Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ecba0557-c004-41c2-bd5b-63142dbee294.roa
File:                     ecba0557-c004-41c2-bd5b-63142dbee294.roa (raw, json)
Hash identifier:          UrYY0XcghY4Zc1WltaH6GohGz1cWcVWXkoU02KC6VIw=
Subject key identifier:   4D:6C:B3:97:10:B5:69:CF:8E:F4:EF:47:87:F8:C8:84:8F:14:90:DC
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       1E2B2F268C9006AE4678CB17CC5A9D1AFA08A74D
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ecba0557-c004-41c2-bd5b-63142dbee294.roa
Signing time:             Sat 10 May 2025 00:40:06 +0000
ROA not before:           Sat 10 May 2025 00:40:06 +0000
ROA not after:            Sat 14 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2b:2f:26:8c:90:06:ae:46:78:cb:17:cc:5a:9d:1a:fa:08:a7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May 10 00:40:06 2025 GMT
            Not After : Jun 14 23:59:59 2025 GMT
        Subject: serialNumber=e9dc2dd1e9db5dcc48e6590cd594be658263a4009de95f05c03aeb0652399600, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:dd:34:fd:43:a4:66:1a:b4:23:5c:c0:cb:
                    b1:24:df:41:17:a4:4e:fc:5e:4b:ce:6e:e8:0c:94:
                    f1:67:d1:5f:18:0f:29:24:ca:a0:91:18:b7:de:a6:
                    d9:6c:5e:31:18:b8:21:f5:be:8a:1f:61:9c:04:b8:
                    7d:1f:01:6a:9a:e5:f1:1e:b3:90:42:3a:b6:6b:4f:
                    c1:ef:b4:ef:c8:4b:cd:8e:9c:33:00:6e:d4:70:44:
                    b4:1c:dd:76:bb:33:1d:a2:a7:6e:98:df:d3:fc:cd:
                    07:85:70:a2:cd:fe:70:4d:f3:ba:54:6c:1c:fd:36:
                    96:88:62:98:a0:dd:04:6f:7c:9b:c4:7d:39:6a:e7:
                    19:a2:53:da:af:0b:7c:9e:9d:93:b1:6a:84:75:a9:
                    26:8a:47:aa:16:5b:76:44:9a:81:a4:8e:38:97:38:
                    ec:9c:e1:b7:ef:e2:83:43:72:a7:34:11:24:c5:b3:
                    ad:5d:29:34:96:07:50:ce:95:17:95:97:06:b8:33:
                    6c:1a:b8:0b:92:76:e1:cc:62:5a:4e:04:7b:2b:dd:
                    d2:d7:f9:72:0b:83:32:1c:9d:4d:17:b8:b9:09:2b:
                    04:0c:b5:22:88:84:e5:89:3f:d0:55:08:4e:38:6f:
                    73:82:b0:c5:bf:42:f7:39:ad:75:2e:cc:cb:8c:a2:
                    6a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6C:B3:97:10:B5:69:CF:8E:F4:EF:47:87:F8:C8:84:8F:14:90:DC
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/ecba0557-c004-41c2-bd5b-63142dbee294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:88:72:54:c0:4a:d5:f6:d4:e9:a7:22:4d:5f:e7:37:5f:48:
         e4:03:62:85:b1:b9:8e:ce:fd:5f:d6:1c:7c:9c:77:f3:68:38:
         69:49:ed:2b:79:bc:54:01:49:e2:5c:d8:75:ba:0b:cf:32:09:
         07:62:50:b5:59:34:b2:6e:78:bb:a7:3c:2e:90:c5:ec:d8:3b:
