Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/feb848d0-befe-434e-8b06-9622757cd5f5.roa
File:                     feb848d0-befe-434e-8b06-9622757cd5f5.roa (raw, json)
Hash identifier:          Isi3iCW4JVlwtCkISVSxAa95On/I2Q4uxWhyC1PPlQ8=
Subject key identifier:   7B:71:DA:6C:F4:62:58:C0:38:E6:4C:2F:6C:35:E1:3A:4E:69:26:DC
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       69242C6E77F769656828B4050153931B9A2458C0
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/feb848d0-befe-434e-8b06-9622757cd5f5.roa
Signing time:             Fri 13 Jun 2025 00:10:16 +0000
ROA not before:           Fri 13 Jun 2025 00:10:16 +0000
ROA not after:            Fri 18 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:24:2c:6e:77:f7:69:65:68:28:b4:05:01:53:93:1b:9a:24:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Jun 13 00:10:16 2025 GMT
            Not After : Jul 18 23:59:59 2025 GMT
        Subject: serialNumber=a12f2ff5917378b99393703da77d2b48ae75ceb126fadb6ab9e033f35d3b5390, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:03:61:66:00:85:c3:2b:1f:be:ae:df:ec:
                    47:27:0b:a6:dc:00:d7:b9:aa:2c:61:dc:d8:2b:6e:
                    0e:52:75:0b:de:5d:3b:74:85:e5:0a:41:7d:e9:cd:
                    57:5e:ff:90:a8:40:81:8b:50:81:ad:05:c5:ba:f0:
                    70:b6:e7:f7:f8:54:d5:fd:80:36:50:e1:83:a2:30:
                    55:7c:fc:c3:64:2c:66:e5:5a:c9:f3:e0:d8:dd:cd:
                    3c:c8:24:b5:0c:59:9a:15:17:85:02:89:29:63:1f:
                    9a:1b:31:42:9e:43:ef:2f:3e:13:ad:b7:ab:72:d7:
                    02:34:58:93:e1:31:42:e0:47:80:c3:1f:cc:72:e0:
                    60:2d:f4:66:22:e3:54:78:8a:e3:6b:e3:e9:e8:91:
                    59:59:e3:9d:3b:59:d3:63:b2:66:27:fb:22:6e:27:
                    f4:00:8f:1f:3e:36:93:38:48:4a:08:74:2a:9a:49:
                    f9:d4:c7:36:9f:45:ab:a7:69:b8:de:79:ad:21:6b:
                    48:cd:d5:dc:85:89:d7:88:7a:50:ae:2e:3d:0b:2a:
                    07:de:f1:08:6d:1e:d9:36:0b:e6:fa:a5:d2:24:4d:
                    fc:af:04:df:2f:e3:b1:0c:72:f5:96:14:bb:d8:2e:
                    7b:95:c7:ce:b6:c5:fd:23:c6:37:87:1b:c1:ce:bf:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:71:DA:6C:F4:62:58:C0:38:E6:4C:2F:6C:35:E1:3A:4E:69:26:DC
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/feb848d0-befe-434e-8b06-9622757cd5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:cc:38:09:01:29:1d:ce:5d:1c:0a:27:77:fd:65:0f:e8:45:
         3d:d5:18:89:07:7e:c6:24:cd:0d:27:65:c6:07:c4:a8:91:08:
         2e:c7:5d:a2:19:9a:5c:dd:27:a9:5c:4a:c8:d1:b6:d2:35:a9:
         92:13:52:c0:ea:40:de:ad:08:a5:23:0e:1f:cf:3f:85:9f:3c:
         2d:f0:e3:d9:85:8e:88:c8:a1:e5:29:99:6f:ef:94:ea:b1:eb:
         8b:28:6a:cd:d2:57:9a:28:ff:c8:ea:f0:43:61:c1:80:31:82:
         fd:0f:cb:a5:7e:d0:45:85:ba:3a:4a:61:d2:65:4e:2b:ad:17:
         4a:65:6f:f4:b4:18:dc:ea:a1:e5:b9:42:15:3c:b6:b3:e2:66:
         76:45:0b:a0:71:4e:2f:02:85:88:4c:f9:be:10:17:7c:d1:16:
         67:95:fc:ea:aa:12:39:4f:60:75:a2:dc:84:73:66:39:5b:b6:
         9b:dc:af:4f:96:61:95:69:ec:07:3a:99:f8:65:c9:04:a8:df:
         dd:9f:30:d4:77:19:6d:88:89:36:0e:d5:ac:ba:f5:0e:da:01:
         36:89:22:85:4a:a4:2e:44:61:7e:e8:e5:12:22:f1:2d:ca:fe:
         97:4f:8b:c0:2d:d7:0e:94:f3:e3:c3:cb:ec:00:03:c2:e7:23:
         1b:dd:80:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:18:24 2025 by rpki-client