Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa
File:                     3200cf8e-c64b-4110-8ccd-4128ae231d47.roa (raw, json)
Hash identifier:          Kmy3/OppyetyXy2x9ANzAaQg9G4B4tgrTuteSt1z3jc=
Subject key identifier:   AB:F7:90:E3:73:05:9B:4B:45:C9:91:CD:6B:12:C5:37:C2:58:22:3B
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       69872F051FEDB00DD95F2E1C2AF9615567C96712
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa
Signing time:             Sat 02 Aug 2025 00:10:22 +0000
ROA not before:           Sat 02 Aug 2025 00:10:22 +0000
ROA not after:            Sat 06 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:87:2f:05:1f:ed:b0:0d:d9:5f:2e:1c:2a:f9:61:55:67:c9:67:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Aug  2 00:10:22 2025 GMT
            Not After : Sep  6 23:59:59 2025 GMT
        Subject: serialNumber=413d140c7843cbbddfb64351ec1523e57cf4080eef75dc8b67a1621d17e23244, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:9d:a5:db:58:90:d4:b8:8b:8a:32:95:ff:
                    90:01:f0:64:58:6a:a5:ae:b2:da:5d:06:22:2d:d6:
                    d1:c1:1a:50:a6:50:93:60:a5:2f:62:c4:5e:85:21:
                    17:d9:a8:d9:78:73:40:c9:55:5a:b6:af:f6:90:c9:
                    87:43:2c:de:8e:06:93:65:8b:73:5f:dd:7d:9d:d0:
                    78:55:8a:c6:3a:81:81:01:1e:56:e3:d6:8f:9a:99:
                    ea:5f:f4:56:e8:cc:4f:3c:95:a3:51:a9:aa:ca:5a:
                    d7:d7:8c:46:e3:7b:e0:ba:7e:a6:34:aa:b4:13:90:
                    6f:45:82:84:70:1a:49:3b:0c:b1:bc:48:44:9a:71:
                    24:91:5f:ac:0c:a4:b4:d2:4f:fb:80:0c:e4:c0:60:
                    41:f2:7c:78:7f:90:d8:5f:a3:a1:d1:7a:52:9d:75:
                    d3:55:3d:b5:e5:1a:82:da:f0:e7:14:09:40:d5:8a:
                    11:3e:38:ea:7a:f0:b7:e4:6f:13:e4:99:45:f1:13:
                    c2:d6:b3:68:9c:7a:4a:56:a9:72:55:a5:f2:b6:15:
                    20:c9:0c:c3:89:37:60:90:d8:24:7a:7c:0e:cb:6c:
                    82:fe:15:db:d3:eb:60:98:0b:b2:ae:5c:6f:f5:62:
                    2d:1a:bd:af:95:34:e4:fc:0a:23:7c:01:8b:66:28:
                    fc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F7:90:E3:73:05:9B:4B:45:C9:91:CD:6B:12:C5:37:C2:58:22:3B
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3200cf8e-c64b-4110-8ccd-4128ae231d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:50:45:ac:fc:44:eb:5f:fa:e4:d2:71:36:9b:04:03:ea:49:
         5d:35:be:0b:a1:01:ff:75:10:8f:c1:eb:30:51:49:38:de:e6:
         0c:2d:b5:05:76:44:c6:7a:e1:c3:fd:8e:e6:68:6a:b8:08:e8:
         08:a9:9f:29:c6:a2:50:c1:f3:e3:42:4c:56:21:a8:b7:ed:ec:
         73:ae:7c:c9:b1:27:9b:16:29:f8:92:1c:d2:38:b0:8e:2e:9e:
         27:e1:0d:cf:ae:d9:1f:25:d7:76:26:7c:e4:56:70:9a:6d:18:
         47:7a:77:e8:14:e9:33:96:e0:6d:67:da:4e:2b:29:7c:0b:fe:
         2a:6f:aa:67:cd:3b:1f:02:a6:4d:89:e4:c5:6f:c0:8a:88:c7:
         77:a0:a6:af:bc:1e:f6:03:76:3b:2d:8f:87:a6:ed:20:21:f9:
         3a:06:63:fd:8c:9b:fe:8f:fe:34:b6:05:99:3c:20:09:cb:e6:
         5f:0f:3e:10:8d:8f:bb:b7:e4:bb:9b:26:4e:31:ad:3d:1d:0c:
         42:1d:a5:4c:08:b3:31:8c:f0:74:24:a6:e9:27:1a:f3:f6:cf:
         da:5c:1b:f0:22:06:bd:59:dd:2a:2b:5c:fe:9a:3e:02:5b:c5:
         16:9d:79:db:bc:85:8d:f3:8e:d8:d3:1e:df:3e:b3:aa:ff:a3:
         fa:d3:db:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:17:13 2025 by rpki-client