Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa
File:                     5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa (raw, json)
Hash identifier:          bcjsDv2F4LxmDObiHyQj5Zil7X+xGT8cJYg8p23AJkw=
Subject key identifier:   B5:DD:E0:A3:46:4C:2C:13:5E:CC:B7:99:54:37:90:ED:D3:84:C9:3D
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       2354F2FFB0DDB2F70BB4AE482E2E86FEE0B6F0DA
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa
Signing time:             Tue 21 Jul 2026 00:30:50 +0000
ROA not before:           Tue 21 Jul 2026 00:30:50 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:54:f2:ff:b0:dd:b2:f7:0b:b4:ae:48:2e:2e:86:fe:e0:b6:f0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Jul 21 00:30:50 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=a2801f57e744ecc8ebc3e5a742561a4b272c3fc1ea8f2b896e14be81d3e399a7, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:00:de:04:36:48:77:ce:44:89:74:f0:0b:
                    ff:bc:a2:d8:05:09:70:c1:39:b6:0b:fc:2f:a7:52:
                    c9:db:11:21:33:62:b2:f1:ad:0b:05:6b:bc:b2:65:
                    80:29:6d:2f:af:60:67:4d:59:90:cd:92:17:23:6d:
                    ce:e4:a9:b6:ea:79:c9:54:10:80:a8:e0:dc:61:41:
                    d9:71:5b:9d:b5:a5:2b:2c:07:5c:05:fe:dc:86:bb:
                    50:90:e4:d6:30:5a:68:99:da:f5:ad:6a:14:f4:07:
                    66:2e:72:f3:29:6b:95:ec:fb:9c:13:2e:bb:ea:9f:
                    36:67:84:d6:bf:32:25:5b:aa:88:e2:07:3d:99:d6:
                    47:27:e4:83:44:93:91:a2:08:46:e3:d2:62:c4:72:
                    59:12:73:d4:01:63:73:a7:1e:3a:5d:af:30:84:e8:
                    43:eb:77:71:13:3e:90:2a:e9:44:1c:95:fc:c1:d3:
                    f4:1e:3d:61:a5:e2:b9:53:74:99:f3:aa:97:0e:80:
                    4d:a5:cd:a0:92:bf:06:9f:af:f7:81:9f:31:99:90:
                    05:fe:9d:75:12:10:8a:2f:df:27:b4:fc:a8:7b:3b:
                    e1:50:02:f5:9b:12:1c:09:e1:a8:fb:ee:80:46:d5:
                    82:82:74:da:ec:46:1c:ee:fe:37:a3:3f:d0:54:46:
                    f3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DD:E0:A3:46:4C:2C:13:5E:CC:B7:99:54:37:90:ED:D3:84:C9:3D
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d34f797-6d16-498a-b66d-8c7d0fcac77f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:be:28:18:ef:c3:91:c9:aa:e1:bf:f2:91:71:e9:93:ba:1b:
         d8:20:a8:81:a5:6a:f2:70:73:91:17:8f:71:d1:cb:da:f5:41:
         df:70:33:dd:14:7e:16:7c:8a:3b:69:91:50:e2:09:fb:ac:15:
         aa:2a:e3:ca:e1:22:4d:f6:8e:1f:b0:6f:75:91:46:16:7f:65:
         7d:14:1c:d5:3d:26:63:76:63:50:be:a4:8a:fd:b1:e4:db:2a:
         4d:f3:8a:32:71:50:02:5f:36:5c:f3:f9:65:8f:bb:4a:52:75:
         e1:bf:da:3f:c7:51:42:4b:49:66:24:4d:20:b7:38:de:35:55:
         74:50:08:9e:4e:ca:68:25:68:79:b5:5c:79:6b:c3:e1:87:68:
         69:31:4b:bd:13:62:73:fb:1e:f0:8e:63:07:11:a3:91:34:ae:
         d1:65:7c:50:62:1a:ce:50:a1:87:31:21:00:32:a9:1d:97:40:
         80:d5:63:dc:28:34:ef:69:7e:f2:b5:49:1d:33:18:42:f6:0f:
         66:7a:08:6d:78:c4:d0:ac:e0:3d:fe:1f:ca:c9:56:89:95:f1:
         ce:fc:66:58:84:35:61:bf:03:aa:38:0f:f1:9b:fc:75:f7:20:
         31:80:16:fa:d9:ba:cb:38:0b:d8:cb:4d:5e:0c:6a:10:ae:66:
         01:5b:2c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:27:07 2026 by rpki-client