Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa
File:                     9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa (raw, json)
Hash identifier:          bqj/+Wh4z0n92+1mVHQ5RW9TlX44TlXbQVngJLrGs68=
Subject key identifier:   9E:35:22:F6:2B:B6:FB:10:51:73:17:A1:F3:E0:36:39:B8:89:1F:4C
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       6C64928613E304579AE751604E9F6D4AB708039B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa
Signing time:             Wed 08 Oct 2025 00:51:16 +0000
ROA not before:           Wed 08 Oct 2025 00:51:16 +0000
ROA not after:            Wed 12 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:64:92:86:13:e3:04:57:9a:e7:51:60:4e:9f:6d:4a:b7:08:03:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct  8 00:51:16 2025 GMT
            Not After : Nov 12 23:59:59 2025 GMT
        Subject: serialNumber=1b737fff7c6bf36ee18456597599e2d20b05fbe4a884e178ceb308e4883ce643, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6a:f3:81:2c:25:29:df:11:31:88:61:01:f3:
                    ad:fd:be:ee:f9:58:ca:96:09:6e:54:8a:05:f7:b1:
                    cf:7c:ac:0b:63:18:14:4d:d4:a2:6d:4c:3d:82:a7:
                    d2:dc:6c:5d:e2:74:51:8c:c5:02:5b:ee:b6:3b:df:
                    91:87:54:30:19:ee:93:db:bf:83:3d:58:0c:33:59:
                    ff:c8:28:ea:4d:d1:3f:50:7a:68:6f:d2:48:54:1f:
                    14:5c:41:d6:4d:c7:9c:cc:e2:a7:58:3e:21:55:81:
                    19:a3:9f:bb:67:f3:22:b8:2c:19:d3:b9:44:fd:45:
                    64:db:85:02:d7:97:69:4f:5f:5d:37:f0:c3:b6:e1:
                    6b:fa:91:af:e3:dc:80:01:f9:4c:2d:c2:fc:3e:07:
                    86:d7:b1:51:e4:c2:56:e0:db:45:8d:30:f2:54:32:
                    c3:15:bf:da:be:57:c8:ad:b2:2d:7e:8b:b2:2a:52:
                    5e:c7:cb:de:3a:8d:71:e8:9f:11:a5:e2:74:1b:50:
                    68:63:75:69:63:2f:c4:75:48:6d:14:0c:8a:4c:bf:
                    2d:ac:5c:72:fd:87:5b:ff:72:0c:d6:9a:ec:fe:03:
                    3f:6a:d2:e3:eb:50:7b:52:cf:0e:b3:3b:4a:7d:4a:
                    e5:4e:36:3c:5e:e6:6e:5a:c6:4b:fc:d9:32:5f:e5:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:35:22:F6:2B:B6:FB:10:51:73:17:A1:F3:E0:36:39:B8:89:1F:4C
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:29:d8:6d:5b:03:04:5b:3c:6d:d5:af:8b:b3:ce:d5:f1:9d:
         3f:80:e6:98:52:0d:a0:75:88:9e:39:e8:b9:4a:b1:7b:16:e8:
         c0:09:57:91:08:7b:a7:41:1d:08:5a:f0:46:35:4d:f1:45:46:
         c4:ad:47:29:79:a7:31:2f:ce:bc:80:5d:b4:6d:46:ac:26:9f:
         1d:49:d6:b5:03:7b:8a:77:0e:88:cc:fd:8a:ab:f8:da:41:11:
         bf:32:d4:4b:ec:06:0f:41:1f:26:0b:f6:75:39:b3:97:a6:e8:
         f5:c2:e5:db:10:65:64:f6:e0:96:88:5c:94:f3:f6:89:b7:81:
         29:cd:0e:c9:bd:1b:2b:be:2d:9c:f5:db:99:78:70:56:9e:56:
         fa:0e:32:de:49:c8:5d:59:29:e2:ac:1f:96:b0:a9:85:07:5e:
         a0:4d:1e:38:14:36:4e:3b:34:58:1d:1c:22:6b:1c:3f:eb:a5:
         36:db:39:c6:4f:62:a9:ff:b7:2d:1e:a9:85:28:18:54:de:9f:
         3d:8c:eb:8a:f5:7f:81:87:78:c4:a1:89:47:34:f7:ab:ae:db:
         81:8d:c5:18:ce:96:59:79:25:b0:01:fc:7d:19:57:f8:5f:53:
         b1:e5:29:1c:ef:d1:3f:0c:8f:4f:6a:e4:b9:ed:31:5e:84:da:
         ee:44:99:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:00:36 2025 by rpki-client