Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa
File:                     9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa (raw, json)
Hash identifier:          C/V+OTMezWoNQ0PG5/4g1QBAqpdsCa7m4N1aLS/TBXU=
Subject key identifier:   2A:C1:96:5B:23:3B:F8:A9:2F:4F:39:A1:AB:03:2D:10:A9:AE:5E:9B
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1FFABE7E74CDECC59C178AA8499616663573CCD8
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa
Signing time:             Sat 10 May 2025 00:40:13 +0000
ROA not before:           Sat 10 May 2025 00:40:13 +0000
ROA not after:            Sat 14 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:fa:be:7e:74:cd:ec:c5:9c:17:8a:a8:49:96:16:66:35:73:cc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May 10 00:40:13 2025 GMT
            Not After : Jun 14 23:59:59 2025 GMT
        Subject: serialNumber=788fce2f798158bbe030557dfb4faa8c01a52aa91d8c2f114071e73df568d5ac, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:9f:e8:15:91:1e:e8:61:41:26:be:17:97:
                    04:4d:37:36:80:b6:a8:8e:3d:9e:07:00:39:0c:e8:
                    01:64:04:cf:3d:91:e5:96:8c:ef:42:8d:bb:d2:da:
                    4d:4e:b9:37:fa:4a:4b:00:65:76:f1:0b:f9:58:6d:
                    9d:14:c8:17:ce:fa:8d:0e:59:62:3d:21:09:d7:11:
                    47:9b:30:6f:04:35:17:1c:dc:8f:b6:dd:08:fc:16:
                    7f:e8:aa:0b:1a:7e:2d:5d:c5:0a:ba:b8:ea:00:c3:
                    3e:e6:ea:5c:9d:33:cd:e4:d9:f5:ba:2c:0f:0e:c0:
                    81:9f:0a:de:fa:cb:63:2d:51:3b:b9:d9:80:c3:72:
                    9a:e1:01:49:17:a6:ed:3c:c3:4a:b9:c8:3c:e8:da:
                    84:ad:97:c2:cf:53:57:bf:cc:fd:9a:3b:aa:86:69:
                    e5:92:43:25:40:74:f0:87:9a:77:57:07:11:5d:ca:
                    3c:c9:35:e1:63:26:b1:57:c4:48:a7:7d:59:01:b6:
                    c1:14:8f:ec:44:93:cd:02:58:1f:ec:13:06:7e:66:
                    1d:b5:90:97:36:92:d5:66:8e:23:8b:ac:cd:d5:0b:
                    eb:02:09:53:11:05:53:0e:0a:9b:38:56:5a:50:70:
                    65:ba:62:e7:a4:60:2f:a4:cf:87:3b:90:9a:a3:51:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C1:96:5B:23:3B:F8:A9:2F:4F:39:A1:AB:03:2D:10:A9:AE:5E:9B
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:49:50:4e:55:ee:45:ba:c8:15:ac:4c:41:cc:31:98:21:68:
         fb:98:73:90:6a:c3:b2:42:ad:5e:e0:46:29:cf:af:34:1e:f1:
         ed:4f:be:e8:5a:f1:27:38:9d:3a:53:d9:45:07:5b:d4:26:1c:
         f8:bd:63:5d:51:e7:11:b7:4e:ab:6a:14:59:ec:c4:05:ed:e6:
         37:94:b7:5f:a2:46:d3:fd:8d:a0:5b:da:bc:6c:06:2d:55:b5:
         99:5c:ed:43:f4:5b:69:be:14:df:8f:74:7d:23:b1:cd:c6:94:
         0f:0b:fc:9b:36:1e:a3:87:e4:d1:42:09:86:e1:14:41:92:16:
         a5:04:e7:a9:40:55:79:5e:42:af:26:9a:3e:fc:7e:d2:fb:02:
         2c:d3:31:fa:24:d1:36:63:91:3f:92:f7:7c:e6:10:de:2f:58:
         d7:aa:2b:69:02:88:6d:bc:c1:13:c3:a9:da:30:90:19:bb:70:
         c2:2d:5d:cb:a1:13:75:06:2a:f9:ed:32:1e:33:cf:58:ec:e0:
         00:eb:01:e0:11:e2:dc:a5:52:d6:7f:31:15:3f:11:4d:1d:88:
         a8:6e:17:ab:40:70:33:3a:e0:4f:c1:4f:59:2f:61:4f:ca:86:
         6d:ee:92:53:f5:c5:77:63:ef:e4:e2:30:77:96:88:ad:08:6e:
         c7:32:83:4b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUH/q+fnTN7MWcF4qoSZYWZjVzzNgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwNTEwMDA0MDEzWhcNMjUwNjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3ODhmY2UyZjc5ODE1OGJiZTAzMDU1N2RmYjRmYWE4YzAx
YTUyYWE5MWQ4YzJmMTE0MDcxZTczZGY1NjhkNWFjMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCiJ/oFZEe6GFBJr4XlwRNNzaAtqiOPZ4HADkM6AFkBM89
keWWjO9CjbvS2k1OuTf6SksAZXbxC/lYbZ0UyBfO+o0OWWI9IQnXEUebMG8ENRcc
3I+23Qj8Fn/oqgsafi1dxQq6uOoAwz7m6lydM83k2fW6LA8OwIGfCt76y2MtUTu5
2YDDcprhAUkXpu08w0q5yDzo2oStl8LPU1e/zP2aO6qGaeWSQyVAdPCHmndXBxFd
yjzJNeFjJrFXxEinfVkBtsEUj+xEk80CWB/sEwZ+Zh21kJc2ktVmjiOLrM3VC+sC
CVMRBVMOCps4VlpQcGW6YuekYC+kz4c7kJqjUZjTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKsGWWyM7+KkvTzmhqwMtEKmuXpswHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzllNmZhNTc0LWFiYzQtNGRmYS1hNDNmLTgxYzZlYTk1MmI1OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALN++wwDQYJKoZIhvcNAQELBQADggEBAIZJUE5V7kW6yBWsTEHMMZghaPuY
c5Bqw7JCrV7gRinPrzQe8e1Pvuha8Sc4nTpT2UUHW9QmHPi9Y11R5xG3TqtqFFns
xAXt5jeUt1+iRtP9jaBb2rxsBi1VtZlc7UP0W2m+FN+PdH0jsc3GlA8L/Js2HqOH
5NFCCYbhFEGSFqUE56lAVXleQq8mmj78ftL7AizTMfok0TZjkT+S93zmEN4vWNeq
K2kCiG28wRPDqdowkBm7cMItXcuhE3UGKvntMh4zz1js4ADrAeAR4tylUtZ/MRU/
EU0diKhuF6tAcDM64E/BT1kvYU/Khm3uklP1xXdj7+TiMHeWiK0Ibscyg0s=
-----END CERTIFICATE-----
Generated at Mon Jun 2 16:29:08 2025 by rpki-client