Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa
File:                     9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa (raw, json)
Hash identifier:          fi1gfvOaHqO9HaCoUIUJqoD+N3hrOXcXo+gqkAOMjiU=
Subject key identifier:   F4:32:7B:28:02:AE:8D:F2:3A:19:1C:3A:EF:6C:31:E7:E1:66:DE:80
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       46664089390B30AA0AEE98AAB8C02B511FB1A1A9
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa
Signing time:             Wed 04 Jun 2025 00:40:20 +0000
ROA not before:           Wed 04 Jun 2025 00:40:20 +0000
ROA not after:            Wed 09 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        205.251.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:66:40:89:39:0b:30:aa:0a:ee:98:aa:b8:c0:2b:51:1f:b1:a1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jun  4 00:40:20 2025 GMT
            Not After : Jul  9 23:59:59 2025 GMT
        Subject: serialNumber=f6a6a3fdfd2f1300109c1e9266538cf984bb2f2d315844182e64b5a52437d002, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:05:f0:db:84:a3:74:7b:fd:07:17:77:92:
                    b2:9e:be:12:ec:54:ff:22:6d:01:25:bb:9f:3a:4d:
                    8f:9c:37:49:d9:d3:f5:81:dd:8b:58:02:bb:e6:f7:
                    b3:a3:0f:65:44:d4:34:44:05:33:c3:a3:82:be:fc:
                    5c:7a:f6:be:ff:59:b4:4b:20:83:06:65:6d:cb:2f:
                    64:a9:d1:39:33:a6:67:96:f8:d1:b9:4f:d4:64:f6:
                    b5:17:cc:3d:6c:f3:bf:92:09:30:d6:11:ea:60:db:
                    8f:19:da:cf:8b:2b:d4:46:5d:f1:8b:fe:67:ff:ad:
                    cc:c8:8f:25:62:eb:32:7b:df:d0:25:14:df:82:8f:
                    13:8f:f2:b2:ae:c1:ab:99:ce:39:65:b5:09:a6:b2:
                    4e:36:ba:b7:61:17:46:9a:03:03:d5:24:5f:4b:6d:
                    b2:d0:b9:f7:40:ca:b6:69:6f:d2:c6:c1:57:0f:3d:
                    fb:8e:f9:12:f6:4a:f0:ae:ec:96:58:e6:67:89:cb:
                    e7:6f:fc:ff:69:54:f4:15:94:22:36:49:c7:57:de:
                    6d:2b:02:9e:6e:1e:13:66:56:a4:e0:4f:4d:46:ab:
                    2e:d2:0e:b4:89:1f:bb:59:9f:24:f2:14:e9:91:34:
                    97:3a:82:6d:71:3e:77:25:61:89:26:c6:62:1d:74:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:32:7B:28:02:AE:8D:F2:3A:19:1C:3A:EF:6C:31:E7:E1:66:DE:80
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:da:9e:d5:b2:d3:18:80:41:fd:c6:8a:fa:82:71:0b:92:bf:
         cb:34:52:9a:4a:2f:03:24:72:e1:29:fd:8e:f1:bd:d2:4e:f6:
         3a:4b:44:5f:5e:98:ab:af:37:1e:2a:bd:02:59:d1:4f:8b:57:
         fb:b8:bd:01:1c:ca:c8:67:bc:c5:c4:83:0b:2f:23:86:c9:3e:
         1d:d7:8d:f7:92:cd:db:85:8f:19:e0:c5:42:1f:31:fb:08:26:
         6c:c7:3f:d7:0b:15:63:c0:31:a0:f9:e8:7a:c5:3b:aa:b1:6d:
         8f:93:11:96:18:f7:4b:f3:5e:57:2a:09:14:ae:90:29:d5:96:
         f8:a0:73:a9:77:e3:cb:c9:57:37:d0:aa:31:9f:4f:1b:0f:82:
         60:6c:0d:ee:dc:c2:b7:23:65:38:d0:97:34:a1:1d:96:65:47:
         dd:90:be:b6:ce:6e:f3:bb:74:d7:63:fe:19:47:5b:43:16:90:
         1d:ab:98:fb:55:b5:21:ed:13:39:92:12:36:fd:e8:84:19:e7:
         a6:8c:a4:49:47:d6:88:b9:93:8c:55:4f:8a:3c:93:e6:d0:9c:
         fb:34:58:16:25:51:99:83:8d:f4:d9:1e:13:3b:7c:6b:24:6b:
         b0:03:10:e3:64:72:a8:e6:a8:59:39:18:ba:eb:96:ee:00:77:
         85:8f:77:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 05:48:26 2025 by rpki-client