Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa
File:                     fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa (raw, json)
Hash identifier:          lsNPE6Z09JINTjPQogAzlTeJq4ngtkF/qthvmF0ccGY=
Subject key identifier:   0F:5E:47:B8:61:1E:B7:B7:5B:65:B4:CA:AC:F5:33:61:B8:F8:DD:36
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       0754BF3980A3A7481D8D3820AEC80CBF6274EF2C
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa
Signing time:             Thu 22 Oct 2026 00:10:27 +0000
ROA not before:           Thu 22 Oct 2026 00:10:27 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:54:bf:39:80:a3:a7:48:1d:8d:38:20:ae:c8:0c:bf:62:74:ef:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Oct 22 00:10:27 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=afed7b9446d195b34398faa72e4674e65ed8aae17b5949688a0f493a176f5805, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:a9:07:a1:51:f7:ad:3d:eb:a2:e6:d1:a3:
                    87:0c:01:a7:1e:52:e8:34:34:3a:1c:52:13:3c:dc:
                    ff:1a:59:fb:5e:06:aa:ab:fa:ca:3b:81:90:8d:ac:
                    c9:35:65:d4:5d:9c:35:17:7c:0e:2d:d1:5c:28:c9:
                    05:be:88:43:98:40:63:ae:a8:10:a6:4f:c7:3b:be:
                    6c:9e:61:98:8a:c0:bc:25:ee:a3:84:9e:d1:54:3e:
                    3e:ab:39:61:0c:0d:c1:17:6e:f9:5f:53:dd:c0:7e:
                    8a:b5:51:05:9e:60:63:40:21:b5:7e:16:5a:62:e3:
                    8e:5e:81:07:a0:54:35:fa:f2:8b:b0:39:47:1a:1b:
                    77:9a:42:0d:29:84:b6:85:5d:1d:81:ee:ba:b7:a6:
                    66:e4:81:bf:78:38:c6:8c:b2:31:bc:ce:2a:68:48:
                    fc:1a:39:a7:13:6f:b4:94:b7:03:48:00:dd:80:ec:
                    d7:c3:95:41:7a:29:9d:46:3c:4a:62:9e:19:4f:6b:
                    ec:6f:a3:65:af:12:75:a0:f1:08:eb:d6:df:9e:09:
                    70:32:84:ca:7f:1c:a0:66:49:b2:de:9e:e1:ca:43:
                    3d:d8:2f:f6:c8:97:c2:ac:00:67:b6:6f:4c:d6:8f:
                    2e:23:7f:a5:02:36:bd:25:44:dd:de:59:a0:26:94:
                    69:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5E:47:B8:61:1E:B7:B7:5B:65:B4:CA:AC:F5:33:61:B8:F8:DD:36
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:19:cd:02:da:3f:64:86:b0:48:b5:1d:5c:8a:df:7e:7d:3b:
         23:05:a5:bb:4a:4f:26:36:2f:c1:55:36:ed:78:54:d7:af:8c:
         4d:14:1f:07:26:44:8f:28:34:08:1d:24:36:13:37:37:09:8d:
         d4:ff:ef:50:25:c4:9e:3f:96:ac:0b:30:ec:aa:01:15:56:04:
         39:62:48:63:62:24:d8:56:fe:25:ea:de:c4:71:9d:af:33:ab:
         df:58:37:1f:31:18:54:71:d8:27:a7:ab:12:79:e0:87:91:9b:
         7f:e7:f9:90:ac:26:9d:5f:c4:65:bc:e8:a6:32:95:0e:ac:c3:
         b0:d2:7f:e5:41:f9:1a:35:b0:0c:b0:d8:99:a8:c1:3e:1e:71:
         47:71:11:38:93:d5:80:62:e3:a5:5e:68:b2:6b:af:83:1f:72:
         96:2e:40:c3:fc:22:d7:2d:db:f8:99:f9:6c:8c:f4:0f:7c:8d:
         e3:79:c4:16:60:49:41:3d:55:01:04:2d:53:ae:fd:0b:0c:cb:
         77:13:6a:db:11:79:cf:c6:a1:a9:f5:1b:81:19:7f:74:3a:c5:
         4c:d8:28:97:f6:89:f9:32:2d:5f:5a:31:95:a0:fa:b4:8e:66:
         47:00:92:79:6c:7f:30:dc:2f:bb:85:fa:1c:05:89:b2:36:3e:
         a5:e3:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 14:55:52 2026 by rpki-client