Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce6abe56-76ab-4f7c-943b-5c1aded785ec.roa
File:                     ce6abe56-76ab-4f7c-943b-5c1aded785ec.roa (raw, json)
Hash identifier:          iDVwAjnyD/mw8ZB9we6AJyLy6UT6SSz9fkiQxCglWd8=
Subject key identifier:   F8:E3:11:55:83:32:47:2F:B1:5F:30:B1:63:3E:65:F5:09:17:D5:5E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       167538B44962AB2ACD729858B9888A1EF17BCB5F
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce6abe56-76ab-4f7c-943b-5c1aded785ec.roa
Signing time:             Wed 04 Jun 2025 00:40:18 +0000
ROA not before:           Wed 04 Jun 2025 00:40:18 +0000
ROA not after:            Wed 09 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        205.251.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:75:38:b4:49:62:ab:2a:cd:72:98:58:b9:88:8a:1e:f1:7b:cb:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun  4 00:40:18 2025 GMT
            Not After : Jul  9 23:59:59 2025 GMT
        Subject: serialNumber=f6831975bcdc1ea51ff5c05ef2fc6e63b288624a076af59d4f444cb1e18cf32b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:f0:46:ac:a2:88:a3:57:64:83:99:9b:f4:
                    9a:3e:a3:a7:cb:b4:81:d0:cd:a9:ba:3b:fb:0a:a0:
                    72:2e:c6:f1:77:23:f2:31:74:86:f3:22:1e:41:e8:
                    f3:82:5c:d7:29:23:1a:2d:8e:86:0e:ae:3c:ea:a6:
                    1e:18:cb:e7:45:38:0a:a7:a3:ae:89:e7:62:d9:1d:
                    d1:69:25:3e:80:cc:06:76:cd:ac:6f:5c:f9:70:1e:
                    49:b8:8b:7b:18:68:44:ca:ee:dd:fb:3b:7e:4b:67:
                    ec:34:09:8b:63:bf:02:d2:b1:4b:3d:b2:65:20:11:
                    a6:1c:d2:ff:52:d7:35:d9:a2:4d:66:75:1d:2f:c5:
                    fe:b3:2b:07:9a:ec:36:30:7e:b8:dc:cb:ec:79:5b:
                    cb:17:f1:a9:1d:32:d4:95:57:19:bc:76:53:7e:8f:
                    4a:c8:14:74:8e:16:b0:92:5c:7f:6d:a3:eb:36:3c:
                    4f:de:7e:2a:ba:29:d9:f7:bd:a8:86:5d:ee:db:f0:
                    46:8c:dd:1b:45:1a:cb:d6:f0:c4:04:16:61:7a:7f:
                    58:08:e1:b5:5f:15:9c:84:c4:16:23:c4:4d:be:08:
                    9b:c6:55:46:94:b5:c6:95:e0:af:e8:a6:d4:36:d7:
                    d8:86:9c:9e:ea:2d:a3:fc:6f:f6:bc:eb:a3:5b:c7:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E3:11:55:83:32:47:2F:B1:5F:30:B1:63:3E:65:F5:09:17:D5:5E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ce6abe56-76ab-4f7c-943b-5c1aded785ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:21:cd:98:00:1f:2d:07:b5:39:d1:9d:3c:2d:84:7a:b7:d4:
         55:68:4f:a3:64:7a:f6:02:9e:d2:9a:cc:af:c1:ce:83:42:d6:
         75:19:7e:7b:e5:4c:ac:b2:16:00:b3:02:d1:22:38:e9:ae:db:
         33:72:54:0d:7f:67:1c:63:a9:8a:cc:1a:c5:94:5c:cf:45:9a:
         59:a7:08:5c:ad:ab:94:db:6d:d9:4c:af:d5:18:5e:22:c3:e6:
         8f:3d:4d:cb:a8:3d:cf:3f:37:b1:32:9f:66:f1:12:85:45:2f:
         12:e9:ac:10:7b:a6:34:7a:c4:8c:91:46:fb:f5:04:0b:82:d3:
         14:e4:f4:da:32:33:eb:6c:3c:18:97:63:40:99:a9:89:88:85:
         23:cc:60:f7:86:63:6a:e4:ec:01:5e:00:b4:c9:87:0f:39:65:
         5f:fd:61:56:bd:bc:f4:f1:d9:a5:e5:2d:5e:ed:20:dd:50:1b:
         6b:fa:02:17:63:e6:a6:d8:71:34:43:8e:50:c9:24:53:87:28:
         63:11:e7:59:be:19:87:67:a4:17:bd:71:2a:0b:a6:9b:37:d1:
         02:12:14:c3:38:81:c7:9b:d9:f8:05:48:76:ea:ba:c4:90:b9:
         0a:e5:4d:73:42:18:96:e3:63:fd:02:e6:28:83:28:1f:cc:62:
         83:6d:43:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:25:31 2025 by rpki-client