Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fee8c0a-7b7f-4886-a899-a31a331cbd8e.roa
File:                     1fee8c0a-7b7f-4886-a899-a31a331cbd8e.roa (raw, json)
Hash identifier:          uXAtIQp+b9L2vOycrYA/O/pDj/wmAMRSIWWWN+yBq+k=
Subject key identifier:   E0:CE:65:2A:2D:6E:AD:2D:19:A3:E3:AA:90:AD:7D:BE:F5:17:6E:ED
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5A0F44B18487F5D9C20D41A0FD092500828D8F3D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fee8c0a-7b7f-4886-a899-a31a331cbd8e.roa
Signing time:             Mon 13 Oct 2025 16:01:05 +0000
ROA not before:           Mon 13 Oct 2025 16:01:05 +0000
ROA not after:            Mon 17 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        204.246.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:0f:44:b1:84:87:f5:d9:c2:0d:41:a0:fd:09:25:00:82:8d:8f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 13 16:01:05 2025 GMT
            Not After : Nov 17 23:59:59 2025 GMT
        Subject: serialNumber=6c42b9b94bf5c1107280a6745614ed7b8c0f6dae686b0f382374f18514d796a4, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:ac:7f:4a:10:34:27:31:82:af:c9:8c:54:
                    6b:ca:63:96:4c:5e:3b:e9:95:79:d9:37:8a:65:fd:
                    aa:cf:0c:32:22:0a:51:88:af:91:0c:be:bc:f1:86:
                    d5:52:95:62:a8:ab:6b:cf:2f:19:71:5b:05:5b:7d:
                    0c:85:99:c8:12:b1:d0:d7:68:47:b1:57:50:7a:0b:
                    33:1a:2c:0f:9b:45:cf:a7:db:e7:3d:ad:a5:14:66:
                    7f:57:b5:8d:cb:aa:4e:1d:45:85:99:49:c6:03:c4:
                    f0:9f:65:78:b8:9c:d5:f4:46:61:4a:9b:be:2c:9b:
                    d5:68:e9:bb:d1:2f:f3:b6:74:b4:84:47:f8:06:cf:
                    2a:4b:36:06:fa:f4:5b:7b:73:68:61:eb:15:5c:28:
                    8b:da:2c:81:c7:af:a7:89:9f:f8:71:df:04:1d:fb:
                    ad:ed:f5:43:5c:27:06:d9:53:b3:1c:36:95:5c:d4:
                    dd:02:6e:f2:9b:97:cd:3a:a3:3b:72:79:a5:5a:48:
                    6b:6c:b1:0a:d2:ab:3d:a5:8b:d4:e4:e8:8c:c8:1a:
                    67:fb:5b:64:b8:6b:9b:37:8e:d1:95:bd:63:e6:e1:
                    1d:bb:a8:2f:17:80:24:08:33:32:f8:a7:15:fd:89:
                    63:e9:5c:9a:18:d0:bb:d2:ad:d1:47:8a:09:23:15:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CE:65:2A:2D:6E:AD:2D:19:A3:E3:AA:90:AD:7D:BE:F5:17:6E:ED
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/1fee8c0a-7b7f-4886-a899-a31a331cbd8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:95:67:57:f5:ff:b4:66:bd:f6:a2:f0:f3:ae:4b:af:6a:8e:
         b7:e1:df:bc:32:99:15:cd:36:17:f6:1b:21:c0:cf:d2:47:f5:
         85:d7:df:1c:d4:7e:28:58:e5:8c:2a:41:a0:a0:a5:2c:d3:cf:
         51:e2:aa:b6:1a:c0:6a:26:07:9d:e2:94:45:02:3a:eb:99:80:
         8f:cc:60:c5:ad:81:33:1b:55:ff:e0:2f:0f:0f:e2:5d:be:d0:
         7a:b9:3b:b3:73:a6:4a:ec:43:a7:6d:fb:7d:22:c0:83:c9:0e:
         83:89:79:85:7c:b2:ae:cf:c8:a5:8c:3b:2d:44:30:52:fa:fe:
         a7:75:61:aa:49:6f:99:07:fa:8e:23:51:13:4b:61:a3:9f:c7:
         67:13:28:3f:05:b8:51:7c:fb:0a:3f:89:c7:93:dd:52:8d:d7:
         3d:41:ab:df:72:06:1f:42:09:9a:08:9a:cb:1d:78:9a:a0:bb:
         8b:36:03:df:1a:1b:eb:17:f8:20:e2:a3:cb:8e:ef:c5:a3:ea:
         61:c9:13:0b:e2:fd:85:e5:de:54:e6:c9:4d:b9:86:44:d2:82:
         ed:ff:86:ab:13:51:54:cd:f7:99:25:49:86:84:57:ef:75:01:
         50:25:7b:db:a4:eb:cf:0c:5e:bd:38:72:fb:af:33:13:33:ec:
         26:bd:e3:dd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWg9EsYSH9dnCDUGg/QklAIKNjz0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUxMDEzMTYwMTA1WhcNMjUxMTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2YzQyYjliOTRiZjVjMTEwNzI4MGE2NzQ1NjE0ZWQ3Yjhj
MGY2ZGFlNjg2YjBmMzgyMzc0ZjE4NTE0ZDc5NmE0MS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTkqx/ShA0JzGCr8mMVGvKY5ZMXjvplXnZN4pl/arPDDIi
ClGIr5EMvrzxhtVSlWKoq2vPLxlxWwVbfQyFmcgSsdDXaEexV1B6CzMaLA+bRc+n
2+c9raUUZn9XtY3Lqk4dRYWZScYDxPCfZXi4nNX0RmFKm74sm9Vo6bvRL/O2dLSE
R/gGzypLNgb69Ft7c2hh6xVcKIvaLIHHr6eJn/hx3wQd+63t9UNcJwbZU7McNpVc
1N0CbvKbl806oztyeaVaSGtssQrSqz2li9Tk6IzIGmf7W2S4a5s3jtGVvWPm4R27
qC8XgCQIMzL4pxX9iWPpXJoY0LvSrdFHigkjFY6PAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4M5lKi1urS0Zo+OqkK19vvUXbu0wHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1LzFmZWU4YzBhLTdiN2YtNDg4Ni1hODk5LWEzMWEzMzFjYmQ4ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADM9rAwDQYJKoZIhvcNAQELBQADggEBALeVZ1f1/7Rmvfai8POuS69qjrfh
37wymRXNNhf2GyHAz9JH9YXX3xzUfihY5YwqQaCgpSzTz1HiqrYawGomB53ilEUC
OuuZgI/MYMWtgTMbVf/gLw8P4l2+0Hq5O7NzpkrsQ6dt+30iwIPJDoOJeYV8sq7P
yKWMOy1EMFL6/qd1YapJb5kH+o4jURNLYaOfx2cTKD8FuFF8+wo/iceT3VKN1z1B
q99yBh9CCZoImssdeJqgu4s2A98aG+sX+CDio8uO78Wj6mHJEwvi/YXl3lTmyU25
hkTSgu3/hqsTUVTN95klSYaEV+91AVAle9uk688MXr04cvuvMxMz7Ca9490=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:13 2025 by rpki-client