Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa
File:                     fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa (raw, json)
Hash identifier:          Vilya/clAMvJ/06WiTbFmw+ON4LO0Q3tm+yoEXIcxvE=
Subject key identifier:   86:95:A5:1B:C5:C4:76:8C:5F:83:8E:C2:4C:CE:D7:1C:FA:E3:D7:98
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       6AB6E151076FD233A08CD3E5364CA83CAB5E51E1
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa
Signing time:             Fri 13 Jun 2025 00:10:14 +0000
ROA not before:           Fri 13 Jun 2025 00:10:14 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b6:e1:51:07:6f:d2:33:a0:8c:d3:e5:36:4c:a8:3c:ab:5e:51:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Jun 13 00:10:14 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=c6fa0cf12d583f76bc300187ddf2bd3bc6d456ef3ed8dfdc260dc21ae48c9527, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:a0:a1:c7:47:84:6d:6f:73:26:e5:3a:5e:
                    02:bd:12:f3:9e:b2:4d:23:bd:d3:f9:19:20:e1:2a:
                    09:d4:9d:8c:9a:0b:6a:96:74:63:12:4d:af:c4:a2:
                    52:da:f5:01:e3:fa:8a:b2:1a:7a:b6:50:b6:42:8b:
                    e4:da:9d:13:3b:83:c0:92:1b:84:d6:fc:43:6c:8f:
                    83:78:b8:c0:01:bf:6c:c1:21:13:2a:ad:e1:5d:2b:
                    36:98:a7:9c:be:6c:e5:60:29:36:24:52:02:86:52:
                    1e:bb:44:84:d1:e8:04:1b:ae:1c:23:dd:54:01:f7:
                    57:26:a5:49:6c:db:51:9f:03:53:66:e2:c5:46:40:
                    5d:e1:d3:32:5f:5e:92:db:f8:ad:78:52:9d:fe:9c:
                    b6:83:47:62:e1:95:f7:5a:8a:d5:b7:f7:90:e9:e7:
                    33:53:f6:ac:fa:31:71:02:89:0f:f4:bd:ab:8a:75:
                    9d:13:07:f5:f9:a0:77:a2:9d:4d:3f:10:31:73:80:
                    11:1c:fb:70:b9:ba:f7:87:9d:07:85:3c:62:71:85:
                    67:46:5a:d4:a7:00:5d:0d:a4:9e:2f:a6:3f:a8:13:
                    02:1c:1e:89:41:91:4b:8d:bd:f9:00:17:e1:18:27:
                    9b:0b:f6:df:a2:f5:a5:b5:df:9d:8c:c0:5b:de:98:
                    1a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:95:A5:1B:C5:C4:76:8C:5F:83:8E:C2:4C:CE:D7:1C:FA:E3:D7:98
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:95:56:f9:0d:93:5d:fe:82:f5:cf:b7:86:be:63:8c:f7:e4:
         ef:1e:f2:82:fa:0d:9f:a8:86:dc:f5:ad:eb:12:e8:d4:3e:d2:
         a8:31:a9:fc:c1:c2:3a:fd:64:b7:c2:f4:dd:f9:17:76:72:08:
         84:db:7c:24:f8:db:18:6f:80:c3:d0:cf:27:d9:8a:fc:72:73:
         ba:7d:f0:8f:ca:ce:f3:8f:f7:93:ab:27:77:19:85:a2:ef:91:
         9b:bb:71:e9:c2:88:4b:7f:c7:ec:06:47:fa:15:92:e7:84:4a:
         0a:ac:f6:68:97:45:ed:de:4c:60:eb:9a:fb:5b:ef:a4:68:69:
         d6:43:7f:a3:60:ce:51:34:9d:ca:c4:1c:d0:25:6a:98:f1:32:
         f6:27:36:69:bc:87:b6:5e:0a:80:3d:25:bb:8c:2e:4e:0e:56:
         cd:ca:f2:ed:51:ef:49:44:24:27:c4:60:df:14:f2:02:2c:c5:
         55:dc:38:0e:ac:19:b2:79:c5:d1:75:89:35:55:c1:8b:13:67:
         15:7f:08:cd:03:a4:04:6f:c1:6b:60:ff:83:58:fd:15:14:66:
         98:48:9d:03:8d:76:65:eb:06:52:e0:cb:81:4d:80:4d:8c:d6:
         6d:cd:69:34:ca:0c:39:3e:7f:17:0a:e4:a3:89:e3:59:50:83:
         1c:16:d9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:06:24 2025 by rpki-client