Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ecba0557-c004-41c2-bd5b-63142dbee294.roa
File:                     ecba0557-c004-41c2-bd5b-63142dbee294.roa (raw, json)
Hash identifier:          3oIob2ir6RvW9X2axxCynccXZdKg3w8HB56imENVUx8=
Subject key identifier:   7C:2A:60:4C:2E:DE:7F:77:E6:04:E4:CB:26:AB:29:48:46:D9:41:C9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       044FC1623EC99ED67694134390F8EE1A94F12205
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ecba0557-c004-41c2-bd5b-63142dbee294.roa
Signing time:             Wed 04 Jun 2025 00:40:14 +0000
ROA not before:           Wed 04 Jun 2025 00:40:14 +0000
ROA not after:            Wed 09 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4f:c1:62:3e:c9:9e:d6:76:94:13:43:90:f8:ee:1a:94:f1:22:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun  4 00:40:14 2025 GMT
            Not After : Jul  9 23:59:59 2025 GMT
        Subject: serialNumber=8836dd7a9600d568afa8e6d5d601672c7cd054944208f7bdcadd80aa9ec9782b, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:99:aa:4c:a5:0f:5f:48:99:c1:b3:a2:da:
                    72:52:b3:1b:46:91:aa:4a:8c:eb:31:02:5e:d3:75:
                    ba:59:40:3d:a8:18:53:f4:fa:b7:1a:8a:2c:88:8f:
                    8c:ed:97:8a:6c:41:73:e7:82:0f:8e:fb:fd:10:88:
                    75:43:6c:cf:95:5e:5a:6d:de:20:68:dc:be:d7:c5:
                    ee:ad:dd:2e:42:7f:96:f9:02:e4:4d:63:81:8d:71:
                    9f:51:3e:08:b2:76:40:c5:fc:b1:70:8d:c7:30:39:
                    95:33:f6:c4:a9:c9:a6:88:7c:1f:21:0b:09:26:e0:
                    e9:f6:62:cf:15:c0:c8:b3:66:30:21:8f:5b:ae:b5:
                    a5:30:d3:cc:97:af:5c:de:27:6b:ac:57:17:6f:75:
                    cb:b1:c0:b5:e7:2a:fc:45:80:06:d1:ec:3d:12:2a:
                    46:fc:ea:9f:dc:70:66:c6:97:df:05:b9:d6:05:8a:
                    0d:bb:1e:51:8d:de:18:10:a3:b6:4a:13:c0:78:c5:
                    d4:95:fa:55:9b:6f:04:02:ee:7e:6c:fa:e3:d9:2f:
                    20:e8:ba:c3:f2:28:c3:6a:c0:e7:80:d8:40:a9:d4:
                    4e:2e:3c:6d:43:f2:62:5a:f0:6a:70:37:33:10:32:
                    dd:81:f6:a3:55:3e:c2:93:17:96:1f:ec:d5:ce:1e:
                    8f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2A:60:4C:2E:DE:7F:77:E6:04:E4:CB:26:AB:29:48:46:D9:41:C9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ecba0557-c004-41c2-bd5b-63142dbee294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:3a:04:d2:08:95:38:a7:ba:30:01:af:e6:9a:ba:23:31:b0:
         5d:ba:95:e8:cb:8f:fb:57:f0:08:c8:d4:d6:4f:3c:e2:11:68:
         7f:ef:b8:7a:c4:5a:02:e2:03:63:2d:35:e4:99:ce:c3:e7:d6:
         d7:3d:43:85:59:45:30:66:0d:23:b2:d1:ac:e4:b1:15:34:81:
         ce:c5:34:84:db:e2:d6:26:b8:e0:51:1d:58:f0:e1:4c:a1:40:
         f0:5b:1f:c5:8f:91:23:47:69:8a:a4:9d:9f:18:db:a8:14:d2:
         f6:8e:ac:bb:34:4a:be:29:e2:70:49:c1:46:1f:9c:54:88:05:
         b0:3b:f9:f4:0b:d0:9a:f1:90:68:a2:7b:8d:a6:a5:53:2a:28:
         ce:7a:51:27:e1:7e:05:e0:cf:a1:60:9d:11:df:93:ad:6d:01:
         3e:7d:0c:01:4b:3a:b2:8e:72:60:59:9a:11:f7:65:a6:ff:6f:
         0a:ec:12:35:ae:a4:95:a9:e8:3f:56:7a:69:25:75:9e:fa:59:
         c3:dd:72:c8:2b:1a:3c:89:8e:a8:fc:a4:69:b7:e6:06:40:59:
         c5:3f:d7:cd:db:b5:0b:f5:54:ce:48:f4:8c:60:7c:62:3d:18:
         8c:04:86:b0:dd:ff:06:3d:77:bd:4b:79:72:0c:46:0e:25:38:
         79:ed:3d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:02:42 2025 by rpki-client