Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5569e911-3188-427d-83a0-0e8a45b335d3.roa
File:                     5569e911-3188-427d-83a0-0e8a45b335d3.roa (raw, json)
Hash identifier:          ELEn8RhFolytrgP9GbNVY9CAuMqZuVkmeatRhtcRBfU=
Subject key identifier:   C5:66:C7:63:A9:60:58:EB:41:04:89:BE:EB:FA:AB:62:0E:BB:93:40
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       23254F066863432099507338140527A45EE0579C
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5569e911-3188-427d-83a0-0e8a45b335d3.roa
Signing time:             Wed 29 Oct 2025 00:20:08 +0000
ROA not before:           Wed 29 Oct 2025 00:20:08 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:25:4f:06:68:63:43:20:99:50:73:38:14:05:27:a4:5e:e0:57:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Oct 29 00:20:08 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=469fb560b72afda3dd16bf913bc4e721c99211076edc69543579370744484a90, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:dd:ad:26:92:a7:09:ac:8a:07:c0:02:cf:a8:
                    c0:e7:52:08:7c:a9:16:35:6b:ff:a0:fa:20:28:5a:
                    cd:31:dd:21:75:39:9a:6a:95:ed:ce:32:73:6e:81:
                    83:c8:78:d3:40:40:55:8e:40:71:34:70:2c:7c:a0:
                    67:13:c7:b8:ab:d9:f6:4c:92:b4:7d:28:69:e8:02:
                    c7:63:c9:41:af:7a:7b:41:99:da:c4:ca:bc:ce:f6:
                    9d:75:b0:f3:90:6b:8c:7b:67:2c:4e:d8:7e:61:ef:
                    bd:2d:ed:6c:dc:e4:58:01:ed:ae:73:16:17:60:84:
                    2f:b5:63:7c:ee:65:d3:9e:e0:00:a3:87:ba:31:5c:
                    d6:d5:4a:9d:63:bb:6f:87:be:71:b2:88:74:00:9f:
                    95:25:43:85:26:83:c7:08:64:c5:0c:d9:22:08:78:
                    a5:43:da:83:df:22:58:86:c1:5d:b0:9f:34:da:32:
                    ad:82:2a:73:c4:ef:f0:a9:ff:4a:8d:3c:5f:de:cb:
                    00:e1:df:55:05:f1:36:fb:e8:6e:25:4d:b8:d9:cf:
                    b7:70:a2:63:ab:3f:74:2f:79:9b:f9:10:2d:e8:cf:
                    0a:c0:53:0e:5e:c3:87:36:49:c1:0c:d0:58:d2:5c:
                    7c:1e:8f:56:e2:28:59:c8:53:5c:a1:c6:fe:73:91:
                    af:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:66:C7:63:A9:60:58:EB:41:04:89:BE:EB:FA:AB:62:0E:BB:93:40
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5569e911-3188-427d-83a0-0e8a45b335d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:0a:55:86:7f:36:6c:c8:c4:5c:6f:12:45:c0:5f:cf:e0:
         93:7f:8e:e4:97:a9:18:19:d5:bf:06:d8:3c:c8:a3:e6:7d:4a:
         59:47:57:5e:ae:6a:27:78:42:4e:33:f2:bb:6b:8b:0c:36:cf:
         65:97:64:95:d4:cc:bb:a0:f7:00:bb:57:cb:9a:bc:7f:ec:d9:
         25:98:c1:b1:c0:f8:29:b8:63:55:c9:77:1c:e7:17:42:01:e9:
         19:14:f5:54:27:63:13:40:e1:5a:a8:bf:0b:87:a7:7b:73:5e:
         91:d4:ff:82:39:42:69:48:85:90:91:9e:b2:a7:68:c1:10:df:
         37:b6:fd:90:85:0a:cd:e0:12:61:81:87:5a:96:50:83:db:16:
         60:08:c3:3f:f1:67:8e:15:70:76:aa:3f:0a:50:cf:a0:8a:a0:
         27:07:d8:ae:c9:46:10:1b:5e:71:36:65:6c:ea:37:8a:c1:6d:
         e6:34:1c:43:14:25:bb:72:2c:95:e5:62:98:8a:26:d0:c0:1c:
         df:d7:a1:49:cb:25:bb:86:4e:be:ef:1e:9a:2d:f4:81:6d:fb:
         45:c1:a3:dd:e8:29:47:42:99:6c:7a:78:d8:7c:e7:46:dc:ef:
         6a:4e:7e:ae:7e:fb:5c:57:d2:fa:66:b3:0a:85:8b:d5:e3:63:
         44:4c:4d:96
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIyVPBmhjQyCZUHM4FAUnpF7gV5wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUxMDI5MDAyMDA4WhcNMjUxMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NjlmYjU2MGI3MmFmZGEzZGQxNmJmOTEzYmM0ZTcyMWM5
OTIxMTA3NmVkYzY5NTQzNTc5MzcwNzQ0NDg0YTkwMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDx3a0mkqcJrIoHwALPqMDnUgh8qRY1a/+g+iAoWs0x3SF1
OZpqle3OMnNugYPIeNNAQFWOQHE0cCx8oGcTx7ir2fZMkrR9KGnoAsdjyUGventB
mdrEyrzO9p11sPOQa4x7ZyxO2H5h770t7Wzc5FgB7a5zFhdghC+1Y3zuZdOe4ACj
h7oxXNbVSp1ju2+HvnGyiHQAn5UlQ4Umg8cIZMUM2SIIeKVD2oPfIliGwV2wnzTa
Mq2CKnPE7/Cp/0qNPF/eywDh31UF8Tb76G4lTbjZz7dwomOrP3QveZv5EC3ozwrA
Uw5ew4c2ScEM0FjSXHwej1biKFnIU1yhxv5zka+rAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxWbHY6lgWOtBBIm+6/qrYg67k0AwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzU1NjllOTExLTMxODgtNDI3ZC04M2EwLTBlOGE0NWIzMzVkMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABM37cwDQYJKoZIhvcNAQELBQADggEBAAYMClWGfzZsyMRcbxJFwF/P4JN/
juSXqRgZ1b8G2DzIo+Z9SllHV16uaid4Qk4z8rtriww2z2WXZJXUzLug9wC7V8ua
vH/s2SWYwbHA+Cm4Y1XJdxznF0IB6RkU9VQnYxNA4VqovwuHp3tzXpHU/4I5QmlI
hZCRnrKnaMEQ3ze2/ZCFCs3gEmGBh1qWUIPbFmAIwz/xZ44VcHaqPwpQz6CKoCcH
2K7JRhAbXnE2ZWzqN4rBbeY0HEMUJbtyLJXlYpiKJtDAHN/XoUnLJbuGTr7vHpot
9IFt+0XBo93oKUdCmWx6eNh850bc72pOfq5++1xX0vpmswqFi9XjY0RMTZY=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:56 2025 by rpki-client