Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa
File:                     9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa (raw, json)
Hash identifier:          cGxIHZKQxTCL6nX2Y7FgQWsHMc9kvRvk6U3yuyauFx8=
Subject key identifier:   DA:25:DC:57:02:AB:84:59:58:03:98:3B:3B:DC:13:B2:32:C5:05:F7
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       4DE9B95D929DEF597EB8AB6A6A2641312511348E
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa
Signing time:             Tue 19 Aug 2025 00:40:48 +0000
ROA not before:           Tue 19 Aug 2025 00:40:48 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e9:b9:5d:92:9d:ef:59:7e:b8:ab:6a:6a:26:41:31:25:11:34:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Aug 19 00:40:48 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=04444ea606aced9688f0c88d5a7d69fd66536e5f89aa6e6887368494b7ac4dee, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fc:81:fb:1b:b8:cf:e8:ca:33:c9:5a:77:9b:
                    5b:b4:dd:38:ab:27:fc:9e:c7:32:44:a9:df:be:e4:
                    5c:0e:86:57:b9:e1:60:51:fd:41:ea:eb:ae:05:5a:
                    45:9c:a2:31:b8:60:00:43:d2:6d:80:c8:82:f9:1d:
                    61:3c:cd:4b:a9:ee:43:ac:ac:4a:f7:3b:5c:05:50:
                    77:81:e4:35:c5:c5:d9:54:a7:82:45:37:99:21:b6:
                    06:da:ba:3d:e1:48:3b:a6:2d:a5:9f:d0:cf:e4:19:
                    90:20:2a:38:3d:8b:e6:6f:a4:26:84:c6:20:af:cb:
                    b8:d3:97:4c:db:bb:9c:64:da:3c:87:e4:96:50:bb:
                    b4:23:d5:83:e9:d1:45:48:48:fa:35:05:2d:df:bb:
                    7f:63:87:34:dd:2e:01:8d:db:95:bd:2c:8e:18:f6:
                    f5:40:f7:70:91:5a:34:65:47:2b:70:92:fe:09:28:
                    56:b6:af:54:98:e1:2e:0a:e8:3c:55:0a:a7:37:1d:
                    0a:72:b6:9d:0a:61:b4:4b:97:62:16:d1:f7:66:40:
                    12:e6:32:c9:f3:17:51:70:0d:2c:06:b3:29:fa:89:
                    31:93:a4:a4:56:83:74:f9:36:7e:6b:b3:ec:f3:3d:
                    e9:05:c3:ba:b5:6e:6d:90:a0:fe:83:46:c3:f8:25:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:25:DC:57:02:AB:84:59:58:03:98:3B:3B:DC:13:B2:32:C5:05:F7
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:df:db:36:d2:f7:15:f0:cd:e7:82:48:15:cd:cb:47:be:
         8b:45:af:df:42:32:c8:27:17:05:88:fa:7d:32:81:8b:f1:a6:
         8a:7e:7f:57:e9:8a:34:0a:ce:12:50:bf:8b:98:a3:8e:8f:5b:
         41:97:c9:f7:ea:92:c6:f5:eb:81:c6:92:19:59:cf:61:c0:bf:
         1a:7b:25:32:b5:6c:95:98:9a:ef:35:d1:c1:f9:55:9f:d3:32:
         b8:cc:93:a1:d6:36:39:27:75:a7:2b:ec:41:cf:c0:b1:8a:f5:
         6c:ea:4c:1a:b6:b8:f4:4d:58:a1:48:2c:b9:09:d8:6e:66:39:
         f1:71:bc:c5:b0:78:a0:b2:00:a9:ce:08:84:3a:40:53:6e:c9:
         fa:15:81:cb:ff:ae:f0:79:87:b6:d5:9c:03:d3:1e:e9:08:ce:
         63:b7:db:60:08:ba:24:55:1b:76:64:18:73:bd:a5:50:a0:bd:
         b1:77:c5:dd:07:e6:7e:b0:b8:81:35:ed:00:e5:ab:ee:af:7f:
         64:08:3a:9c:a7:29:60:99:3f:5f:3b:a4:b5:97:0d:cd:78:29:
         a1:8d:5e:ab:86:82:e3:1a:43:c3:3e:25:c1:83:1e:5c:33:99:
         c5:15:03:41:7f:3b:14:94:9c:56:ca:e5:ac:27:bd:2a:f4:a2:
         b3:85:c8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:05:01 2025 by rpki-client