Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6da9618c-e798-462f-afd9-32b58ba88cba.roa
File:                     6da9618c-e798-462f-afd9-32b58ba88cba.roa (raw, json)
Hash identifier:          jYwwjm4W9qC/ap1C02XJ479/raP2mKOsYQ3Qsrm2VnQ=
Subject key identifier:   76:C2:05:42:3C:7E:25:C9:B8:42:8F:D9:D5:BC:D2:0C:00:69:C2:84
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       41F95AC37E20BDC9B28AF07F6017EE797895989F
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6da9618c-e798-462f-afd9-32b58ba88cba.roa
Signing time:             Wed 27 Aug 2025 00:10:24 +0000
ROA not before:           Wed 27 Aug 2025 00:10:24 +0000
ROA not after:            Wed 01 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f9:5a:c3:7e:20:bd:c9:b2:8a:f0:7f:60:17:ee:79:78:95:98:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Aug 27 00:10:24 2025 GMT
            Not After : Oct  1 23:59:59 2025 GMT
        Subject: serialNumber=39c3f617c399d96556fd426045aea988ae0470944ce903b159a5c0fc0ae30f6d, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:0a:6c:ee:f9:6b:c4:f7:87:f1:17:1d:6c:
                    7f:29:fa:23:cd:a0:83:6a:06:1d:4f:63:b0:81:ad:
                    77:3e:f1:70:ce:80:c5:a1:e6:0b:83:77:3a:ec:bd:
                    54:e8:68:8d:10:74:f9:ba:34:69:80:fd:3b:17:cc:
                    bb:9d:ae:28:2d:03:cc:75:3f:ce:34:e6:87:38:7a:
                    b7:4b:ef:cb:66:43:0b:c0:01:97:5e:12:4b:3a:3f:
                    c8:b4:2a:76:0d:f4:d3:56:84:67:05:d6:cc:53:6c:
                    ec:3d:fb:21:97:9c:0b:79:77:29:24:b3:90:0d:a2:
                    c0:1b:bf:b4:53:cc:78:06:21:48:5c:3c:94:97:91:
                    df:c6:93:cc:97:9e:da:33:07:df:2c:15:52:c7:ec:
                    ba:8f:25:d7:fc:4f:3f:10:c1:6d:f9:fc:d8:65:48:
                    d8:31:7a:3a:9c:7b:f8:a9:34:14:ef:4a:da:b9:b8:
                    d3:7d:57:0c:ca:cd:ff:55:3b:7c:50:f3:65:5b:16:
                    4a:a4:1e:09:47:b4:ce:b1:7c:64:6a:dc:b9:88:2c:
                    4e:ee:06:91:2b:1f:50:a5:c3:26:be:ec:c7:73:46:
                    4e:e5:cb:b4:ea:a8:5c:90:46:b6:7f:8a:fd:11:7e:
                    15:b9:9f:25:46:14:3f:d9:a1:84:84:49:b7:b5:6c:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C2:05:42:3C:7E:25:C9:B8:42:8F:D9:D5:BC:D2:0C:00:69:C2:84
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6da9618c-e798-462f-afd9-32b58ba88cba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:9c:53:b9:27:50:53:22:91:ff:ef:5f:cf:f2:e0:22:8b:22:
         7e:c1:46:fa:98:bc:70:66:6d:a3:34:ba:2d:de:4f:d2:9c:2c:
         15:57:a7:b7:ae:c4:e2:fb:11:80:86:22:40:d7:d4:83:f4:00:
         73:f2:f6:e9:db:22:a7:8e:5b:07:20:ae:02:b3:48:8f:3c:bc:
         f5:9e:52:5f:f4:26:ce:dd:5c:7e:2b:b6:01:dd:6c:a9:26:8b:
         e3:47:03:5e:ca:12:26:a9:c2:9e:1a:05:b5:86:72:66:a4:8b:
         0b:0c:41:ed:0c:ab:99:e8:a7:53:09:74:26:a2:ff:a6:7c:3c:
         61:3d:40:0b:32:44:77:cd:54:a4:3a:0e:0c:e5:5e:1e:28:be:
         c4:72:3d:a7:b0:49:5f:49:4c:54:07:87:e5:bc:e7:be:32:ec:
         3c:64:a4:ce:a6:15:96:aa:71:85:50:49:e2:a7:1e:76:cb:42:
         1f:22:4a:ad:69:38:cb:ab:3a:99:ae:51:37:94:d9:fb:21:9d:
         31:53:6b:52:84:b9:58:b9:1f:51:3a:fb:38:b5:a6:04:bd:3b:
         8c:89:26:0d:93:cd:e5:e2:5d:12:48:96:0b:81:6c:64:64:40:
         7a:27:14:ac:ed:47:d5:6b:a4:3e:16:96:33:8b:2a:7d:3e:99:
         07:ab:21:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:14:47 2025 by rpki-client