Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/232545d3-dcc7-4f04-bb6d-1d3d9c17d37d.roa
File:                     232545d3-dcc7-4f04-bb6d-1d3d9c17d37d.roa (raw, json)
Hash identifier:          sI57inUBR6piuTgXE933F6mbUE7LDzmOi6Iim/1VUjI=
Subject key identifier:   6E:85:7E:76:3F:4C:45:29:7A:CA:CA:3F:94:28:81:3F:2B:51:FE:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       69E4A84C42DB8DDE1786387F2453F145A8FA0539
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/232545d3-dcc7-4f04-bb6d-1d3d9c17d37d.roa
Signing time:             Mon 14 Jul 2025 15:21:39 +0000
ROA not before:           Mon 14 Jul 2025 15:21:39 +0000
ROA not after:            Mon 18 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e4:a8:4c:42:db:8d:de:17:86:38:7f:24:53:f1:45:a8:fa:05:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 14 15:21:39 2025 GMT
            Not After : Aug 18 23:59:59 2025 GMT
        Subject: serialNumber=0ade2263cdbb4f59433754c5b3891f7b05891277bcab72003289f54278f70962, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:49:a7:a7:1a:1f:60:95:f3:d0:8f:da:90:3b:
                    cc:3c:f5:36:38:e3:09:fd:ab:65:cd:a7:03:c0:be:
                    44:e1:f2:6d:f6:0b:00:59:05:59:b2:99:28:3e:cd:
                    11:cc:02:19:b7:bf:17:9e:f2:14:3e:5b:2b:52:d7:
                    63:85:e9:d2:50:8a:d7:da:f5:14:85:b9:73:bc:0c:
                    a9:da:9c:3d:0c:1d:8e:9d:1a:00:19:49:75:3d:20:
                    85:8c:22:04:7b:76:cf:5c:f3:dc:ef:b8:b3:30:0f:
                    b1:3e:64:5b:0f:32:03:f4:d9:4e:79:4b:b6:97:db:
                    a4:e9:e5:37:60:be:4b:13:ee:cb:69:6c:d8:0a:53:
                    8e:51:6a:11:91:8c:97:e7:b3:31:d9:df:cd:a7:1a:
                    e9:f4:4c:79:a2:5b:1a:7d:e4:15:81:6e:80:ba:5c:
                    3d:46:49:94:9a:1c:54:7e:58:85:3e:7e:52:8b:0f:
                    97:d7:a0:17:77:bb:0c:16:5a:f6:ac:b3:5f:b9:3d:
                    84:ee:68:7d:8a:b0:fd:05:34:29:10:b5:aa:a7:21:
                    84:9f:18:4e:d8:e0:64:fe:48:e8:d2:42:6e:9f:2c:
                    53:9f:90:ca:80:d8:ca:c8:db:2e:69:36:ff:36:96:
                    61:01:69:08:6e:83:cf:83:35:23:d1:b5:a0:13:00:
                    e5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:85:7E:76:3F:4C:45:29:7A:CA:CA:3F:94:28:81:3F:2B:51:FE:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/232545d3-dcc7-4f04-bb6d-1d3d9c17d37d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:0a:f6:2a:b7:8e:bb:d6:fb:71:9e:ec:b7:9f:36:0a:86:14:
         b6:3e:25:59:d0:02:fc:4f:31:7c:1b:c7:97:f0:f5:0d:27:ce:
         57:e0:6d:58:3e:a0:a3:c3:23:31:75:0f:9b:3e:e2:b3:62:98:
         a8:d2:19:07:0e:ff:5a:56:fa:8a:26:07:4d:17:eb:ac:3c:11:
         9d:7f:33:06:5c:65:30:12:f2:92:ef:43:ce:bf:21:50:0b:78:
         41:4c:5e:86:ed:23:51:87:34:94:b1:21:64:2c:f1:e9:64:9e:
         64:41:65:e8:4a:42:c5:11:aa:13:4c:d4:02:a1:b5:ae:c0:b4:
         8e:da:75:5b:d3:f8:6f:2b:94:da:70:67:44:9a:9c:2c:d9:57:
         1c:47:61:c6:ed:ce:b2:12:6c:0b:d1:39:a9:2a:cf:74:96:da:
         02:92:d8:4c:2c:11:f9:5d:7c:a4:f1:64:fc:6e:2b:38:d6:25:
         d0:0f:29:af:4e:6a:61:9a:10:f3:69:3b:11:9e:65:f2:f4:85:
         db:ec:cb:03:df:7d:e0:3e:e9:58:c4:38:ef:ea:7f:38:b8:74:
         c9:bf:a9:83:4e:6f:ac:46:b2:c7:fc:0b:e9:d5:ca:7e:d0:ab:
         5e:4d:f1:fd:b8:ad:cb:e6:f5:53:c5:9a:01:5e:53:7a:5c:34:
         29:a4:8d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:19:08 2025 by rpki-client