Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa
File:                     a11f9364-e88a-440b-a95f-a94c5ecdc863.roa (raw, json)
Hash identifier:          b4gnh8ObnkB9Jw7admFfWfuXN9wVIqN2p7dn2d2XFww=
Subject key identifier:   42:76:44:48:01:D3:87:44:2C:D4:28:7A:7C:63:CE:4B:46:85:8F:E3
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       0D891ACE226CB5E2AE918B31E2F09936C42B17B0
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa
Signing time:             Mon 21 Jul 2025 15:21:23 +0000
ROA not before:           Mon 21 Jul 2025 15:21:23 +0000
ROA not after:            Mon 25 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:89:1a:ce:22:6c:b5:e2:ae:91:8b:31:e2:f0:99:36:c4:2b:17:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Jul 21 15:21:23 2025 GMT
            Not After : Aug 25 23:59:59 2025 GMT
        Subject: serialNumber=d313a00df8ae6b29c23e58e3fc2f953a254a6a9db3b84d1ac28e4ad10aac683c, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:bf:73:71:db:95:2c:44:dd:a0:0c:fc:14:
                    44:c1:2e:b2:96:41:13:6a:e1:df:87:d3:da:d4:6e:
                    a6:b0:43:5c:fa:fd:08:a2:b7:d1:ba:97:31:ab:a0:
                    53:44:7e:11:3d:4c:e7:63:be:54:95:a0:df:f3:d9:
                    06:f8:1b:85:e2:c0:92:a2:45:fb:36:3a:ae:a3:f6:
                    08:c5:f6:7d:e5:a1:76:6b:ff:55:85:6d:72:df:62:
                    1c:07:a1:4f:55:4e:ca:4b:fc:60:16:f4:f1:09:99:
                    e7:fc:3b:dd:e5:98:d5:4c:66:94:96:f3:16:7d:ef:
                    82:95:74:7a:5c:58:66:98:e6:3a:49:56:c1:5f:0c:
                    e5:27:5a:87:d3:d8:b9:af:02:29:06:66:40:be:b4:
                    1d:3a:a4:10:40:5c:14:24:32:ca:06:4a:d7:14:ac:
                    d1:bb:26:05:9b:0f:52:de:c8:60:79:96:8c:b2:00:
                    c3:b3:af:77:88:ab:31:15:3a:55:5d:5d:ca:47:d1:
                    5d:1f:9d:9f:d1:ca:36:e4:7d:eb:e7:63:15:6a:37:
                    be:02:70:ee:6a:eb:b9:f1:2f:c1:48:45:62:93:d9:
                    c3:f2:3f:0b:2e:76:fc:24:9a:e0:3d:ac:cb:91:1a:
                    76:db:bf:df:47:68:b1:c4:51:4c:79:ad:a9:e5:ae:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:76:44:48:01:D3:87:44:2C:D4:28:7A:7C:63:CE:4B:46:85:8F:E3
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d2:75:1a:69:05:25:5c:45:06:5a:ac:48:34:c4:f7:fc:c0:
         45:81:fc:1c:ec:de:2f:c8:ae:2b:1c:b7:60:19:03:cc:14:cd:
         a6:6b:48:12:ae:41:4d:b2:48:3b:9e:f6:b7:a1:6d:66:d6:e3:
         66:bc:35:fe:1a:16:86:7a:9c:f9:ef:65:91:4f:43:3e:92:2b:
         21:86:06:1a:a8:a3:d4:69:ad:94:45:53:d1:db:01:a2:3b:d5:
         69:dc:6d:e7:c1:15:83:d8:dd:34:5c:c5:95:95:59:fa:d0:c0:
         0e:7d:e5:26:8d:f6:85:f2:43:1d:07:6c:d8:e0:3c:6a:aa:b9:
         73:21:37:e5:0b:ca:84:66:19:b1:78:74:0e:24:ca:c3:da:15:
         26:11:a2:d0:c7:dc:4f:89:f1:dc:87:6e:56:18:fb:72:3c:b5:
         2a:50:8b:01:16:db:f9:86:c0:06:d5:ca:e0:3b:9c:75:4c:b8:
         a1:cc:8d:f2:f7:3f:63:5b:0b:a1:48:85:45:e0:1a:ed:d8:10:
         db:8b:5b:17:73:4d:93:59:8b:a0:d1:4b:70:a7:61:4f:43:a9:
         03:9e:f2:55:a4:a4:71:5e:aa:a8:63:3b:4d:d0:21:3c:8f:3a:
         84:1d:b1:61:71:0a:17:3e:7c:00:3a:74:5c:27:d9:53:96:6a:
         a7:a6:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:38:34 2025 by rpki-client