Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa
File:                     b5e0d86e-0f74-41d8-a413-497ad79e414d.roa (raw, json)
Hash identifier:          oHjqG+APZhVfjkBrb9eI1kPQIyFruY9T0MKdSOQri9Q=
Subject key identifier:   3F:C7:1F:2A:7A:EB:28:BE:AB:11:71:1B:F7:7D:3B:35:40:F5:C5:80
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       2185264FED2844BB9F4FB54B81D4E31F7EC44AC4
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa
Signing time:             Fri 30 May 2025 00:00:08 +0000
ROA not before:           Fri 30 May 2025 00:00:08 +0000
ROA not after:            Fri 04 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        216.221.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:85:26:4f:ed:28:44:bb:9f:4f:b5:4b:81:d4:e3:1f:7e:c4:4a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: May 30 00:00:08 2025 GMT
            Not After : Jul  4 23:59:59 2025 GMT
        Subject: serialNumber=7613db465bcdf809c52ab10320d03fdc7d031462fd594b0791034681fc3acd49, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0c:f8:81:81:b6:55:49:c4:35:a7:e2:91:54:
                    ba:24:f5:28:b5:a4:66:50:b4:f8:fd:b8:9b:7d:85:
                    90:eb:de:04:5a:f3:e1:03:a5:4c:34:03:0c:f1:07:
                    b0:5d:76:74:0a:7c:9a:3a:0b:e1:55:36:30:83:8b:
                    8d:d0:88:6e:ba:00:6d:ea:f6:70:aa:c2:b4:f2:e7:
                    c5:af:c5:0b:24:c2:03:f0:c4:f5:8c:63:37:2f:aa:
                    67:97:29:67:5e:8e:31:72:86:16:ac:40:d4:5f:ad:
                    ef:91:07:31:91:68:bc:48:da:02:02:58:68:8e:e4:
                    3b:c0:b6:0a:cb:45:b1:bc:f2:1b:00:fa:af:4f:c4:
                    be:43:bf:fa:e0:fe:a1:94:70:4a:53:28:26:f3:d0:
                    79:d7:c0:96:16:a8:96:9d:15:1b:97:08:0c:f2:45:
                    f9:a8:47:72:59:7d:18:eb:ff:d1:6b:df:b2:cd:48:
                    c0:21:9a:5f:e2:58:7c:89:24:ca:b2:00:0a:07:d3:
                    28:d7:73:4c:f7:ae:16:8e:87:72:be:7e:7f:c5:ce:
                    ef:85:a7:0c:2c:34:2f:44:c0:c7:ad:92:87:56:01:
                    b5:a1:dc:92:b8:eb:df:66:6a:8b:2d:00:23:30:4b:
                    9b:1f:88:5e:b3:42:0d:49:3e:3a:f7:1e:cb:b7:1f:
                    e6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C7:1F:2A:7A:EB:28:BE:AB:11:71:1B:F7:7D:3B:35:40:F5:C5:80
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b5e0d86e-0f74-41d8-a413-497ad79e414d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.221.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:e1:18:07:9c:6b:7d:11:9a:b3:38:74:c3:83:f1:8c:51:
         f1:52:45:b6:63:28:00:55:e4:f6:00:6b:15:43:76:c4:2c:07:
         20:ac:c7:91:be:85:4d:f6:35:57:e7:3c:89:58:3a:b9:55:54:
         79:1b:0b:ca:96:a5:b8:ef:3b:6f:bb:76:8c:7f:2a:19:cd:83:
         7e:52:95:e4:e8:26:60:6b:5f:a4:45:59:0e:15:53:1d:3f:6e:
         d4:0e:20:9a:6f:81:30:06:8f:21:eb:46:ef:ff:a8:37:48:4c:
         06:87:b1:b9:63:ac:4d:92:00:12:d2:fa:da:f3:82:18:d9:f0:
         38:c9:77:11:c7:03:cd:28:d7:34:72:6a:fc:0b:a3:6c:c3:5f:
         16:8a:da:5c:79:ef:be:b0:51:9a:b2:a8:7f:52:58:5e:8d:8f:
         af:d5:5a:17:b9:da:89:37:80:fb:67:2f:d9:a4:11:8e:eb:25:
         11:a7:86:5e:d2:be:a2:f8:20:cf:c7:5b:f3:1d:b2:c3:df:75:
         bf:ab:72:7e:20:8c:2b:36:4f:5a:cb:96:02:42:00:8c:41:a6:
         d6:51:05:79:40:77:c4:73:21:05:ef:18:c8:99:6e:20:ff:90:
         da:cb:f2:1c:66:1f:1f:18:fa:ac:a9:80:1e:c1:a8:db:00:fd:
         5f:67:14:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:37:40 2025 by rpki-client