Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/154534d5-da69-43fe-9f0c-aad88b97483b.roa
File:                     154534d5-da69-43fe-9f0c-aad88b97483b.roa (raw, json)
Hash identifier:          U7iSXI/Cg3/YCiInVPHr2Zh4Z+MYQ1xmVbVpT9fetI8=
Subject key identifier:   CC:C9:15:3C:3A:CE:CE:BC:89:80:BA:16:F5:B6:54:9A:61:FC:9B:7F
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       43A62930FBE66D3714A747E2F39E51F06FDD301A
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/154534d5-da69-43fe-9f0c-aad88b97483b.roa
Signing time:             Fri 15 May 2026 00:10:23 +0000
ROA not before:           Fri 15 May 2026 00:10:23 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a6:29:30:fb:e6:6d:37:14:a7:47:e2:f3:9e:51:f0:6f:dd:30:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: May 15 00:10:23 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=38256cf85d9bd4a9b787e78b8ef16a6014521d9c6f7d69103ab303edd3e23713, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:74:00:90:94:49:80:84:34:68:8c:a7:d1:59:
                    8e:97:0a:32:33:61:c5:36:ac:2f:f4:91:1d:0e:c0:
                    bc:ce:1d:50:e9:d9:9e:89:1b:76:29:97:6a:d5:fb:
                    bc:b4:a8:45:f0:fa:80:b1:70:9c:8a:37:06:fa:f2:
                    87:87:1f:14:bc:c7:7c:86:4e:c2:7c:31:ff:37:a5:
                    f6:41:84:42:e7:ff:4d:7f:a5:17:13:59:b9:2a:55:
                    14:6e:c4:61:73:f8:25:64:69:b2:6a:1d:a5:b9:e7:
                    15:64:43:ae:23:df:a0:04:44:34:a5:d2:93:c9:b5:
                    fc:e4:78:9c:90:96:e3:92:76:c3:de:17:53:c7:04:
                    24:7b:f0:83:37:f4:d5:d4:51:f1:64:1c:c5:31:82:
                    91:f0:09:a5:f0:a8:29:e2:43:64:6d:0c:ee:37:a8:
                    df:d4:d6:43:7e:d0:3b:f3:7d:cd:24:ec:10:67:4b:
                    c6:1c:f4:18:f2:ef:5d:c0:30:0f:aa:cc:38:8c:02:
                    a6:fc:e0:0e:56:29:39:17:9b:bc:9f:19:31:82:5e:
                    fd:06:96:7c:fe:7e:c5:61:9c:cb:6e:4e:2e:3c:bf:
                    1e:44:ff:11:5c:f8:c4:28:55:09:46:26:66:bb:57:
                    8f:66:e2:ab:fe:6c:53:06:d3:74:15:aa:7f:9c:6c:
                    26:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C9:15:3C:3A:CE:CE:BC:89:80:BA:16:F5:B6:54:9A:61:FC:9B:7F
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/154534d5-da69-43fe-9f0c-aad88b97483b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:5b:92:d2:7e:e2:7b:a3:af:85:07:2c:ba:1f:bc:da:a2:
         68:e9:9d:ad:43:db:8f:f3:78:2f:5e:0b:bc:a6:e7:08:71:4d:
         74:5a:34:ce:1a:57:a6:ae:56:34:cd:11:5b:8a:25:f5:00:d7:
         13:21:58:2c:fb:55:85:eb:ec:b3:b0:85:5a:20:c9:e9:87:93:
         64:ed:79:fd:62:ec:8a:cb:2f:35:53:df:4e:9a:17:de:e2:30:
         f2:bc:1e:83:1d:e7:41:f5:01:1f:c9:dc:fa:ce:e5:58:c3:7f:
         45:09:e2:2d:5b:95:44:12:7a:78:6e:ee:19:72:5c:e4:e2:59:
         04:d8:91:c8:aa:05:db:a7:f2:6a:a1:6e:34:12:7d:ae:af:28:
         b3:05:9f:f0:c7:62:7b:e3:b2:54:3e:4e:9f:5f:a3:3a:61:a1:
         d3:49:88:bb:6b:a8:3e:5e:74:e7:c9:cf:da:14:7e:1d:08:f3:
         8b:d8:1d:74:08:52:7c:31:de:cc:40:39:94:8c:fb:d9:ab:a4:
         21:8e:de:6b:4f:ff:64:b6:ec:96:e1:b4:f2:7d:d3:9d:f2:b4:
         cf:3d:bb:da:73:36:82:5d:b0:0b:1b:bd:0f:4d:8d:0d:d1:4a:
         62:16:ab:52:76:68:ef:26:8c:6c:22:43:29:13:68:c9:55:0a:
         02:69:18:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:41:49 2026 by rpki-client