Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa
File:                     b5e0d86e-0f74-41d8-a413-497ad79e414d.roa (raw, json)
Hash identifier:          jkw7nqr8aYpGty84wVGhTO2JTe+yRRXMk/rBvFJJKRE=
Subject key identifier:   2F:AB:70:37:C4:61:98:8C:E1:DA:0A:2A:C4:A2:73:28:B3:6F:E4:1A
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       67B3A065794E0546BEF23B74DFB357B030E6D306
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa
Signing time:             Sat 30 Aug 2025 00:00:03 +0000
ROA not before:           Sat 30 Aug 2025 00:00:03 +0000
ROA not after:            Sat 04 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.221.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b3:a0:65:79:4e:05:46:be:f2:3b:74:df:b3:57:b0:30:e6:d3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Aug 30 00:00:03 2025 GMT
            Not After : Oct  4 23:59:59 2025 GMT
        Subject: serialNumber=8baecb9f6a423da9ee1fadd75512d4d05b6da32d4b4c8299ffa5755cdf64603f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:e9:99:2b:26:5b:d0:bd:ff:e3:a7:ae:df:
                    db:2f:10:76:cf:ed:a6:50:b4:e8:9c:9c:59:de:5a:
                    25:72:b6:3f:85:6c:e2:ef:9d:52:f0:3a:dd:04:47:
                    a2:f5:68:77:c6:bf:83:99:9d:31:58:52:1c:e3:fc:
                    8d:b9:d5:fe:e3:22:37:9b:54:4f:c1:31:3b:df:f0:
                    50:29:b3:75:b3:2f:d1:46:9f:47:e6:0b:94:53:e9:
                    d5:71:a6:69:78:89:23:85:9a:e7:ad:78:98:30:24:
                    81:b6:02:67:60:ef:37:19:e2:07:fb:db:83:9d:5c:
                    fe:5c:29:07:fe:3e:2d:0b:06:71:61:34:86:a6:35:
                    74:6b:ff:8b:6e:f2:93:d2:1c:75:0f:6b:9b:38:3b:
                    1c:91:5d:32:50:ed:93:0f:73:b3:76:77:02:59:dd:
                    85:c0:0b:c7:4e:27:bc:91:a6:6c:dc:41:fd:78:32:
                    d6:a5:06:ab:f6:1a:6d:21:34:17:58:38:bd:4d:89:
                    67:79:e1:92:1c:a6:1b:d2:70:10:ac:cb:4a:3d:4c:
                    cb:f8:1b:be:46:8f:b6:38:38:08:f3:82:45:4c:ac:
                    87:bc:57:ee:96:08:5f:74:d8:6d:89:20:12:00:0d:
                    ab:ae:e1:14:8a:ad:84:c6:ce:19:c4:55:d5:de:d3:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AB:70:37:C4:61:98:8C:E1:DA:0A:2A:C4:A2:73:28:B3:6F:E4:1A
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.221.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:de:a7:98:8d:4d:4a:c2:0c:a3:f2:8b:89:3e:a3:0c:f8:63:
         20:e0:36:7e:54:e7:54:74:61:5b:9d:30:bb:35:3c:b2:9e:21:
         99:b1:4f:23:16:70:b8:51:5f:f1:31:74:24:3b:75:be:78:81:
         57:6a:12:78:7a:f9:84:36:f8:74:62:e9:8a:2c:bc:a4:15:ed:
         a7:37:59:99:6b:77:02:de:f3:c7:29:3b:7f:62:66:c1:38:93:
         c1:ab:e1:0c:05:30:3e:d5:d0:fb:13:7a:a5:8a:c7:51:5d:20:
         5b:40:bc:b3:e2:91:fb:14:f1:b4:40:ce:f6:0d:34:ce:be:78:
         e6:95:45:d1:31:66:73:62:14:0e:89:c5:74:d3:d5:0a:b2:98:
         6c:04:23:95:45:5e:42:f5:16:a1:4c:55:52:02:0b:3e:32:a8:
         ac:8a:2f:5d:c8:fc:95:b3:5a:ae:0a:2a:26:6c:87:68:ef:cd:
         04:15:9d:2f:12:af:18:42:1b:91:ee:a1:a2:d5:dc:92:2c:b3:
         5f:77:94:16:bd:e5:b2:76:d5:7d:e3:55:ce:b7:67:5e:27:36:
         30:62:fd:da:c0:5d:83:ce:eb:72:2b:fd:93:b0:6a:ed:4d:c8:
         c0:95:af:fa:58:f5:ac:bd:bd:2c:1b:56:2a:9a:e7:6a:fb:14:
         7d:90:ac:3b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ7OgZXlOBUa+8jt037NXsDDm0wYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODMwMDAwMDAzWhcNMjUxMDA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YmFlY2I5ZjZhNDIzZGE5ZWUxZmFkZDc1NTEyZDRkMDVi
NmRhMzJkNGI0YzgyOTlmZmE1NzU1Y2RmNjQ2MDNmMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+sumZKyZb0L3/46eu39svEHbP7aZQtOicnFneWiVytj+F
bOLvnVLwOt0ER6L1aHfGv4OZnTFYUhzj/I251f7jIjebVE/BMTvf8FAps3WzL9FG
n0fmC5RT6dVxpml4iSOFmueteJgwJIG2Amdg7zcZ4gf724OdXP5cKQf+Pi0LBnFh
NIamNXRr/4tu8pPSHHUPa5s4OxyRXTJQ7ZMPc7N2dwJZ3YXAC8dOJ7yRpmzcQf14
MtalBqv2Gm0hNBdYOL1NiWd54ZIcphvScBCsy0o9TMv4G75Gj7Y4OAjzgkVMrIe8
V+6WCF902G2JIBIADauu4RSKrYTGzhnEVdXe0x1JAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUL6twN8RhmIzh2goqxKJzKLNv5BowHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2I1ZTBkODZlLTBmNzQtNDFkOC1hNDEzLTQ5N2FkNzllNDE0ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXY3aAwDQYJKoZIhvcNAQELBQADggEBAAjep5iNTUrCDKPyi4k+owz4YyDg
Nn5U51R0YVudMLs1PLKeIZmxTyMWcLhRX/ExdCQ7db54gVdqEnh6+YQ2+HRi6Yos
vKQV7ac3WZlrdwLe88cpO39iZsE4k8Gr4QwFMD7V0PsTeqWKx1FdIFtAvLPikfsU
8bRAzvYNNM6+eOaVRdExZnNiFA6JxXTT1QqymGwEI5VFXkL1FqFMVVICCz4yqKyK
L13I/JWzWq4KKiZsh2jvzQQVnS8SrxhCG5HuoaLV3JIss193lBa95bJ21X3jVc63
Z14nNjBi/drAXYPO63Ir/ZOwau1NyMCVr/pY9ay9vSwbViqa52r7FH2QrDs=
-----END CERTIFICATE-----
Generated at Sun Sep 7 16:15:29 2025 by rpki-client