Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa
File:                     eaef83ec-c27a-4971-921b-164f8f284067.roa (raw, json)
Hash identifier:          9xL/GrzIZfOqzdjouVMQuQUKcsqELDSvcm20M+a4ScM=
Subject key identifier:   7E:05:FA:F9:05:52:01:F4:9A:54:32:0D:97:BB:07:20:CF:00:BA:AD
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       227B400E9D0BE3BBADC29AA8F20C746D30D71602
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa
Signing time:             Sat 31 May 2025 00:10:02 +0000
ROA not before:           Sat 31 May 2025 00:10:02 +0000
ROA not after:            Sat 05 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7b:40:0e:9d:0b:e3:bb:ad:c2:9a:a8:f2:0c:74:6d:30:d7:16:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: May 31 00:10:02 2025 GMT
            Not After : Jul  5 23:59:59 2025 GMT
        Subject: serialNumber=d942026daa5399b8798fdcbb08f0f6efb26b9e2af9f65826b1bee87db8e37b66, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:37:99:d6:c3:59:4e:dc:a3:34:63:77:f0:
                    d3:81:a7:e9:d6:80:1b:0b:fa:f2:06:2f:1f:76:2c:
                    bc:9a:e2:7c:f6:ff:7b:5e:69:d3:17:e2:09:5d:36:
                    47:fb:aa:dc:75:43:f8:57:9f:7f:07:c1:f0:08:78:
                    12:89:22:d9:6f:f1:a1:ee:db:7d:93:2b:7a:50:9f:
                    51:86:9f:78:56:84:a2:27:dd:1b:4d:e9:f7:4b:c0:
                    78:55:60:bd:fd:f6:b7:e2:3c:98:a4:70:66:be:6a:
                    2a:de:78:f2:9e:fb:0a:53:7e:3c:44:64:fe:ce:d3:
                    ad:fd:91:2a:94:6a:54:ba:f0:1f:df:48:eb:ea:d6:
                    cf:99:eb:f7:37:32:39:30:32:6d:43:00:76:7d:56:
                    04:f1:21:01:63:53:d4:81:45:5d:7a:c4:7b:e7:75:
                    1e:8b:08:c7:58:1c:0a:b3:2a:67:db:73:c9:2a:f1:
                    2c:a7:0b:76:78:f1:c3:68:a1:93:bc:55:59:3c:9c:
                    f5:b3:46:d2:9d:7a:3f:92:d7:16:68:3a:53:42:87:
                    d1:50:7f:57:5c:81:6f:f5:33:5c:0b:aa:a9:07:23:
                    7a:1d:07:9a:d7:c3:9f:87:d0:64:74:a3:70:79:f7:
                    37:39:68:3f:f0:31:bd:f3:48:ba:19:ef:d5:3c:36:
                    52:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:05:FA:F9:05:52:01:F4:9A:54:32:0D:97:BB:07:20:CF:00:BA:AD
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:5f:1b:a9:49:03:90:3d:81:a3:9a:14:2a:0c:85:55:4e:24:
         ad:54:1a:b4:63:7c:8a:63:d7:4c:17:6f:67:d1:64:ec:54:9c:
         b8:f4:ce:41:30:36:f3:91:24:76:89:48:37:ba:6a:c0:58:19:
         f2:1b:ef:b2:f7:95:72:07:3a:79:89:c8:eb:8b:14:85:7d:78:
         42:88:f6:af:c6:84:62:86:92:b8:54:52:7d:c8:e2:0c:fe:1e:
         81:d5:dd:2d:63:78:05:12:34:e0:16:ee:e3:66:ab:db:69:7b:
         8c:c6:33:30:da:5a:16:3f:70:65:52:72:55:b8:54:2d:ba:85:
         e9:cb:d1:65:4e:ba:7c:65:b1:63:9a:2f:e3:68:4b:84:91:94:
         1d:45:73:d0:21:93:f3:29:6c:36:8a:68:da:a6:33:56:bb:37:
         1f:20:cd:fc:ce:35:42:41:7c:16:80:5a:3c:d3:2d:32:48:c5:
         14:1a:9d:90:0f:f0:4b:43:97:53:18:39:9b:6f:5e:4e:4f:b0:
         52:16:a0:3e:1c:ed:ae:03:f9:b9:1a:88:40:81:b2:a3:4e:b6:
         84:93:9b:04:00:99:d2:09:51:e1:fd:ca:2b:ec:d5:27:a3:01:
         fb:c5:e8:bd:e8:41:f3:44:81:6d:b4:65:f0:e8:d1:d9:b1:23:
         15:9f:c5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:35:11 2025 by rpki-client