Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa
File:                     2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa (raw, json)
Hash identifier:          Ap4VNcQ2iDRvyF2QqSY3WUdDNZgELhh3sD1oItEhAT0=
Subject key identifier:   62:4D:B9:63:4E:8B:55:9C:E2:88:9E:50:D2:C6:AC:08:99:D8:17:5B
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       7836030772124ABB9A4AF22E3BBFA9B046C10336
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa
Signing time:             Fri 30 May 2025 00:00:04 +0000
ROA not before:           Fri 30 May 2025 00:00:04 +0000
ROA not after:            Fri 04 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        206.55.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:36:03:07:72:12:4a:bb:9a:4a:f2:2e:3b:bf:a9:b0:46:c1:03:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: May 30 00:00:04 2025 GMT
            Not After : Jul  4 23:59:59 2025 GMT
        Subject: serialNumber=f65506c4924a3366d739571126c8aaf2daa0d950bed0473c91460c1a3aa28423, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:60:7f:e5:e7:f5:23:87:6e:f5:95:d1:ff:
                    f7:a5:2f:05:de:f0:f7:02:97:e7:52:24:c1:a6:0d:
                    be:76:93:39:7a:3a:92:f9:b8:5c:83:4c:9c:6c:ea:
                    86:bf:32:25:4c:8b:c3:37:a0:e9:f2:00:aa:2e:c6:
                    7f:74:b7:5f:dd:a7:33:4c:68:59:94:fa:ca:85:34:
                    2f:4d:e2:bc:8e:35:f4:b2:d5:02:da:37:4e:28:a3:
                    2f:c5:0c:70:df:cd:ad:0d:3a:52:54:24:26:44:a8:
                    de:5b:67:f6:c9:22:d2:a7:cb:69:a8:3f:91:60:b1:
                    e5:c1:39:25:8b:2b:63:f8:ea:b3:c5:05:18:74:d5:
                    05:5b:ac:8d:b9:fe:18:19:fc:44:35:83:6e:ab:9f:
                    1c:09:10:c2:5b:50:ea:c5:61:b2:18:29:15:41:a9:
                    f7:1b:a2:1b:6d:41:59:ce:9c:64:df:34:2b:71:76:
                    5a:e8:20:7f:84:e3:f0:24:16:07:1e:b2:d1:d6:51:
                    de:ec:98:d9:c4:75:7d:a9:e1:17:e3:35:35:aa:80:
                    5f:b2:83:e1:4a:9a:c2:cb:94:de:97:2d:be:44:7c:
                    bc:4f:e2:bb:39:d7:58:08:e8:b3:90:47:eb:9c:a2:
                    87:ee:97:59:82:ce:1f:09:e3:0c:aa:14:bf:97:87:
                    40:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4D:B9:63:4E:8B:55:9C:E2:88:9E:50:D2:C6:AC:08:99:D8:17:5B
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/2f1243e4-dd56-43c1-90e0-aec73f1a9489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         40:a7:e6:f7:9d:60:28:04:40:11:ec:f6:3a:f5:ca:3e:db:67:
         45:d6:43:ba:ba:7c:db:6d:f9:3e:94:95:d8:e0:88:69:6b:fe:
         73:44:c5:27:cf:18:03:cb:65:06:0c:2a:17:87:a3:f7:d3:c5:
         fc:18:a8:c9:1b:54:fe:6b:92:76:e4:29:56:f9:3f:35:13:36:
         67:76:73:a5:e4:ff:78:44:65:a5:03:6b:2b:d6:fc:c0:4d:5e:
         f1:11:20:83:c6:64:d7:af:0f:13:2b:6e:e2:d2:a9:b4:51:15:
         60:fc:13:17:ea:64:29:f8:82:2c:97:a8:01:37:c4:58:ba:4d:
         03:14:7b:ee:fc:6f:96:6f:f1:6f:59:79:5f:ce:72:b8:08:31:
         20:70:91:bb:06:73:07:85:d6:a1:22:58:2e:ee:c1:f0:56:f6:
         2f:37:91:9d:06:ac:8b:ed:67:31:1d:a7:70:86:60:47:df:67:
         00:b7:f9:6b:df:27:64:43:7a:fa:58:20:d6:7b:ca:e5:28:22:
         ad:8b:c4:88:61:96:56:5e:16:38:06:e6:ba:39:79:ea:ae:31:
         25:83:2a:5d:77:4c:d7:66:02:74:70:39:ff:04:dc:a2:9d:ef:
         58:cd:c9:da:57:82:37:20:51:2b:e6:dc:b6:83:b3:69:dc:39:
         1b:51:67:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:21:10 2025 by rpki-client