Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa
File:                     fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa (raw, json)
Hash identifier:          c9y2gowomG9JbzwpNsWWXf9J1s70VJ6UnIPltbkiS3o=
Subject key identifier:   CB:79:02:89:25:BC:B8:C2:D0:AB:0A:8A:EA:7C:A0:7F:0C:5A:C6:14
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       706C1FFCEF2C43F10AEA3A7E1F2E9CB9CDFB77B8
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa
Signing time:             Wed 27 Aug 2025 00:10:29 +0000
ROA not before:           Wed 27 Aug 2025 00:10:29 +0000
ROA not after:            Wed 01 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6c:1f:fc:ef:2c:43:f1:0a:ea:3a:7e:1f:2e:9c:b9:cd:fb:77:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Aug 27 00:10:29 2025 GMT
            Not After : Oct  1 23:59:59 2025 GMT
        Subject: serialNumber=011a8e9ea924a9c3d167ae0adb7a776b8e476c759a148cea90b3377e85b7ca76, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:bf:20:b7:5a:69:97:01:30:05:10:c6:b8:
                    d6:f3:60:6e:59:6e:4e:93:aa:a6:6a:34:1c:2b:65:
                    a8:8f:76:a8:3c:ae:f6:db:f4:ec:7b:bc:01:ce:0f:
                    fa:8c:6f:07:c9:f0:34:e0:f8:4a:70:1d:29:8e:ae:
                    e3:98:ac:04:b5:6e:51:b3:4f:6c:37:db:05:78:5d:
                    67:77:44:ac:9b:ee:dc:1c:63:55:eb:47:6c:fd:38:
                    a6:04:ef:dc:7b:2e:f2:2c:d3:76:61:be:87:dd:68:
                    27:25:f7:57:14:8c:8d:5a:64:14:28:0d:43:55:fe:
                    d2:80:a2:00:23:8c:0b:05:e8:19:26:8c:0b:f9:74:
                    b9:6a:3d:6c:2a:88:1e:ae:05:c7:f7:33:91:20:df:
                    7a:62:df:3d:93:8a:34:c7:a6:85:9f:9a:16:9e:d3:
                    13:99:f2:b9:b1:5a:c6:c8:7b:1a:48:da:26:b2:e0:
                    07:c4:e8:4b:d5:67:fe:20:71:fc:ac:f7:bf:7a:e3:
                    33:86:1a:a3:10:f8:7e:8a:6e:75:9e:40:31:65:67:
                    a0:44:bb:ec:69:98:c3:43:f9:a1:2f:90:49:5e:6c:
                    b7:94:34:85:21:01:e2:ae:40:f6:8e:c3:ac:3e:a2:
                    90:cc:d5:be:3a:68:64:2c:93:2f:73:6f:6c:c4:e3:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:79:02:89:25:BC:B8:C2:D0:AB:0A:8A:EA:7C:A0:7F:0C:5A:C6:14
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fc93e1d0-44ff-4b2f-962d-d91a8964a4bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:da:43:62:40:7b:a8:37:d0:b5:d4:b0:df:ae:a4:95:57:70:
         9d:f4:3d:34:eb:00:fe:08:4c:d2:a0:25:63:35:12:78:8f:94:
         bf:51:27:f9:f5:8b:af:47:05:6c:b9:a1:3e:ae:8c:37:01:97:
         23:dd:f0:56:77:10:c2:a4:50:5b:8d:a9:87:a8:68:1c:e0:2e:
         ab:90:0b:53:14:d1:fb:3f:b9:89:f4:32:90:2e:e1:42:e4:ed:
         a7:c7:89:99:2d:c1:51:2d:b3:b8:50:cb:1f:18:22:bd:2b:e9:
         7a:09:b5:38:f8:b6:8f:be:a6:11:ae:06:63:99:54:85:08:29:
         41:06:eb:a3:5c:1b:a9:d0:37:a7:b7:23:0d:81:92:95:42:b0:
         b8:19:eb:76:24:e2:07:2d:a0:80:a0:c3:fa:71:1b:0c:8b:24:
         02:de:a3:80:ca:5d:09:b0:f2:0d:9f:bf:11:05:99:2c:ac:5b:
         f8:b6:5a:8f:c7:55:16:4e:f4:4c:94:3f:11:e4:aa:55:35:52:
         ec:91:10:f0:df:45:16:3b:18:21:01:4e:82:90:2e:0b:73:f0:
         df:27:c7:e2:83:f6:a2:9c:8c:c1:e8:68:c9:c9:58:c4:61:25:
         f6:0e:a1:bf:5b:07:f6:0b:18:7c:49:35:51:0c:7b:e0:f1:17:
         94:11:d8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:14:09 2025 by rpki-client