         e1:b5:a2:30:40:50:61:c9:c6:47:4d:9a:a4:07:b3:9a:1e:fe:
         2f:78:2e:1c:62:60:8c:07:14:aa:61:ab:67:ff:72:8f:6b:d7:
         9e:ad:8c:53:21:c0:6a:96:db:8a:d4:c2:bc:9e:50:76:ad:0a:
         3e:14:02:a0:4a:cc:55:24:45:10:fc:f6:fd:04:66:b4:fd:dc:
         46:16:71:a6:13:5d:1a:e7:79:64:fa:43:f2:d4:ed:dd:e3:d4:
         3f:be:95:23:4b:d4:93:00:1a:48:85:6b:ee:d7:27:4e:22:c4:
         da:b6:cc:4d:8c:65:9b:c5:03:53:0d:3d:4b:39:3f:05:4b:da:
         0a:73:fe:3a:55:2e:a0:2c:c1:7c:65:58:3e:bb:1e:4e:1e:fe:
         15:9c:7f:1e:a7:ac:5b:fb:b5:57:e5:18:be:f9:03:05:4a:b1:
         da:f3:e8:2c:10:8d:90:c2:89:f1:f4:f7:d1:0c:3f:33:0c:4b:
         8f:b6:db:9f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHisvJoyQBq5GeMsXzFqdGvoIp00wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTUxMjA5MDI3ZjVlN2FkNTRlMDRmMDQyZTRhYzBlOWU2
NWM1NmU1NWM3NzQ3OGQyY2UwHhcNMjUwNTEwMDA0MDA2WhcNMjUwNjE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlOWRjMmRkMWU5ZGI1ZGNjNDhlNjU5MGNkNTk0YmU2NTgy
NjNhNDAwOWRlOTVmMDVjMDNhZWIwNjUyMzk5NjAwMS0wKwYDVQQDEyQ5ZjIzMGZh
OS1hYTJmLTQwMjAtYWUyYS0xYTYwMzc0MDg0YjgwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqYd00/UOkZhq0I1zAy7Ek30EXpE78XkvObugMlPFn0V8Y
DykkyqCRGLfeptlsXjEYuCH1voofYZwEuH0fAWqa5fEes5BCOrZrT8HvtO/IS82O
nDMAbtRwRLQc3Xa7Mx2ip26Y39P8zQeFcKLN/nBN87pUbBz9NpaIYpig3QRvfJvE
fTlq5xmiU9qvC3yenZOxaoR1qSaKR6oWW3ZEmoGkjjiXOOyc4bfv4oNDcqc0ESTF
s61dKTSWB1DOlReVlwa4M2wauAuSduHMYlpOBHsr3dLX+XILgzIcnU0XuLkJKwQM
tSKIhOWJP9BVCE44b3OCsMW/Qvc5rXUuzMuMomplAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTWyzlxC1ac+O9O9Hh/jIhI8UkNwwHwYDVR0jBBgwFoAU6PPFIOIO8l06
t6IWuxQEMWo3OPEwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
L2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OWY4ZmVkMi0y
OTJiLTQ3MjItYjkyOC1mZWU3YmYwYTU5MTAvNTUxMjA5MDI3ZjVlN2FkNTRlMDRm
MDQyZTRhYzBlOWU2NWM1NmU1NWM3NzQ3OGQyY2UuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTc1MThhZjUtYTM0My00MjhkLWJmNzgtZjk4
MmI2ZTYwNTA1L2VjYmEwNTU3LWMwMDQtNDFjMi1iZDViLTYzMTQyZGJlZTI5NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3NTE4YWY1LWEzNDMtNDI4ZC1iZjc4
LWY5ODJiNmU2MDUwNS9YbnJWVGdUd1F1U3NEcDVseFc1VngzUjQwczQuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADN+/gwDQYJKoZIhvcNAQELBQADggEBAIGIclTAStX21OmnIk1f5zdfSOQD
YoWxuY7O/V/WHHycd/NoOGlJ7St5vFQBSeJc2HW6C88yCQdiULVZNLJueLunPC6Q
xezYO+G1ojBAUGHJxkdNmqQHs5oe/i94LhxiYIwHFKphq2f/co9r156tjFMhwGqW
24rUwryeUHatCj4UAqBKzFUkRRD89v0EZrT93EYWcaYTXRrneWT6Q/LU7d3j1D++
lSNL1JMAGkiFa+7XJ04ixNq2zE2MZZvFA1MNPUs5PwVL2gpz/jpVLqAswXxlWD67
Hk4e/hWcfx6nrFv7tVflGL75AwVKsdrz6CwQjZDCifH099EMPzMMS4+2258=
-----END CERTIFICATE-----
Generated at Sat May 10 07:10:39 2025 by rpki-client