Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/26d77bd4-20cb-42ee-8bae-c418156ab7e4.roa
File:                     26d77bd4-20cb-42ee-8bae-c418156ab7e4.roa (raw, json)
Hash identifier:          noI4KZHNoDDnm+kwzTdqlRkD9Y9obHrxpP0uG6Xyn5c=
Subject key identifier:   BF:58:9B:F6:B4:EB:51:72:41:F5:43:C3:7E:52:0F:B7:F9:53:42:E0
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       217C5CF45DDE587EE82A386B1265114ED9AD8197
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/26d77bd4-20cb-42ee-8bae-c418156ab7e4.roa
Signing time:             Fri 15 Aug 2025 00:21:01 +0000
ROA not before:           Fri 15 Aug 2025 00:21:01 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7c:5c:f4:5d:de:58:7e:e8:2a:38:6b:12:65:11:4e:d9:ad:81:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Aug 15 00:21:01 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=78eefa9c6ef34289496fe4501524fbf602ee9d265dcda8cd296cd0d4e8ecd72d, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:eb:51:1b:34:86:89:c5:a2:d4:c5:dd:46:
                    d1:35:12:12:89:9e:7a:39:e3:e2:3e:99:cd:08:eb:
                    9b:8f:21:ad:db:55:55:08:e7:74:c3:a0:20:b5:47:
                    f6:8a:41:9f:66:d0:0d:46:be:4a:80:9d:16:b4:1a:
                    c4:15:fa:3e:15:ce:65:86:ea:82:18:50:22:9b:54:
                    b0:0f:b6:df:a9:95:50:c4:e9:68:b6:e3:a8:7c:5e:
                    39:6c:41:dd:cc:cc:16:44:37:72:17:72:ec:a2:a7:
                    2a:41:58:6c:34:6a:0f:a4:51:ac:bf:68:04:42:23:
                    16:8f:a0:20:6e:8c:01:25:7b:3e:96:09:bf:7b:43:
                    85:4f:2a:f2:5a:32:e7:3b:09:7c:b2:d1:b1:38:53:
                    2b:e5:2a:5d:4f:d6:25:82:62:6f:8e:dd:28:72:bd:
                    1f:95:a9:2b:18:3c:ef:23:f1:8b:3e:74:f6:3d:39:
                    7b:09:74:10:47:35:db:c8:66:b6:d8:00:ce:cc:23:
                    5a:d6:f7:be:cc:3a:74:9a:26:87:b4:64:aa:54:72:
                    b2:af:8b:21:51:ed:20:1f:f3:d0:db:87:af:b3:c1:
                    7f:87:6d:49:7b:da:f5:b9:58:8a:89:5d:81:f6:00:
                    09:df:57:bc:b4:4f:bb:58:d7:fe:56:b0:24:cf:99:
                    4e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:58:9B:F6:B4:EB:51:72:41:F5:43:C3:7E:52:0F:B7:F9:53:42:E0
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/26d77bd4-20cb-42ee-8bae-c418156ab7e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:6f:88:2f:14:75:00:13:d5:1b:10:4f:a2:c3:5f:a6:06:a6:
         71:71:b3:6c:71:75:d9:da:b0:7a:ef:19:71:bb:c2:dc:04:26:
         d5:ed:71:7c:63:43:65:23:4b:db:d8:9a:86:ef:a9:8d:24:74:
         50:be:77:bb:68:f6:06:28:39:88:bf:4c:7a:f1:70:1a:9b:30:
         bb:6d:01:ac:85:b4:02:9f:59:fd:8c:35:d5:c0:8d:23:31:ce:
         dd:5a:db:2c:ee:c9:52:74:ee:bf:d0:eb:e6:bf:d8:34:a0:e1:
         c3:2c:31:d0:9b:94:16:ba:d1:9a:b8:6d:78:1e:74:a6:46:da:
         54:6a:62:25:62:c3:91:92:64:fb:03:31:8f:39:e5:02:a7:35:
         66:95:f2:29:82:ab:b1:06:6e:b9:ee:02:cb:4a:1d:35:66:07:
         a7:f0:32:23:17:b5:9d:0b:16:15:69:17:26:bc:c3:fa:b5:c9:
         9c:75:93:bd:65:42:15:c7:33:69:0e:ec:1b:54:fa:0a:1b:f0:
         89:95:3b:c0:74:ae:db:e3:ad:e5:5a:71:b1:04:27:06:45:e6:
         04:2c:ac:20:eb:01:25:b7:52:c0:38:40:e8:84:90:0d:34:97:
         4f:e9:27:9e:0a:87:38:0d:73:86:94:c1:23:ec:05:c0:c8:96:
         02:eb:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:50:06 2025 by rpki-client