Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2712c86-3dd7-4f6a-a1d8-161a45edb1b4.roa
File:                     e2712c86-3dd7-4f6a-a1d8-161a45edb1b4.roa (raw, json)
Hash identifier:          UlEH375u7eTDTH7aLWqQmbH8QsEzmmGyyWTj3fXq4rc=
Subject key identifier:   87:2D:DF:A9:4C:84:CE:B5:C5:04:9A:B2:C5:C5:BC:36:F1:8D:A3:64
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       2237AD918498CC0827ED9319FE0825E58875CA75
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2712c86-3dd7-4f6a-a1d8-161a45edb1b4.roa
Signing time:             Mon 13 Oct 2025 16:38:14 +0000
ROA not before:           Mon 13 Oct 2025 16:38:14 +0000
ROA not after:            Mon 17 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.137.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:37:ad:91:84:98:cc:08:27:ed:93:19:fe:08:25:e5:88:75:ca:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 13 16:38:14 2025 GMT
            Not After : Nov 17 23:59:59 2025 GMT
        Subject: serialNumber=67f282807d603fa0ddf9f67d696dada715d489b0f0a54344816088e3cceffcd6, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:7e:0b:e7:7c:36:03:ce:46:a1:b8:62:84:
                    be:20:92:5d:f6:27:3c:2e:d1:b0:75:3c:55:df:f7:
                    d9:90:d7:cb:df:a3:d5:00:82:5d:c5:5f:98:96:28:
                    06:88:9f:c1:9c:43:65:a1:f9:8c:ef:07:c8:cb:4b:
                    9c:3b:55:4a:ad:ed:f1:e3:26:e1:19:56:54:ca:a3:
                    54:05:da:de:49:1e:f2:88:b8:9d:97:57:75:91:ab:
                    80:6e:b7:00:c0:60:b3:85:bc:b6:3e:f7:e8:52:cf:
                    17:7b:e0:ea:6b:9a:c6:b9:e3:4b:54:e3:4e:35:e9:
                    37:a9:07:65:c1:a9:fd:12:07:0a:64:2b:f0:f7:93:
                    8e:ef:61:b9:a7:5c:27:16:79:fc:7b:dc:7b:b6:8c:
                    43:93:01:f5:3c:d4:1b:95:ce:29:56:ed:94:45:49:
                    b8:c6:72:ca:d2:23:44:fa:cf:e2:f8:84:c8:93:70:
                    de:d8:7f:df:98:e0:16:38:66:c4:db:34:04:65:79:
                    c1:c5:4b:90:b8:12:e6:d3:8f:59:ce:df:c8:f6:86:
                    f4:b9:60:a5:5d:11:bf:ff:22:99:91:3a:55:6c:34:
                    41:1b:22:d8:fe:8a:ab:e6:55:c9:06:d2:69:3e:be:
                    17:7e:9b:da:31:47:4e:76:7a:74:bc:ac:0d:4c:f8:
                    1e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2D:DF:A9:4C:84:CE:B5:C5:04:9A:B2:C5:C5:BC:36:F1:8D:A3:64
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/e2712c86-3dd7-4f6a-a1d8-161a45edb1b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:78:23:5c:02:a8:4a:b5:5a:60:82:1e:04:4e:1a:d9:32:73:
         b5:76:16:9e:8c:4d:89:87:2a:21:81:79:be:68:04:82:5c:94:
         17:0e:ca:a0:bf:21:43:b4:04:50:f1:04:be:f1:70:7a:aa:4f:
         9a:84:11:42:a3:34:55:a0:de:da:a8:b9:7a:93:f2:3c:0e:70:
         90:30:ae:0c:b9:f5:5e:1d:96:76:47:cd:ed:4b:74:fd:aa:17:
         08:84:a2:94:3f:57:c7:25:ae:ab:85:0e:85:65:61:69:18:d8:
         0e:42:f3:fa:e8:44:93:57:cb:5e:60:5e:ad:51:3d:b6:fd:ca:
         80:2b:f1:d8:46:bd:e7:b7:9c:a1:bf:2b:b4:e4:35:70:a1:be:
         88:13:ee:18:6d:47:65:21:93:0f:7f:4f:d7:7e:a6:a8:3d:95:
         0f:1e:6e:28:bb:02:b1:20:f3:79:15:3b:55:62:d5:59:b3:2e:
         aa:6e:92:98:99:22:90:1d:aa:65:a3:7d:e4:24:dd:0d:78:f4:
         40:c8:5e:be:b1:be:3f:35:df:fd:65:98:6a:af:ca:ca:06:cd:
         c2:c4:d7:96:b9:5a:99:17:29:d9:ab:f3:b2:ef:80:b6:b2:4b:
         e2:87:d8:94:54:cd:7d:b7:05:db:d9:40:a0:c5:68:2f:2c:d5:
         49:1c:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:08 2025 by rpki-client