Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d99a456-6c99-48ae-bf3a-149585d61d61.roa
File:                     5d99a456-6c99-48ae-bf3a-149585d61d61.roa (raw, json)
Hash identifier:          hExYxbi3MLynOo3Z9oYXLe0Cd8qUGhT5Yr0687iaoKo=
Subject key identifier:   41:B1:A9:A8:65:D8:AC:66:CB:54:F1:37:E1:23:70:D9:2D:94:66:EC
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       32C2BDA7B5D69E7624698EDF5277A7EC37E97D01
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d99a456-6c99-48ae-bf3a-149585d61d61.roa
Signing time:             Fri 17 Oct 2025 00:10:06 +0000
ROA not before:           Fri 17 Oct 2025 00:10:06 +0000
ROA not after:            Fri 21 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        69.169.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c2:bd:a7:b5:d6:9e:76:24:69:8e:df:52:77:a7:ec:37:e9:7d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Oct 17 00:10:06 2025 GMT
            Not After : Nov 21 23:59:59 2025 GMT
        Subject: serialNumber=f3ec9ec125780090de4c6bb7be4757cb5db0e69ad3a60a7b83032bfa4c560995, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a1:2c:ba:24:7e:4c:eb:21:d2:b0:28:6e:00:
                    25:9b:22:c9:9f:f9:b5:bd:1a:28:cf:ee:c2:a6:46:
                    a7:b4:04:fb:90:3d:e8:44:92:3e:e5:df:fb:81:6a:
                    a5:a2:ed:a7:3b:5c:da:c9:20:da:55:1a:ad:de:f6:
                    6f:0b:8d:88:06:56:1f:37:46:8f:22:93:65:77:70:
                    03:15:6d:88:ac:db:18:6e:ea:cb:1e:22:55:ad:92:
                    af:09:ea:53:94:08:69:81:0f:f2:ea:39:e3:ea:90:
                    f2:23:31:0e:26:8b:45:33:69:87:01:c3:ec:0b:f4:
                    92:b1:e1:21:dd:30:07:40:de:cb:46:e0:4d:e5:ed:
                    2a:ad:d4:bb:94:31:60:c9:f6:ab:9b:3e:61:42:b9:
                    fd:cd:da:25:ce:93:37:43:9d:fd:52:cb:fa:5e:a0:
                    e9:54:e9:18:ea:ad:29:88:73:0c:c4:b1:b4:d7:ac:
                    72:77:21:c6:de:ca:c2:83:42:4e:a6:91:6b:24:62:
                    39:f4:ea:3f:15:dc:a2:27:26:a6:01:c0:6c:25:4a:
                    03:7a:9d:9a:b6:70:3f:6d:fe:c9:85:94:98:fb:34:
                    2d:06:7e:72:9d:6f:77:55:31:d1:9c:65:bf:57:ab:
                    13:52:6b:5c:3f:02:a1:22:97:59:2f:78:4a:03:23:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B1:A9:A8:65:D8:AC:66:CB:54:F1:37:E1:23:70:D9:2D:94:66:EC
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d99a456-6c99-48ae-bf3a-149585d61d61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.169.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:37:7f:1a:21:1b:7d:c3:51:b4:6c:55:4b:ae:7b:b6:d2:69:
         e3:3f:5d:aa:c5:62:8b:a9:05:e3:fb:32:b0:82:b6:47:ec:79:
         3b:0b:39:a6:bb:48:5c:0a:bb:39:16:1a:21:27:70:63:28:e8:
         da:3d:98:c1:4d:d7:d4:f3:04:17:fd:d1:f1:d8:b4:f1:92:0d:
         0d:1d:d6:fa:ac:d3:c5:7c:67:af:4a:7b:ae:05:5c:1a:fe:54:
         21:11:85:b5:dd:1c:ab:61:55:25:29:50:f6:51:c4:91:1d:79:
         0c:33:a0:34:3e:d5:6f:e5:a7:a7:e5:98:69:1e:44:ea:7f:ea:
         a2:10:03:d5:05:9e:3f:53:4a:ce:3a:ca:60:7f:e9:17:0c:aa:
         47:c8:24:8b:a0:5e:b3:27:33:75:54:0a:98:a5:6c:41:9d:95:
         b7:5c:22:63:3d:e4:d3:23:92:fc:8a:7a:93:37:51:b3:26:10:
         71:20:37:4a:0d:9b:64:ba:04:2b:64:24:27:4f:59:9d:aa:7b:
         29:a4:65:97:b1:59:2f:b3:df:6c:bf:22:f1:64:ff:60:c6:61:
         f1:9a:8e:2d:df:f2:f0:1a:b2:66:ae:ee:df:79:13:6e:d9:3c:
         2b:fa:b1:fb:0e:82:5d:ad:0f:e7:63:5e:8e:97:ee:3d:b4:7a:
         a2:d5:04:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:35 2025 by rpki-client