Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa
File:                     6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa (raw, json)
Hash identifier:          s3kEuObOY0IqEiwMkdOEvwCK3nn9qQA06FOCIAYNYs8=
Subject key identifier:   7D:25:F9:55:AD:06:C0:76:59:A4:33:68:BF:2F:E4:FF:0D:39:C6:52
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       3812846BEEC94C065AF36B0660DB903CA4D7EAA1
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa
Signing time:             Fri 01 May 2026 00:00:38 +0000
ROA not before:           Fri 01 May 2026 00:00:38 +0000
ROA not after:            Thu 30 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        206.55.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:12:84:6b:ee:c9:4c:06:5a:f3:6b:06:60:db:90:3c:a4:d7:ea:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: May  1 00:00:38 2026 GMT
            Not After : Jul 30 23:59:59 2026 GMT
        Subject: serialNumber=62fa9c1cadee7a4e5e681a0d7a40a7a7df0493ff6fb23d770595a4e0565c3507, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3e:5c:46:3d:78:e9:ad:6d:be:ed:ea:60:76:
                    1a:45:40:98:d0:f1:ab:f1:b4:7d:13:bd:f7:88:11:
                    ba:62:35:b2:cc:d5:ac:77:ec:73:f0:07:5f:b2:a9:
                    b2:a5:9a:8f:31:1b:3c:89:5d:ad:0b:ab:4d:1b:3d:
                    2c:07:cd:99:bc:b4:8f:71:ad:5c:e5:df:21:da:e9:
                    d1:a0:1e:78:c5:b6:f0:11:19:2d:b6:11:18:37:51:
                    18:25:d9:d6:a5:34:c4:eb:ef:f3:11:02:09:26:47:
                    c8:e1:37:4b:c9:63:15:67:e9:16:89:4c:f3:7a:92:
                    d7:da:5b:08:e2:49:12:f2:94:19:9c:54:c2:22:d6:
                    a5:66:02:ca:6d:5f:15:ce:3b:d7:81:74:57:fa:0c:
                    67:58:80:f9:cb:cf:56:eb:02:f3:b1:d9:06:71:e3:
                    96:f3:35:f3:5c:10:93:84:27:c5:86:49:b4:ad:d2:
                    1f:52:1e:0f:16:31:97:43:5f:a3:9b:96:27:ce:b2:
                    66:fa:21:bb:31:58:57:13:5b:2c:2f:d8:1e:09:da:
                    5d:50:3a:af:bc:e9:49:e3:a2:02:fd:68:3d:82:06:
                    aa:70:63:a6:82:74:a6:77:69:46:54:b0:41:38:f4:
                    2e:48:9b:a8:9d:ab:ae:03:5f:b4:f4:6a:07:68:62:
                    b2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:25:F9:55:AD:06:C0:76:59:A4:33:68:BF:2F:E4:FF:0D:39:C6:52
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:24:40:ba:fe:b2:56:11:4e:9f:17:34:90:57:79:34:78:44:
         86:ee:d0:b5:7e:f7:fb:14:69:6a:f3:75:3f:d1:c2:24:ab:62:
         fc:51:53:a9:0e:07:26:4a:a8:7c:9e:92:c2:e5:2c:0d:ce:6c:
         b1:8d:63:2d:8e:95:91:ee:a2:9f:65:ef:d1:9e:05:bf:13:02:
         c7:d8:9f:73:e2:bd:52:2a:2e:73:2d:cc:33:46:2c:1e:d6:1e:
         86:a5:cb:29:57:cb:81:44:fb:39:ac:b2:56:53:f7:b1:9a:8d:
         61:49:d1:b1:ff:3f:7d:90:4d:96:bc:33:e5:ad:d1:d5:df:22:
         09:45:b0:e2:99:04:eb:29:df:ce:2d:4f:04:66:c9:e8:5d:a4:
         8d:31:71:25:93:a5:0b:40:a6:3a:00:b4:9d:7c:5c:6c:b9:ed:
         37:fa:93:01:33:71:7e:53:e9:ab:9c:8c:a8:50:e5:39:e7:15:
         57:e8:bc:18:01:15:40:52:3d:b7:be:df:7f:18:74:fe:2e:cc:
         84:0a:ed:bc:95:4b:f3:47:a7:49:1b:bf:ce:5c:f6:3c:f8:b7:
         eb:46:58:9a:bb:5e:1f:4d:26:43:c4:00:d1:cf:25:c0:c0:04:
         37:6b:e2:a6:7f:da:c9:4a:d3:03:27:61:4b:d1:af:1d:88:45:
         f0:e9:45:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:23:18 2026 by rpki-client