Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4b847893-4aea-442a-b81c-619bfedf3ca5.roa
File:                     4b847893-4aea-442a-b81c-619bfedf3ca5.roa (raw, json)
Hash identifier:          Bz1Tfwn06dQvZT2NOelyOXxjSk9bt6Zb6YtHHiPIc8o=
Subject key identifier:   0C:65:D5:52:14:CC:A2:D3:42:B1:3A:42:19:6D:30:A7:CD:FA:FD:D7
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       514FDCDAA44C037ADBCDE66BA91C7E937B4C8F5B
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4b847893-4aea-442a-b81c-619bfedf3ca5.roa
Signing time:             Thu 08 Oct 2026 00:05:05 +0000
ROA not before:           Thu 08 Oct 2026 00:05:05 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        206.55.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4f:dc:da:a4:4c:03:7a:db:cd:e6:6b:a9:1c:7e:93:7b:4c:8f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Oct  8 00:05:05 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=171c661e833a18d381bb6bbc4bcb3893128171f2052a467c07da2d10f93cf050, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:fd:66:d3:ad:9e:1e:fc:ae:ef:e8:04:bc:
                    17:1f:e4:67:4b:1e:39:c9:f0:73:71:67:a2:20:2e:
                    65:b9:31:e6:e2:40:e7:c9:a4:4e:37:b9:63:bf:45:
                    fd:0e:13:65:17:9c:80:a0:51:58:c3:c7:b3:8c:44:
                    94:6f:53:c2:4a:70:1d:8c:25:2d:2e:b0:56:e7:b6:
                    ee:75:1b:6d:b6:1e:75:bb:2c:b9:27:b6:e3:a8:07:
                    9c:cb:c6:80:34:79:4f:d7:90:6f:e6:28:4e:a1:d5:
                    7e:ce:67:05:10:45:60:46:44:b3:3a:d0:2d:11:21:
                    22:22:32:53:aa:83:6d:20:2d:4f:91:6a:47:f3:16:
                    0d:0e:19:83:9b:6c:e3:ad:e6:d4:bf:6a:ad:94:9a:
                    5e:18:f8:50:9a:fb:c1:07:23:cb:53:d1:89:b5:b5:
                    9b:30:99:b6:78:a0:1d:27:a8:f4:92:3e:4e:7b:2f:
                    81:8c:ce:61:50:93:05:49:2e:eb:1f:a7:ea:8f:04:
                    eb:28:54:34:6e:a6:12:d4:e8:38:79:5b:28:49:9a:
                    5a:f9:b0:22:d6:fb:e8:80:15:da:c6:ae:ae:f5:a7:
                    c6:2a:b8:fd:19:1a:82:c2:75:48:c7:91:3d:fc:29:
                    5f:db:2a:91:8d:be:06:cb:b7:db:70:f5:8a:88:7c:
                    82:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:65:D5:52:14:CC:A2:D3:42:B1:3A:42:19:6D:30:A7:CD:FA:FD:D7
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/4b847893-4aea-442a-b81c-619bfedf3ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:43:df:16:51:84:7d:89:5c:49:9e:d3:d0:31:46:f7:e6:28:
         d3:0f:86:8d:75:6e:31:da:c2:b0:a1:a9:ce:65:f4:fe:d2:45:
         1e:f6:0d:de:d9:c1:94:9c:c4:d5:52:78:91:fe:a2:bf:6a:c0:
         39:c8:29:7c:f3:0a:1f:2c:6f:41:cb:50:ea:7d:76:83:e2:b8:
         d7:47:87:b5:ce:ca:77:3a:8c:13:e6:9b:08:f1:aa:26:95:4e:
         6f:1d:72:76:81:4f:69:41:5c:8f:b9:25:ac:ec:26:02:e1:3b:
         1f:51:a0:ce:6b:6e:34:a2:8f:69:dd:a2:7e:1e:c3:e8:b7:2d:
         23:78:c9:d9:8c:83:2a:45:6a:da:a2:f0:2b:da:52:b0:dc:49:
         e4:4a:ce:d9:38:92:34:85:d1:e8:b7:eb:de:50:e3:96:4e:b3:
         c4:22:ef:45:08:24:5e:d1:60:4f:76:b8:93:c4:ad:85:88:57:
         9b:94:48:ab:bd:41:1d:7b:fe:36:6a:54:ed:1a:25:d6:19:20:
         ce:03:c6:df:97:31:12:8a:84:8d:ac:07:86:db:98:25:0b:ae:
         80:9d:cf:c7:fc:2c:7b:6b:5e:f9:e3:34:d6:50:77:19:2e:7a:
         06:53:9b:33:3f:50:74:87:11:ff:3e:64:4d:68:eb:3f:b2:a1:
         c6:eb:09:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:15:48 2026 by rpki-client