Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/16b57026-c673-4ef1-bc38-7596daa2e043.roa
File:                     16b57026-c673-4ef1-bc38-7596daa2e043.roa (raw, json)
Hash identifier:          EeLWVaHhdAMDNYwvgLsJiLk8KGU8UScWrOVdSN3CqU8=
Subject key identifier:   81:52:3A:88:99:88:4D:02:E4:BF:29:5E:08:A7:3A:6D:29:C3:B6:7F
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       7B7A9581B9534FAFB4EC1BD05D2876022BA2896E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/16b57026-c673-4ef1-bc38-7596daa2e043.roa
Signing time:             Sat 31 May 2025 00:00:25 +0000
ROA not before:           Sat 31 May 2025 00:00:25 +0000
ROA not after:            Sat 05 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:7a:95:81:b9:53:4f:af:b4:ec:1b:d0:5d:28:76:02:2b:a2:89:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: May 31 00:00:25 2025 GMT
            Not After : Jul  5 23:59:59 2025 GMT
        Subject: serialNumber=58aaf78ff51f060239be03453d2d35b39950f03e8f83d2f8d3139bcc777ed425, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:09:67:c1:97:cf:8b:1b:27:44:4d:2f:3c:04:
                    ef:50:d6:0b:84:6b:47:a7:ec:6b:57:41:98:ee:13:
                    6d:66:10:38:7c:93:66:76:d3:d2:1f:b3:5e:05:d2:
                    7b:b8:fd:2a:5b:3c:8d:94:a3:9a:4a:16:6e:8a:e8:
                    83:87:dc:cb:a1:4e:f6:52:e9:3e:a2:87:0e:0c:34:
                    a4:3b:32:37:0b:31:3a:9e:c9:2c:d6:6d:f5:ee:66:
                    bf:04:ad:3e:e4:d5:d8:6a:4b:c5:85:5a:76:48:50:
                    51:e6:0e:5c:c4:f8:25:78:e4:13:34:be:c4:05:6a:
                    d9:c8:99:f5:8e:a1:c4:50:d9:c9:47:ab:d6:3a:02:
                    ca:bf:5d:d7:d3:45:ea:65:3f:a3:10:46:5b:0a:02:
                    92:c6:e0:06:a9:46:b2:f4:4c:57:d4:d0:0b:55:5d:
                    77:82:5c:8d:ed:fb:ef:ce:60:1c:4d:11:bd:3c:18:
                    56:87:a0:1a:c1:7a:36:53:63:12:01:d9:1a:1f:f6:
                    fb:09:15:32:53:a6:ac:22:99:b7:33:f1:eb:22:ea:
                    48:e0:ad:ea:33:82:b7:57:da:b8:7a:30:44:6b:4f:
                    d4:ed:af:58:34:1b:0b:a8:14:69:22:70:27:73:e0:
                    d7:07:67:11:3c:2c:9a:4f:84:ea:a8:96:d0:32:00:
                    2e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:52:3A:88:99:88:4D:02:E4:BF:29:5E:08:A7:3A:6D:29:C3:B6:7F
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/16b57026-c673-4ef1-bc38-7596daa2e043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:2f:ec:33:e2:30:88:38:db:e9:c5:5f:57:ad:2f:2a:f2:7a:
         18:94:e9:33:69:33:91:93:56:5e:6b:34:1e:ba:c5:96:80:10:
         a2:ec:d3:10:f9:5a:4c:00:bd:ec:2e:52:4d:9d:ee:a0:cb:b9:
         98:6d:d7:aa:ee:47:ce:46:23:df:53:c6:1d:9b:bb:65:9a:8a:
         b1:41:88:6b:ef:66:85:02:55:0a:88:a4:bf:a0:fa:c0:0d:e6:
         8f:91:8e:e1:8a:1a:c4:66:58:07:62:50:62:8c:e8:06:19:fa:
         85:a1:ad:3e:dd:ac:df:1a:f9:7b:db:6f:7a:8b:b4:ee:d5:fe:
         75:0c:79:cd:19:dc:20:05:0f:4b:8c:97:71:0e:de:f6:ca:ad:
         2a:4c:ed:d1:22:1c:a6:25:ef:6b:3a:ab:ea:04:d8:61:1e:3a:
         ee:8b:d8:63:bc:24:6c:78:9d:3f:ef:73:2e:ee:b4:fa:e1:0d:
         38:f0:51:73:9b:4d:81:ea:38:54:4e:e0:e2:d0:1a:71:75:b2:
         cb:cf:9d:fc:0a:f3:00:ac:ce:b2:3c:c6:b3:0f:c0:d2:68:9c:
         a1:80:de:9d:0a:83:d2:29:6a:10:97:8b:4e:4c:5e:06:9f:b1:
         23:4e:ce:6d:11:e6:e7:20:8c:bc:b0:a1:0c:f4:f3:57:f5:ae:
         45:e0:30:29
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUe3qVgblTT6+07BvQXSh2AiuiiW4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNTMxMDAwMDI1WhcNMjUwNzA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1OGFhZjc4ZmY1MWYwNjAyMzliZTAzNDUzZDJkMzViMzk5
NTBmMDNlOGY4M2QyZjhkMzEzOWJjYzc3N2VkNDI1MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDECWfBl8+LGydETS88BO9Q1guEa0en7GtXQZjuE21mEDh8
k2Z209Ifs14F0nu4/SpbPI2Uo5pKFm6K6IOH3MuhTvZS6T6ihw4MNKQ7MjcLMTqe
ySzWbfXuZr8ErT7k1dhqS8WFWnZIUFHmDlzE+CV45BM0vsQFatnImfWOocRQ2clH
q9Y6Asq/XdfTReplP6MQRlsKApLG4AapRrL0TFfU0AtVXXeCXI3t++/OYBxNEb08
GFaHoBrBejZTYxIB2Rof9vsJFTJTpqwimbcz8esi6kjgreozgrdX2rh6MERrT9Tt
r1g0GwuoFGkicCdz4NcHZxE8LJpPhOqoltAyAC6HAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUgVI6iJmITQLkvyleCKc6bSnDtn8wHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzE2YjU3MDI2LWM2NzMtNGVmMS1iYzM4LTc1OTZkYWEyZTA0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABFqeIwDQYJKoZIhvcNAQELBQADggEBADkv7DPiMIg42+nFX1etLyryehiU
6TNpM5GTVl5rNB66xZaAEKLs0xD5WkwAvewuUk2d7qDLuZht16ruR85GI99Txh2b
u2WairFBiGvvZoUCVQqIpL+g+sAN5o+RjuGKGsRmWAdiUGKM6AYZ+oWhrT7drN8a
+Xvbb3qLtO7V/nUMec0Z3CAFD0uMl3EO3vbKrSpM7dEiHKYl72s6q+oE2GEeOu6L
2GO8JGx4nT/vcy7utPrhDTjwUXObTYHqOFRO4OLQGnF1ssvPnfwK8wCszrI8xrMP
wNJonKGA3p0Kg9IpahCXi05MXgafsSNOzm0R5ucgjLywoQz081f1rkXgMCk=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:38:20 2025 by rpki-client