Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa
File:                     eaef83ec-c27a-4971-921b-164f8f284067.roa (raw, json)
Hash identifier:          EQnFKlXEmNmhEmUuwT0XHPnXQdWNLLGv8ar2TpapwAw=
Subject key identifier:   26:2E:06:F8:CE:41:CA:D5:82:BB:BF:30:18:4E:1E:CD:33:6A:4A:97
Certificate issuer:       /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial:       4943D4909451ACB93440E8DA241E698B00D4D357
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa
Signing time:             Tue 21 Jul 2026 00:20:03 +0000
ROA not before:           Tue 21 Jul 2026 00:20:03 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        76.223.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:43:d4:90:94:51:ac:b9:34:40:e8:da:24:1e:69:8b:00:d4:d3:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
        Validity
            Not Before: Jul 21 00:20:03 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=f0dd04ddfd4cbadaf046647500e691dc5d06ecf314527df1fd8b82aefcbfa442, CN=42519eb9-9579-4979-bdaf-164abd0e290e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:e1:86:c0:40:a0:f9:15:52:a6:a3:54:c8:
                    62:f0:63:81:de:54:2d:c1:85:e7:3a:1c:7a:05:84:
                    57:00:26:e5:5d:ed:e5:d6:ec:33:cc:b3:b8:0a:2a:
                    ae:bb:e4:68:e2:5a:4d:b9:6a:b9:9f:96:70:7f:6f:
                    b0:38:17:f4:01:6c:df:f2:8c:6b:fc:b0:34:ec:4b:
                    66:d5:26:bf:ff:b4:12:a4:a7:ee:3a:01:57:f0:13:
                    f4:cb:58:a4:40:90:77:f6:cc:42:f8:40:e0:6d:b0:
                    fd:6d:ce:0d:0e:cc:2d:ba:30:7d:94:51:46:f0:a3:
                    07:8c:4c:9c:2c:d2:30:54:08:79:36:51:43:52:a4:
                    d2:17:7c:06:eb:1e:9d:fc:eb:e6:4f:b5:c1:57:50:
                    d2:f6:a4:ff:69:f1:03:32:f4:f3:97:77:43:e0:ce:
                    35:02:81:ce:80:3b:d8:03:86:9d:0a:ab:ab:d7:d5:
                    a3:37:3e:56:73:12:9c:05:c2:88:c5:cc:be:34:23:
                    3e:72:ec:2c:af:3d:89:59:02:b0:df:55:31:58:fb:
                    89:94:fe:a0:16:0b:fb:9c:64:81:c5:02:14:38:c7:
                    b1:aa:71:66:10:81:fe:f6:02:85:21:b3:e8:4a:46:
                    b3:84:3a:6d:e9:57:6d:df:fb:9b:e1:bd:39:f5:78:
                    4c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2E:06:F8:CE:41:CA:D5:82:BB:BF:30:18:4E:1E:CD:33:6A:4A:97
            X509v3 Authority Key Identifier:
                keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.223.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:06:c3:dc:5a:83:fe:04:16:77:61:63:08:37:7a:f3:45:11:
         d5:61:dd:c8:e0:2f:02:d7:2f:1b:9d:f3:11:4f:a5:7c:3c:a9:
         2e:fe:f3:2e:b4:10:4b:dc:c4:ff:d2:96:55:f4:e5:b9:ad:13:
         9d:ce:0c:9f:46:b1:3a:ef:b9:fe:f2:0a:33:2b:03:6c:5f:86:
         b4:2a:4d:c6:18:44:ed:02:31:df:92:bb:80:3a:4d:52:92:9a:
         47:19:42:af:e6:10:20:1a:fe:c0:60:e4:73:cd:f4:79:2b:bb:
         01:bd:9d:0c:f0:cd:e4:a5:59:a0:a7:8e:24:4c:0b:eb:ca:f3:
         8e:ce:03:b5:36:08:d5:3c:28:f3:81:8a:fb:28:ed:c8:35:42:
         51:1a:3d:b4:b3:f6:5e:90:e9:a4:19:96:65:70:cd:3b:29:32:
         81:68:a5:84:2f:b6:e0:8e:1c:91:00:7f:26:65:67:8c:ec:57:
         fc:6c:e9:d5:49:7e:b2:b0:2b:0e:7a:1c:16:e0:19:76:d0:ed:
         70:26:1d:1e:6c:ab:03:94:0b:8b:fd:6e:22:03:b2:bc:ec:27:
         22:32:64:8f:ce:64:73:24:ac:fb:3a:72:cc:ec:d3:ca:27:c8:
         12:a1:d9:61:11:ad:ef:e4:5e:ad:5c:49:04:3e:7a:d3:2a:3d:
         0f:f3:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:26:45 2026 by rpki-client