Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48acbdf5-045b-4378-901b-6e31b6e6e27d.roa
File:                     48acbdf5-045b-4378-901b-6e31b6e6e27d.roa (raw, json)
Hash identifier:          lpgZbQggyzzaFmKIl37tWhQUKV8ypvX6KIbbh7CAbtI=
Subject key identifier:   06:FB:B0:CA:20:AB:59:83:D6:1E:F0:92:C9:46:6F:84:E4:40:9B:6E
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       292F5B6C1B697C1B06A662E875E23CB13CFC56BE
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48acbdf5-045b-4378-901b-6e31b6e6e27d.roa
Signing time:             Mon 13 Oct 2025 16:10:29 +0000
ROA not before:           Mon 13 Oct 2025 16:10:29 +0000
ROA not after:            Mon 17 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2f:5b:6c:1b:69:7c:1b:06:a6:62:e8:75:e2:3c:b1:3c:fc:56:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 13 16:10:29 2025 GMT
            Not After : Nov 17 23:59:59 2025 GMT
        Subject: serialNumber=c9dc2e52298a72137c8aa4712734c5412534edeb995cd478b110e56aaa2a79bf, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:13:86:b0:db:19:6d:d1:fc:19:49:d1:d3:
                    71:fa:c4:01:66:aa:15:f4:b3:53:02:05:51:78:79:
                    7c:c3:3c:cf:e3:6f:32:ab:a4:3e:be:d5:18:06:54:
                    48:bb:7b:ac:c4:a5:3d:bb:5b:db:c5:2a:15:f1:95:
                    e0:19:7b:1a:d4:19:6a:72:81:a6:6d:27:aa:2d:bd:
                    6f:d4:bd:e8:26:61:a7:e3:c5:30:81:c2:49:35:5c:
                    1a:2d:19:02:29:e5:0b:05:75:07:39:19:54:81:fb:
                    f5:d1:af:95:25:42:2f:fc:73:1d:a6:a6:bf:e7:f9:
                    9b:38:28:c4:bd:f8:ee:09:7a:48:2e:79:e9:c0:20:
                    05:c0:d1:73:dd:fe:38:7a:32:db:38:91:b3:63:91:
                    e7:f7:78:da:73:71:4d:44:79:5e:fc:65:51:90:e4:
                    51:37:36:be:87:93:be:30:42:6b:5e:d7:21:e4:b4:
                    7f:35:64:ed:e7:ad:24:ed:e1:db:e1:c6:30:32:e8:
                    7e:ad:24:c7:13:54:5d:dc:13:52:f6:1e:64:97:5b:
                    6d:68:db:2f:65:da:36:4b:c0:ff:71:95:cf:dd:7e:
                    a8:aa:4e:7a:ce:8c:1d:6d:5a:b4:6d:e1:cd:83:82:
                    1c:5d:cc:1a:ab:3c:8e:93:09:87:a4:a7:d4:ea:12:
                    26:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FB:B0:CA:20:AB:59:83:D6:1E:F0:92:C9:46:6F:84:E4:40:9B:6E
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/48acbdf5-045b-4378-901b-6e31b6e6e27d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ed:c5:e2:0e:05:1b:2c:e6:74:35:06:2e:98:82:23:55:4e:
         e1:e5:61:00:8b:f8:83:50:77:b5:03:4a:43:7b:a6:67:18:41:
         1c:c4:6c:4a:51:c4:de:b6:f6:a4:34:9c:ea:3e:ac:3f:98:ca:
         d4:cd:f1:e8:2f:ee:e3:fb:e7:7a:c1:08:8f:ce:90:91:84:fb:
         dd:27:34:fe:ce:8c:4f:80:58:e4:e4:39:8e:7d:89:76:42:77:
         94:a4:9d:20:55:f7:e0:83:b9:e5:79:df:d2:4a:fb:0b:9d:fe:
         a8:03:02:40:41:d5:fb:cd:c1:ea:24:b1:f4:91:b1:f0:29:55:
         d9:f8:5c:bc:66:d2:fd:cf:ac:89:54:5e:91:21:61:f5:93:9c:
         3f:28:8f:04:dd:a3:be:52:d4:2f:28:8c:71:cd:9c:ab:65:10:
         b1:79:72:32:fb:b9:fc:d7:b8:bf:ff:cc:97:9e:e9:4b:ab:73:
         0d:90:7b:a9:eb:cb:92:11:29:ae:47:39:7d:97:d4:24:26:e7:
         57:1e:af:5b:42:a7:a1:8e:8e:b0:db:3d:6b:1a:c3:1c:fa:fd:
         66:c1:5f:9f:60:03:c2:2b:b9:3b:17:a5:a8:02:db:2d:c9:bc:
         4f:86:61:49:a9:aa:4b:b9:21:bb:e9:71:02:85:9d:cc:1d:9b:
         4c:a5:6b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:07:40 2025 by rpki-client