Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
File:                     383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa (raw, json)
Hash identifier:          IB7C4rXbR00GoMSe74sQLlWQp+eYuCUCRZ8fApzn2G8=
Subject key identifier:   9E:58:50:97:0F:7D:11:C1:E6:C0:07:B8:05:5F:F8:8B:1D:F8:22:E8
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       348D656736C40F69C4FF57B056E6B8E605207AB9
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa
Signing time:             Fri 26 Sep 2025 20:21:07 +0000
ROA not before:           Fri 26 Sep 2025 20:21:07 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        200.224.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8d:65:67:36:c4:0f:69:c4:ff:57:b0:56:e6:b8:e6:05:20:7a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Sep 26 20:21:07 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=20da0d43cb6caee8ba8bbb8f317e7616b00f3f3b3fd4c41606a17822182c7d1b, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:64:55:e9:2c:8a:15:ed:b9:31:94:e8:57:
                    f2:aa:70:44:c8:e4:4a:54:6e:ba:98:f2:ca:f8:cf:
                    8d:65:3d:bf:ea:8d:92:f3:38:b2:69:d9:09:71:c6:
                    d5:7b:cd:dc:43:97:44:56:e1:18:82:38:75:c2:5a:
                    64:4d:d2:0f:72:b0:14:c2:e8:f3:35:01:56:22:7e:
                    7c:8a:1a:7a:b0:f6:ca:e4:fe:b3:f6:99:ec:1a:3b:
                    1c:57:93:ad:5d:27:6d:5d:3f:2a:b9:15:57:83:2c:
                    da:75:60:73:b9:c4:75:0d:f8:7f:d7:80:8a:1a:dc:
                    d4:0a:b4:eb:38:db:13:4e:4e:c2:ec:93:1c:38:d9:
                    8b:73:6d:3f:cc:18:ec:e9:72:7a:1e:43:92:f7:14:
                    33:16:ed:9f:69:27:b1:81:f6:14:7f:77:38:0b:32:
                    60:dd:cc:00:69:f7:54:77:7e:1f:d0:c9:73:3e:d3:
                    6d:00:68:6d:86:b0:1f:2a:f8:ba:a1:cc:0e:60:0b:
                    f6:60:93:1e:72:16:50:a1:66:05:bd:a2:bb:48:a7:
                    0f:d8:3b:a4:8f:12:51:61:04:07:94:26:21:23:5b:
                    ee:ee:e8:11:3a:5b:de:78:02:ed:93:d2:1b:56:a8:
                    22:65:dd:e4:3b:5f:b8:67:91:a6:f1:e2:f9:bd:5d:
                    08:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:58:50:97:0F:7D:11:C1:E6:C0:07:B8:05:5F:F8:8B:1D:F8:22:E8
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/383c1f6d-4e0e-4e33-a2ce-f49386dcc1f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.224.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:cb:f1:ab:0b:02:5d:38:62:8c:db:2b:f2:fb:3f:52:80:d8:
         f6:21:51:9b:96:fe:93:3f:e0:48:10:24:d3:b9:df:0b:08:fc:
         8d:92:32:dc:ae:81:5c:70:8b:55:c6:f2:30:a3:6a:75:09:26:
         33:09:43:1f:2e:a4:2e:96:b5:77:ce:53:75:26:2e:87:8a:2b:
         32:f3:40:ed:c4:ee:a9:c4:38:90:1b:2d:54:0f:52:78:d9:a3:
         eb:a4:fc:59:5a:a2:7b:01:dd:47:0d:d7:d7:27:f9:c5:46:1b:
         7a:df:1f:1e:51:a7:b5:27:39:b7:ea:49:dd:48:fe:18:c0:79:
         25:00:84:73:8d:bf:4e:4b:5e:cf:02:96:fe:04:b5:a2:94:d8:
         87:54:be:de:9d:e4:9d:d2:ea:b1:4c:fe:af:8e:f2:b6:bc:b7:
         ce:c2:0d:34:1d:a1:ec:3d:dd:9c:27:5d:14:5d:8d:a6:f6:44:
         a4:09:f6:bd:33:45:31:84:95:8d:e0:7e:86:b6:ab:14:90:5b:
         19:17:45:e7:07:cc:b0:7e:8e:da:66:a1:f4:4a:ed:44:e7:31:
         c6:0b:d2:7d:b2:08:02:b1:df:35:31:96:7c:fc:32:19:58:03:
         3d:cd:bd:36:d3:9a:ae:e7:b2:0b:91:8f:23:18:69:22:dc:02:
         6e:da:b3:d9
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgIUNI1lZzbED2nE/1ewVua45gUgerkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNTA5MjYyMDIxMDdaFw0yNTEwMzEyMzU5NTlaMHoxSTBHBgNV
BAUTQDIwZGEwZDQzY2I2Y2FlZThiYThiYmI4ZjMxN2U3NjE2YjAwZjNmM2IzZmQ0
YzQxNjA2YTE3ODIyMTgyYzdkMWIxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALnRZFXpLIoV7bkxlOhX8qpwRMjkSlRuupjyyvjPjWU9v+qNkvM4smnZCXHG
1XvN3EOXRFbhGII4dcJaZE3SD3KwFMLo8zUBViJ+fIoaerD2yuT+s/aZ7Bo7HFeT
rV0nbV0/KrkVV4Ms2nVgc7nEdQ34f9eAihrc1Aq06zjbE05OwuyTHDjZi3NtP8wY
7Olyeh5DkvcUMxbtn2knsYH2FH93OAsyYN3MAGn3VHd+H9DJcz7TbQBobYawHyr4
uqHMDmAL9mCTHnIWUKFmBb2iu0inD9g7pI8SUWEEB5QmISNb7u7oETpb3ngC7ZPS
G1aoImXd5DtfuGeRpvHi+b1dCDsCAwEAAaOCAiAwggIcMB0GA1UdDgQWBBSeWFCX
D30RwebAB7gFX/iLHfgi6DAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MzgzYzFmNmQtNGUwZS00ZTMzLWEyY2UtZjQ5Mzg2ZGNjMWYxLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMjgMA0G
CSqGSIb3DQEBCwUAA4IBAQCVy/GrCwJdOGKM2yvy+z9SgNj2IVGblv6TP+BIECTT
ud8LCPyNkjLcroFccItVxvIwo2p1CSYzCUMfLqQulrV3zlN1Ji6Hiisy80DtxO6p
xDiQGy1UD1J42aPrpPxZWqJ7Ad1HDdfXJ/nFRht63x8eUae1Jzm36kndSP4YwHkl
AIRzjb9OS17PApb+BLWilNiHVL7eneSd0uqxTP6vjvK2vLfOwg00HaHsPd2cJ10U
XY2m9kSkCfa9M0UxhJWN4H6GtqsUkFsZF0XnB8ywfo7aZqH0Su1E5zHGC9J9sggC
sd81MZZ8/DIZWAM9zb0205qu57ILkY8jGGki3AJu2rPZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:54:39 2025 by rpki-client