Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa
File:                     84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa (raw, json)
Hash identifier:          A/9kt1S7EjI+Z9EFd+Yq+mpnfE1LwrtSDE/85bMumdY=
Subject key identifier:   CD:2A:AA:DE:7F:BD:67:72:7E:C3:B6:36:B7:25:14:64:B5:78:DF:17
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       4A84F986A51ADF52E0E19EFA17486E97CA665E9E
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa
Signing time:             Wed 25 Jun 2025 00:00:18 +0000
ROA not before:           Wed 25 Jun 2025 00:00:18 +0000
ROA not after:            Wed 30 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        23.251.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:84:f9:86:a5:1a:df:52:e0:e1:9e:fa:17:48:6e:97:ca:66:5e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Jun 25 00:00:18 2025 GMT
            Not After : Jul 30 23:59:59 2025 GMT
        Subject: serialNumber=fa170212acce22e5ddf17312d0836c49d644bc280a92eead3dccfba49b73200b, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:72:5f:10:ca:f1:b2:ab:37:18:d4:cb:6e:d6:
                    06:95:4e:34:d3:98:3b:91:06:44:9d:31:af:96:23:
                    4c:e1:78:14:6a:bb:95:ab:78:46:aa:15:73:c5:07:
                    65:3d:15:ae:68:1c:fd:e6:c1:af:4a:c9:25:91:de:
                    8d:d9:c1:16:b4:8c:b3:db:b6:24:7d:b7:b3:ed:4d:
                    e5:eb:4f:b6:e1:b7:d0:83:ef:f6:b6:af:aa:ed:d9:
                    c5:e8:b9:af:14:bd:dd:e0:df:4c:78:6d:f3:cc:f1:
                    23:79:3e:be:78:3e:d4:8e:37:45:ad:40:60:8a:fa:
                    bb:7e:22:9d:5f:03:1f:56:55:06:f4:d8:01:82:f9:
                    f6:91:d9:3d:e6:2f:d5:f9:ae:02:95:85:68:73:75:
                    1c:53:7a:07:78:4d:c0:6c:59:8f:9d:19:c6:9f:83:
                    62:35:ee:05:cc:dd:3b:7b:86:dd:85:75:88:5e:cb:
                    91:ee:d6:6c:25:50:eb:dd:4d:3d:25:da:65:18:3e:
                    47:49:88:0c:92:31:59:75:15:7a:4e:7b:3c:24:03:
                    0a:88:1b:24:96:37:3b:50:21:15:e7:b4:14:52:8e:
                    71:fa:46:79:b6:dd:6a:32:b5:c1:e7:ed:49:cf:b3:
                    c4:07:05:8b:47:93:c6:ff:d9:a4:e1:74:6e:69:e4:
                    e2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2A:AA:DE:7F:BD:67:72:7E:C3:B6:36:B7:25:14:64:B5:78:DF:17
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/84c038ae-7a5a-414a-bd00-1edb6fbe5ad7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:5f:df:e0:6d:06:e3:01:ee:11:e5:1a:6f:66:75:12:af:a0:
         c6:b7:df:d4:5d:da:83:28:7d:89:b3:70:a6:04:b2:10:1a:2f:
         cb:01:d0:28:16:fa:dd:ab:e8:c0:49:89:3e:5f:1a:90:a4:29:
         55:e6:0a:f2:b9:d6:5a:cf:ca:07:2d:0c:c4:d4:f9:b5:77:22:
         c9:91:01:ac:95:6d:a6:df:39:67:72:88:35:3d:75:5b:ec:3b:
         f5:c2:e0:24:b2:81:8f:40:37:b7:db:2a:51:ce:9f:36:2b:ae:
         cd:33:97:8c:42:f0:b3:3d:1e:0d:65:4b:5e:51:bb:90:04:d4:
         ee:23:23:20:b4:c7:d7:13:dc:c7:cc:dc:ed:c9:4a:99:e7:f1:
         2e:90:02:c3:bf:eb:23:ab:71:fb:6c:af:a6:dc:fd:b6:c9:8c:
         88:69:ad:7d:d3:6b:39:c6:40:51:99:f8:2a:88:bd:8f:52:76:
         99:b3:26:15:49:7c:f8:dc:92:13:0c:5a:47:a3:9b:9d:bc:33:
         70:ba:47:da:4c:9b:27:4b:74:22:60:ec:d4:78:d0:2e:5a:2a:
         90:ca:97:f1:e4:33:7d:de:d6:ae:e7:ba:54:2b:32:5f:a7:a0:
         f9:7f:47:38:65:52:4b:41:5c:38:50:29:9e:2d:9b:69:3c:64:
         c5:5d:e4:ae
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSoT5hqUa31Lg4Z76F0hul8pmXp4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjUwNjI1MDAwMDE4WhcNMjUwNzMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmYTE3MDIxMmFjY2UyMmU1ZGRmMTczMTJkMDgzNmM0OWQ2
NDRiYzI4MGE5MmVlYWQzZGNjZmJhNDliNzMyMDBiMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWcl8QyvGyqzcY1Mtu1gaVTjTTmDuRBkSdMa+WI0zheBRq
u5WreEaqFXPFB2U9Fa5oHP3mwa9KySWR3o3ZwRa0jLPbtiR9t7PtTeXrT7bht9CD
7/a2r6rt2cXoua8Uvd3g30x4bfPM8SN5Pr54PtSON0WtQGCK+rt+Ip1fAx9WVQb0
2AGC+faR2T3mL9X5rgKVhWhzdRxTegd4TcBsWY+dGcafg2I17gXM3Tt7ht2FdYhe
y5Hu1mwlUOvdTT0l2mUYPkdJiAySMVl1FXpOezwkAwqIGySWNztQIRXntBRSjnH6
Rnm23WoytcHn7UnPs8QHBYtHk8b/2aThdG5p5OKlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzSqq3n+9Z3J+w7Y2tyUUZLV43xcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzg0YzAzOGFlLTdhNWEtNDE0YS1iZDAwLTFlZGI2ZmJlNWFkNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAX++owDQYJKoZIhvcNAQELBQADggEBAHRf3+BtBuMB7hHlGm9mdRKvoMa3
39Rd2oMofYmzcKYEshAaL8sB0CgW+t2r6MBJiT5fGpCkKVXmCvK51lrPygctDMTU
+bV3IsmRAayVbabfOWdyiDU9dVvsO/XC4CSygY9AN7fbKlHOnzYrrs0zl4xC8LM9
Hg1lS15Ru5AE1O4jIyC0x9cT3MfM3O3JSpnn8S6QAsO/6yOrcftsr6bc/bbJjIhp
rX3TaznGQFGZ+CqIvY9SdpmzJhVJfPjckhMMWkejm528M3C6R9pMmydLdCJg7NR4
0C5aKpDKl/HkM33e1q7nulQrMl+noPl/RzhlUktBXDhQKZ4tm2k8ZMVd5K4=
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:46:41 2025 by rpki-client