Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e41ada77-fa4f-4da3-a532-14382438f575.roa
File:                     e41ada77-fa4f-4da3-a532-14382438f575.roa (raw, json)
Hash identifier:          /Ir57yaAtywCuRAmdIazKQVV7kLuefaDmJt1U2SuDSA=
Subject key identifier:   14:BB:8C:2E:5E:C1:03:8B:B2:62:89:A4:89:0E:6C:E5:7F:38:82:FF
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       109B15AB84045DF788BCB25C6B1CADEB9B2CF0ED
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e41ada77-fa4f-4da3-a532-14382438f575.roa
Signing time:             Sat 04 Oct 2025 00:20:05 +0000
ROA not before:           Sat 04 Oct 2025 00:20:05 +0000
ROA not after:            Sat 08 Nov 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        76.223.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9b:15:ab:84:04:5d:f7:88:bc:b2:5c:6b:1c:ad:eb:9b:2c:f0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Oct  4 00:20:05 2025 GMT
            Not After : Nov  8 23:59:59 2025 GMT
        Subject: serialNumber=4ca12f4d1e5f55f05273d249c54cffa95a819d4f24eaecb18b85ca7d51d848c6, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:70:75:d0:6e:9d:91:02:31:86:fb:6f:20:
                    02:4c:f4:39:89:dc:68:a2:6b:63:ae:5a:87:e4:a1:
                    be:30:4f:80:83:88:d5:34:18:19:77:a5:7d:73:07:
                    12:86:d5:c2:d6:2f:01:2a:68:e4:89:87:93:e1:86:
                    1b:8b:57:78:61:14:bd:b4:57:f8:5c:fb:7c:42:29:
                    72:23:f9:4f:6b:3c:4c:01:d5:8f:60:c6:f2:05:81:
                    8d:d5:0e:52:30:73:43:43:8d:0d:15:ee:09:92:99:
                    f7:37:ed:72:36:6a:d8:c7:d4:02:cf:09:07:ae:24:
                    64:cb:43:61:41:90:f1:84:d0:06:4b:76:f0:4b:02:
                    dd:50:da:75:34:85:f8:16:ab:cb:09:90:b9:e6:0a:
                    dd:05:bb:01:1e:5e:c4:ba:e0:0a:9f:a6:34:4d:66:
                    f2:30:30:7a:4a:c1:1b:bf:68:0f:97:25:05:d5:86:
                    0a:70:7a:80:90:ad:55:3a:1a:96:29:a4:ee:5f:0d:
                    16:31:8d:30:5b:44:18:10:0c:cb:78:2c:a8:ae:2a:
                    65:6c:83:b6:b0:60:ce:1f:30:4a:4a:1e:e3:b5:37:
                    eb:a7:fa:ba:a1:29:ad:b8:51:29:dc:20:6c:59:02:
                    57:48:8f:eb:fa:11:41:05:58:45:bd:be:57:d1:7a:
                    78:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BB:8C:2E:5E:C1:03:8B:B2:62:89:A4:89:0E:6C:E5:7F:38:82:FF
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e41ada77-fa4f-4da3-a532-14382438f575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:cd:f3:68:17:f7:f3:89:24:bf:3a:b9:1c:51:e3:b5:48:e2:
         93:2d:78:20:92:85:ef:00:a9:40:86:3a:79:18:2d:ce:8f:19:
         67:5b:24:25:18:9d:6b:ff:64:51:0a:57:87:26:9f:9d:5f:20:
         b8:b2:f0:d2:22:56:14:7b:09:ea:db:0c:37:2a:3a:9d:75:a9:
         81:ce:0f:5d:ec:3a:45:1d:9a:a5:db:a9:e6:c6:3c:ba:e8:d9:
         15:7c:9b:7e:09:61:e9:42:cf:2c:6b:49:9b:ae:ca:58:1b:fa:
         c4:84:47:0e:59:eb:eb:7c:0d:3a:5e:03:da:63:dd:84:8e:c9:
         41:06:12:d4:e9:2a:ee:83:69:b8:6f:8c:be:9a:fd:c0:2a:4e:
         df:a3:56:02:b0:a4:f8:45:ed:76:9e:1c:05:88:79:c5:9f:f7:
         f5:c2:ae:77:86:f5:f4:29:01:a3:10:c7:f5:f9:c3:44:ff:5f:
         b2:0c:42:12:33:95:6a:c6:7b:5a:8b:4e:a6:2b:23:c6:aa:db:
         da:a6:f4:42:c0:07:bd:37:fc:6a:da:03:ac:e7:8e:e5:16:ef:
         db:86:2e:4e:09:e6:12:e3:0b:b7:db:ca:df:60:bb:63:e1:75:
         f2:73:06:3a:bd:a5:e4:28:02:b7:52:0e:c7:98:33:91:14:9e:
         13:aa:ca:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:11 2025 by rpki-client