Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9827ecd3-75ce-449e-9930-c4d237b2e2f2.roa
File:                     9827ecd3-75ce-449e-9930-c4d237b2e2f2.roa (raw, json)
Hash identifier:          U+TaZ9jtmQQP/hK+5NasZf4UN3PDVeN68EWKwAXJZH4=
Subject key identifier:   3A:7C:FB:07:A4:E3:09:0C:CD:07:FF:CB:4A:76:79:0A:9E:BE:37:DA
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       37155D5ED8994AFC0631AAA846D95371B5B5B645
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9827ecd3-75ce-449e-9930-c4d237b2e2f2.roa
Signing time:             Wed 23 Jul 2025 00:30:27 +0000
ROA not before:           Wed 23 Jul 2025 00:30:27 +0000
ROA not after:            Wed 27 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        209.177.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:15:5d:5e:d8:99:4a:fc:06:31:aa:a8:46:d9:53:71:b5:b5:b6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:30:27 2025 GMT
            Not After : Aug 27 23:59:59 2025 GMT
        Subject: serialNumber=c3849e007c97f2c624a4ed280cf0af5f3cdabfe57a0dd4e48cbe3823631ad7e3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:4e:26:bc:b0:ba:24:fc:a2:64:35:ee:37:
                    f6:74:e9:b2:7d:6a:43:e0:a4:65:72:72:e7:5c:20:
                    04:42:77:e8:f8:80:af:e4:ad:4b:89:68:9a:d4:b8:
                    db:4d:7c:55:10:f5:b5:00:2c:69:63:00:6c:09:6c:
                    6b:b3:aa:01:dc:44:d1:45:9a:0f:73:09:fe:a1:19:
                    08:4d:77:2f:03:cd:d9:18:8d:fd:d8:55:bb:33:a2:
                    03:76:ad:43:5c:c7:a9:1d:b8:e0:82:a0:f8:b5:70:
                    18:b0:40:d4:21:6b:e0:5b:e7:76:09:e4:bd:5c:94:
                    cf:27:cb:b7:c7:62:68:5e:0e:08:6b:60:9a:ff:07:
                    fb:cc:72:b7:29:24:69:a0:58:62:02:e7:e2:01:86:
                    1c:73:e1:83:52:8f:86:1a:3d:c2:08:ff:d6:dc:b5:
                    15:ee:4e:6e:0f:c2:0a:a6:c6:75:c8:c7:4a:68:35:
                    f5:00:7e:5b:01:de:2a:8a:09:c6:8b:cc:9f:a6:bc:
                    fa:8e:71:35:2d:cd:b9:73:62:19:fb:92:1b:67:4b:
                    42:4c:09:b5:96:7e:83:37:fc:33:cb:73:5e:88:69:
                    17:95:a7:23:72:7e:85:a0:89:00:55:ac:7d:f4:ab:
                    d5:f2:07:70:0d:42:ba:d4:39:41:e3:ac:c6:01:62:
                    be:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7C:FB:07:A4:E3:09:0C:CD:07:FF:CB:4A:76:79:0A:9E:BE:37:DA
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9827ecd3-75ce-449e-9930-c4d237b2e2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.177.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c5:b8:67:b0:6f:23:ae:2d:a4:56:13:60:65:94:0f:51:b8:d3:
         e2:75:40:cf:68:fe:fd:e8:9b:7d:b9:11:37:c5:00:9c:9e:40:
         d1:0e:77:85:1d:a0:9b:6e:ab:d9:55:84:f1:4f:d9:50:68:6a:
         cb:2b:2f:2a:20:e0:53:35:00:25:14:88:c5:06:7f:18:bf:df:
         db:6b:d3:11:35:23:09:0e:7c:25:09:39:30:29:95:6f:e6:6a:
         98:ce:4d:de:62:29:6d:15:e1:6e:14:30:0b:b3:0a:28:3b:c2:
         94:e0:16:85:b9:08:c1:b6:da:0c:05:9f:c7:40:d3:ad:97:16:
         e8:19:71:de:f7:19:9f:f0:1c:a4:77:bf:97:ce:72:cd:94:2a:
         8a:5b:1a:05:cc:4a:80:b6:3c:f0:58:75:d1:95:09:92:d5:14:
         b9:22:6f:22:4d:fe:b2:37:c2:19:c3:49:0f:8f:0f:52:eb:09:
         68:24:36:27:25:e8:6c:91:ae:07:28:66:b4:9e:88:e0:57:7a:
         f9:f0:28:2a:fe:bf:8c:fb:3d:5c:3d:09:96:da:fe:05:8a:a9:
         5b:ab:70:0f:3e:98:c4:40:15:52:42:bf:ae:79:3c:84:e0:3d:
         4d:28:2a:a1:ce:c2:a5:ae:ab:48:7b:82:85:c4:2e:b9:e5:23:
         12:80:c7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:08:43 2025 by rpki-client