Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa
File:                     639621c0-050e-4e66-b3a2-1dd129de2c24.roa (raw, json)
Hash identifier:          kaT/71sgNUM/+3uAs2F1AGLTbeZUxa39HBfHfi7aPQw=
Subject key identifier:   C7:BF:40:10:80:2F:16:6E:8C:18:54:62:79:75:32:46:31:50:2B:8A
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       026D591EDA0FCFF4F21397C1E73F2A46F116E4C3
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa
Signing time:             Wed 29 Oct 2025 00:20:08 +0000
ROA not before:           Wed 29 Oct 2025 00:20:08 +0000
ROA not after:            Wed 03 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6d:59:1e:da:0f:cf:f4:f2:13:97:c1:e7:3f:2a:46:f1:16:e4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Oct 29 00:20:08 2025 GMT
            Not After : Dec  3 23:59:59 2025 GMT
        Subject: serialNumber=9ec50b1a7a83b7797f482e80f82568446f3f123918adc3b292cd84c98cd6a8b6, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:53:87:d4:2b:83:a1:46:06:e6:5a:a9:55:3b:
                    36:5c:b0:fc:f8:78:cf:78:2e:34:8b:18:d9:e7:39:
                    23:bd:6a:a0:6f:fe:fa:1c:83:84:67:1a:ea:38:47:
                    5f:bc:10:b3:5a:fd:5e:17:52:5a:c5:0c:2e:9f:0b:
                    06:5b:e2:71:90:2e:9a:c6:c6:d7:49:c3:f1:0c:c8:
                    9a:24:7f:ac:c3:9b:cf:04:71:d6:02:7c:9f:a1:e8:
                    7f:7f:f3:02:56:c8:88:36:b2:55:0e:3b:4c:98:f0:
                    be:0b:cf:dc:0c:75:de:fd:2a:09:ba:f2:37:18:fb:
                    1a:ef:d9:52:f2:72:40:f2:aa:67:fe:f1:18:d7:17:
                    db:4c:e9:19:b1:bb:4e:95:6a:91:ca:36:ae:50:21:
                    37:d9:dd:a7:08:d1:88:de:ca:09:f6:65:aa:92:49:
                    ec:57:af:24:4a:e6:67:27:ee:f8:b2:b8:d1:15:c8:
                    a5:11:57:87:50:2c:4d:64:77:13:e2:56:7a:58:b8:
                    e7:49:f6:e6:16:5c:69:33:9a:51:bb:9d:81:c5:83:
                    75:83:be:29:16:d5:64:61:1a:fa:23:e3:2f:d4:bc:
                    e4:69:e2:da:90:62:ec:83:d2:88:7b:89:16:46:d5:
                    6a:a1:32:7f:ea:af:1f:57:88:6e:d3:d3:16:74:5c:
                    95:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BF:40:10:80:2F:16:6E:8C:18:54:62:79:75:32:46:31:50:2B:8A
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/639621c0-050e-4e66-b3a2-1dd129de2c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:9e:84:8b:09:aa:6c:7d:4d:9e:91:7f:cf:58:3f:90:67:87:
         ae:4b:42:60:6a:ca:b5:22:5d:cf:e9:50:ce:d1:a9:e3:f7:99:
         8a:53:48:fa:60:6d:e8:3e:47:43:c3:73:97:7c:14:4c:54:4a:
         ed:ff:07:cd:41:86:10:4e:91:1f:a8:cb:91:15:87:fd:a3:f9:
         2c:ee:cd:0e:b6:00:e5:69:45:55:80:d2:b5:0e:ed:94:9d:c6:
         d3:61:18:72:54:af:44:8f:81:86:40:dc:95:79:90:55:6c:e7:
         55:6d:2a:8f:e5:03:57:03:15:37:2b:e4:7b:e6:c5:fb:d8:eb:
         a1:64:84:02:3a:23:f9:80:27:ca:b0:48:b3:f2:b7:b7:d1:e4:
         93:22:bb:93:eb:fe:94:e4:b6:57:2a:97:63:d6:3e:07:f6:93:
         08:d0:c5:9b:ee:0c:60:77:41:63:47:4c:4f:b3:4b:fd:11:fe:
         9f:67:ab:8c:0a:c8:d0:0e:16:4e:45:24:05:63:7e:d5:cb:dc:
         e7:d0:b9:b8:1d:e7:a2:7f:7e:24:5d:7a:48:c3:19:6c:78:ee:
         ec:e0:8e:1a:47:d9:d7:9d:65:2a:63:09:6e:0f:75:2d:0b:db:
         c0:a2:b7:ee:bb:45:21:8c:b1:0d:d3:06:14:2d:c8:bb:c3:9a:
         36:e5:25:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:41 2025 by rpki-client