a2:84:aa:f0:b7:02:e1:e6:49:35:2e:
                    03:f4:e6:6c:3b:22:99:a7:97:93:bb:fd:a2:a5:90:
                    2e:68:ad:cf:6c:f1:5c:a0:2a:26:5b:0c:44:a4:d5:
                    24:78:f5:20:31:a5:64:7c:34:fe:aa:ab:cb:28:e3:
                    4d:4b:fc:dd:46:46:e8:27:98:8c:3e:88:a5:8b:91:
                    48:61:83:7a:23:d3:7d:cc:86:ed:41:9f:af:d5:95:
                    55:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C3:C6:4B:A9:D9:EC:DF:9D:82:1D:90:D6:22:D6:E3:44:4F:60:48
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         47:39:98:fa:54:27:3d:3d:41:ec:06:15:23:ed:a6:7f:44:68:
         38:2b:85:34:3c:f6:e8:3e:91:81:c8:00:bd:a0:cf:1b:e8:33:
         eb:a0:ba:6a:14:b5:89:b7:2a:70:17:6c:9b:a7:85:2a:ac:c2:
         50:68:37:60:ab:a1:80:9c:b3:18:4a:ed:da:fb:e9:06:e9:e8:
         29:ab:82:9f:60:49:28:70:53:2f:5e:ac:e1:9c:3f:27:01:38:
         ba:e1:8f:77:a6:99:d7:04:15:de:26:e3:97:9e:1c:ac:39:a0:
         85:a5:c0:88:3b:f2:f6:ea:88:73:70:01:60:0d:63:41:63:55:
         aa:6a:bb:f1:16:61:b9:54:b4:32:12:a4:b5:0c:c6:27:9d:24:
         31:28:8a:3b:03:b0:bb:49:b0:68:fe:1f:dd:21:c4:ad:89:3e:
         15:20:3a:90:3e:03:ed:91:d4:d8:63:f0:ba:c1:0f:1a:50:ed:
         77:80:b6:e8:6f:bb:cb:11:97:9d:60:89:83:dd:af:72:31:cb:
         22:fb:0c:46:7f:9f:22:3f:52:b4:22:7c:0a:14:a9:91:10:ca:
         94:82:90:f6:24:51:5c:03:4b:ed:43:6e:b7:6f:6f:d5:b5:bf:
         51:cf:69:5d:d5:e6:a3:13:f3:08:88:1e:d5:fd:a8:68:20:99:
         b9:0a:6d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:39:22 2025 by rpki-client