Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa
File:                     1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa (raw, json)
Hash identifier:          Yj9M3Q8QZ+jI9KIi7haMNBBGTHhrzZs7h1YY2sid4QI=
Subject key identifier:   BA:04:D6:12:21:71:E3:AF:DF:32:90:D6:1B:40:A7:45:BD:FD:E1:B9
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       1F78E850758545C249AA017794A64BB48EA9ACA9
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa
Signing time:             Fri 15 Aug 2025 00:20:05 +0000
ROA not before:           Fri 15 Aug 2025 00:20:05 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.249.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:78:e8:50:75:85:45:c2:49:aa:01:77:94:a6:4b:b4:8e:a9:ac:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Aug 15 00:20:05 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=8141552945b38b86f3522c9db8ca98e31a2e3c32b738aca8379c4093862a41e5, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8d:dd:e4:12:6c:b9:99:09:8f:ea:17:c5:43:
                    fc:08:68:77:a4:2b:7f:41:65:1c:b3:79:99:00:4e:
                    76:55:63:71:eb:95:eb:ae:ed:6b:5c:9b:cc:31:39:
                    64:01:19:30:7d:a3:99:22:ee:16:19:ce:e3:fb:ca:
                    70:20:41:aa:93:37:d9:5c:db:33:51:39:de:6e:50:
                    48:5c:20:08:6b:e4:62:40:0b:9f:76:49:29:fa:91:
                    50:19:c4:d7:fe:c0:78:e3:5b:4c:63:20:a9:e5:bc:
                    51:da:b5:88:35:cd:3a:83:87:e3:3d:63:0f:ed:20:
                    7c:ed:11:82:3e:71:70:47:e0:27:84:49:b6:bd:8b:
                    f6:a1:49:ba:fd:c9:4b:d8:bb:2e:dc:34:61:29:2e:
                    bb:bf:cf:dd:f5:ff:8d:cd:3f:a9:9c:37:5b:4b:b1:
                    b9:60:e7:62:86:55:84:0f:6a:fa:fd:0c:ea:2b:ea:
                    66:b9:c6:77:42:c6:cd:6b:b5:31:b1:3a:13:c1:6c:
                    bc:25:b0:44:42:74:ad:8f:03:e7:f6:77:b3:0b:34:
                    7b:f8:77:8e:9b:b0:61:58:51:ec:97:b5:55:11:d7:
                    0d:26:a2:a8:46:5d:3f:95:6a:9e:3d:b7:17:92:62:
                    f4:96:d5:dc:8f:b2:80:f4:8f:d9:c4:93:4b:8a:31:
                    1f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:04:D6:12:21:71:E3:AF:DF:32:90:D6:1B:40:A7:45:BD:FD:E1:B9
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/1c959e66-f967-43d6-93bd-cbdcf160cbb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:3d:fd:1c:c9:08:8a:86:8b:a5:b9:92:6c:ab:45:1c:53:af:
         80:e9:39:48:bd:fb:71:81:c8:f9:95:9a:f5:a4:d8:af:2c:3b:
         bd:75:ae:11:bd:44:ec:b8:77:dd:33:fb:18:e6:25:cb:28:7e:
         d3:4f:82:73:79:0e:60:e7:10:8a:5c:e5:b8:82:16:3c:37:02:
         09:5b:61:48:f0:91:6e:48:c9:cf:21:71:22:92:2e:b5:ad:f8:
         04:f2:60:f8:43:0f:3f:b1:db:de:89:d7:90:cc:04:a0:d2:b3:
         47:8f:28:f8:4d:33:a6:15:b1:93:50:fd:b8:2b:97:cb:66:99:
         f2:a5:9d:4a:fe:d3:12:85:d6:28:33:c5:15:98:b2:62:77:2b:
         bd:85:00:08:44:ff:f0:9b:fb:95:d0:3c:03:7b:48:fa:67:96:
         48:3d:47:8c:fb:cb:08:83:c4:1e:e3:83:1e:fb:59:4c:43:66:
         52:75:42:9c:aa:c9:ea:58:bb:0e:8c:f3:fb:ba:ca:0c:68:49:
         5e:cb:72:7d:ff:0e:51:09:16:8d:55:04:a9:e4:60:19:86:70:
         d1:cd:5b:15:79:fb:ca:49:bf:54:b7:cf:83:c6:31:8f:ac:80:
         94:99:7f:7b:45:1f:d1:d2:f7:4b:82:3f:50:e3:95:ab:da:54:
         1e:18:9e:14
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUH3joUHWFRcJJqgF3lKZLtI6prKkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwODE1MDAyMDA1WhcNMjUwOTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MTQxNTUyOTQ1YjM4Yjg2ZjM1MjJjOWRiOGNhOThlMzFh
MmUzYzMyYjczOGFjYTgzNzljNDA5Mzg2MmE0MWU1MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCFjd3kEmy5mQmP6hfFQ/wIaHekK39BZRyzeZkATnZVY3Hr
leuu7Wtcm8wxOWQBGTB9o5ki7hYZzuP7ynAgQaqTN9lc2zNROd5uUEhcIAhr5GJA
C592SSn6kVAZxNf+wHjjW0xjIKnlvFHatYg1zTqDh+M9Yw/tIHztEYI+cXBH4CeE
Sba9i/ahSbr9yUvYuy7cNGEpLru/z931/43NP6mcN1tLsblg52KGVYQPavr9DOor
6ma5xndCxs1rtTGxOhPBbLwlsERCdK2PA+f2d7MLNHv4d46bsGFYUeyXtVUR1w0m
oqhGXT+Vap49txeSYvSW1dyPsoD0j9nEk0uKMR/nAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUugTWEiFx46/fMpDWG0CnRb394bkwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzFjOTU5ZTY2LWY5NjctNDNkNi05M2JkLWNiZGNmMTYwY2JiNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQX+dAwDQYJKoZIhvcNAQELBQADggEBAHQ9/RzJCIqGi6W5kmyrRRxTr4Dp
OUi9+3GByPmVmvWk2K8sO711rhG9ROy4d90z+xjmJcsoftNPgnN5DmDnEIpc5biC
Fjw3AglbYUjwkW5Iyc8hcSKSLrWt+ATyYPhDDz+x296J15DMBKDSs0ePKPhNM6YV
sZNQ/bgrl8tmmfKlnUr+0xKF1igzxRWYsmJ3K72FAAhE//Cb+5XQPAN7SPpnlkg9
R4z7ywiDxB7jgx77WUxDZlJ1QpyqyepYuw6M8/u6ygxoSV7Lcn3/DlEJFo1VBKnk
YBmGcNHNWxV5+8pJv1S3z4PGMY+sgJSZf3tFH9HS90uCP1DjlavaVB4YnhQ=
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:40 2025 by rpki-client