Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c107e67-3f1b-41c5-8f3c-9a9eccb8ead7.roa
File:                     8c107e67-3f1b-41c5-8f3c-9a9eccb8ead7.roa (raw, json)
Hash identifier:          dCybN8j70yA3AETt9cCz2iId1CXK9OA+OY2QxkRrWZE=
Subject key identifier:   F1:BE:50:10:57:A6:E6:E9:62:B6:ED:AA:FB:FF:16:45:E1:55:C6:BD
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       31D8AD2041465522FE445CE0B6A197A7D193C63B
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c107e67-3f1b-41c5-8f3c-9a9eccb8ead7.roa
Signing time:             Sat 25 Jul 2026 00:30:19 +0000
ROA not before:           Sat 25 Jul 2026 00:30:19 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        205.251.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d8:ad:20:41:46:55:22:fe:44:5c:e0:b6:a1:97:a7:d1:93:c6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 25 00:30:19 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=dbc5df938f7851c6adfd130a7c5c915f41d5c14faae13048fae98c73043a7c59, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:0f:d2:3d:72:80:a9:ec:db:cd:4e:9a:f1:
                    19:aa:84:f2:64:a7:ea:26:3a:18:67:2e:c5:e8:9f:
                    ad:31:75:1e:63:80:ea:81:01:81:6b:89:49:6a:5c:
                    91:3d:f7:e5:d3:07:7a:15:e3:f2:b6:dc:38:20:81:
                    a3:03:94:2c:98:5c:d6:6f:30:dd:94:b0:27:67:88:
                    f2:2f:62:70:d5:d3:34:f9:bd:a3:51:92:b9:43:b1:
                    5f:8e:d1:df:b6:97:f8:a8:ac:3d:ad:02:c3:5f:89:
                    83:7d:91:e6:60:7b:9c:7a:63:38:29:95:d1:84:8c:
                    87:1b:90:76:60:e4:5b:c4:c4:75:db:56:04:91:3d:
                    34:c1:2f:cd:5b:f5:c2:17:0d:1d:91:b9:c5:5a:81:
                    a2:43:7a:ae:8d:cd:7a:a9:44:52:bc:08:d4:17:d3:
                    eb:ab:cf:e3:8b:67:dd:0c:9e:eb:75:8b:6f:7a:e6:
                    05:71:ab:fd:2b:c3:94:dc:db:1b:9d:50:11:b5:29:
                    5c:61:9f:80:a1:d9:d4:86:73:66:84:02:3b:71:a1:
                    59:43:18:7c:74:59:b4:64:ca:4b:0a:6c:48:d1:67:
                    55:d4:00:20:ba:7d:4e:32:64:53:22:96:40:c2:82:
                    31:2d:dc:38:9b:39:17:cc:39:8f:fc:05:de:23:4f:
                    5d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BE:50:10:57:A6:E6:E9:62:B6:ED:AA:FB:FF:16:45:E1:55:C6:BD
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/8c107e67-3f1b-41c5-8f3c-9a9eccb8ead7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:ab:1d:b1:80:95:b4:29:a5:8b:d9:33:16:f6:e3:a9:b9:a3:
         c9:4c:bc:5b:83:d5:4f:36:1c:80:9d:36:6b:da:4f:d7:03:de:
         24:3d:2b:db:49:bf:5d:4f:54:2f:42:23:62:50:0f:42:09:1f:
         bb:92:1d:90:cb:26:b7:c8:a1:62:1a:4f:f3:9a:74:25:b1:fd:
         45:65:9c:87:e6:2e:ef:a6:b0:30:1b:5d:91:f5:e3:5c:94:13:
         ea:41:4d:6c:59:6e:77:56:ec:81:ac:15:16:d1:b5:99:f0:c0:
         d8:bd:d5:d1:10:2c:d7:17:d0:5c:41:42:7d:7a:2c:d8:ac:62:
         64:95:f1:91:55:37:bc:5b:64:9c:18:ce:f9:72:d9:b7:71:16:
         27:00:d6:e7:88:e8:8b:ea:03:fc:aa:3b:f1:f6:f2:64:99:87:
         3e:91:35:e5:1d:0f:9e:b3:5a:4c:e1:d9:cb:e8:75:4d:e5:0a:
         c7:19:64:04:c4:ab:24:92:42:9c:63:fb:98:cc:69:47:b4:93:
         0f:46:3d:5c:d8:97:1d:df:98:50:d4:b5:b8:dd:f3:09:5e:9f:
         39:c8:b8:ce:a5:52:3e:d6:5a:fc:a1:03:6d:e1:e1:65:48:da:
         2e:98:63:8b:49:d8:40:9f:37:ac:43:1f:da:fa:84:9c:37:f0:
         2b:ea:d8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:11 2026 by rpki-client