Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa
File:                     6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa (raw, json)
Hash identifier:          cNQcSS7jt0mcg0uHp2DtY0xLX1ObA3fZZZOF3XT9w3c=
Subject key identifier:   8E:83:1B:52:04:F8:6D:8D:C5:41:F1:41:F5:F4:B5:88:3B:DF:FD:80
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       0C492C41210CE8D3A2D56AC31880CE8B5D8DA1F6
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa
Signing time:             Fri 03 Oct 2025 00:00:12 +0000
ROA not before:           Fri 03 Oct 2025 00:00:12 +0000
ROA not after:            Fri 07 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        206.55.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:49:2c:41:21:0c:e8:d3:a2:d5:6a:c3:18:80:ce:8b:5d:8d:a1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Oct  3 00:00:12 2025 GMT
            Not After : Nov  7 23:59:59 2025 GMT
        Subject: serialNumber=7231bfb0aca486289eae219a43f9270bce0c35dc97edd98762512157f903f004, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:3f:41:07:63:9f:68:56:23:e4:95:86:27:
                    57:c1:2d:b3:7f:55:7a:9d:f4:14:2e:28:da:0a:de:
                    0e:bc:bf:7b:a4:b3:1c:f3:32:84:b2:9c:38:9c:1a:
                    98:48:17:80:ec:bf:17:80:ed:fa:f6:d2:36:d8:92:
                    a8:10:d9:24:98:82:fd:af:5f:d5:1f:16:60:08:f6:
                    c2:d1:76:08:69:fd:29:2c:32:81:44:49:cf:80:71:
                    7d:39:9b:8a:1d:14:02:8a:d0:9f:ce:32:06:45:e8:
                    f0:b6:64:ba:d2:6b:e9:79:03:21:02:c0:f6:f7:40:
                    bd:b9:ad:08:6c:44:63:b5:da:a2:33:c5:65:eb:d1:
                    f1:77:4e:7a:96:f0:90:e3:b1:96:7a:32:5d:46:25:
                    80:da:5b:01:69:17:59:be:f2:30:4d:d1:23:7c:5b:
                    85:ca:d4:c2:b9:76:41:a8:c2:5b:6b:32:79:b7:08:
                    43:cc:a4:17:86:fd:45:d6:df:1b:cb:e4:b4:07:2a:
                    09:4f:87:c1:90:bf:34:9d:c8:c7:2f:ca:d1:e4:8d:
                    a2:81:5c:88:de:14:d7:e1:d8:3c:0a:85:41:6d:e0:
                    c2:7d:2b:e9:c2:a6:bd:1a:c2:50:33:15:40:45:17:
                    74:dd:1c:02:65:97:1d:a3:fd:b7:fe:c0:23:66:63:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:83:1B:52:04:F8:6D:8D:C5:41:F1:41:F5:F4:B5:88:3B:DF:FD:80
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/6eb90d9f-fb7c-48bd-97a4-5eb04925c17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:6a:ab:be:7c:64:a7:05:f0:8e:ad:38:c0:10:fc:d8:df:77:
         a7:35:98:1e:b5:51:64:1c:ad:24:72:88:63:91:89:0c:6b:4d:
         0e:16:16:5c:2e:12:d1:ec:fb:95:f1:b4:42:00:eb:0e:7b:f2:
         aa:9e:bc:a7:c8:eb:fc:04:8c:fa:01:7d:ec:99:fc:86:5b:0d:
         70:9e:e2:29:be:3f:93:39:70:6a:0b:e3:16:7f:34:3d:3e:79:
         b2:ad:34:31:f3:14:66:27:24:7f:43:f7:0f:8c:85:e5:2f:b5:
         39:dd:99:0d:ff:3e:2f:0e:10:32:3e:e9:92:9f:5e:a6:0a:79:
         12:d2:c0:b5:ce:0b:4a:3c:c1:26:82:33:7d:b3:62:1d:18:06:
         48:5e:a4:3b:30:8b:af:7d:51:10:79:5d:4c:8e:ca:0b:1c:cd:
         03:c6:16:b5:d7:e3:ca:62:c9:17:71:98:ab:75:25:2d:c7:e4:
         3e:49:5d:0b:25:8a:2c:95:b0:42:1b:22:82:81:48:48:f3:dd:
         ee:51:2b:46:1d:7d:fb:f1:d5:41:c2:fb:0f:d5:63:bb:f3:a3:
         8b:23:a4:93:b5:e3:ca:b1:1b:8a:82:83:2a:22:22:23:cd:d3:
         f6:65:2d:e0:f9:24:a7:0d:28:bf:5f:55:92:d8:f3:14:e9:93:
         c6:16:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:03:43 2025 by rpki-client