Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa
File:                     a07397dc-3051-482a-957d-ed3a4c2859b6.roa (raw, json)
Hash identifier:          O+qd3OP4ZjMdmeJ6w7/FmIjqFwf7xZ8XLb9z4lTnsN0=
Subject key identifier:   99:81:9E:C8:9F:C1:2B:D2:B2:D7:88:05:45:DD:0E:69:70:EE:50:DE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3515C28D6E34878779115DC084BFDAF7E075BAB5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa
Signing time:             Fri 11 Jul 2025 15:00:16 +0000
ROA not before:           Fri 11 Jul 2025 15:00:16 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        98.80.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:15:c2:8d:6e:34:87:87:79:11:5d:c0:84:bf:da:f7:e0:75:ba:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 11 15:00:16 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=dfc7032bb33397250f724c3de789d0e5a27fa522d3d8ead0e8fe3725465e5c71, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bd:d4:b8:de:7d:b4:fc:d6:7d:a7:f4:bc:dd:
                    ac:3b:c1:8d:9e:ad:8f:da:be:ac:8a:5b:84:18:24:
                    ef:4e:c1:e1:0e:dd:99:0a:71:97:4f:21:fa:9e:10:
                    6c:14:54:01:01:ca:85:d2:83:d4:77:c0:9a:93:ed:
                    52:86:b0:34:bd:d8:9d:72:35:7b:b7:9e:94:f8:a9:
                    72:6b:fa:25:cc:28:72:b4:3d:54:6d:c1:86:b9:8d:
                    31:81:72:3e:fb:ce:0a:ca:2d:26:a7:fb:13:8b:42:
                    7e:c8:65:2c:c9:c7:fa:f9:7b:d1:99:00:82:8e:cd:
                    cf:c6:6a:96:bb:b3:fa:4e:b9:1f:a3:8a:9f:ea:57:
                    1e:37:62:c9:0a:cd:c1:8b:51:ad:d4:fb:a1:f1:b3:
                    fd:80:dd:9e:a7:7f:f9:cd:88:1e:f4:23:5a:d9:69:
                    01:b7:3e:52:dd:83:08:49:21:6b:9c:2a:3f:b1:80:
                    cb:1d:a3:ea:c5:27:de:11:2b:ae:97:7f:73:55:07:
                    00:5c:a0:65:78:0d:45:86:08:f5:3f:9a:89:3c:6d:
                    18:d7:94:79:6b:e2:ad:b8:07:7b:d9:ff:80:e8:35:
                    b1:e7:b3:c5:78:8a:a4:81:d6:8f:a8:de:08:0a:8c:
                    b3:22:78:bb:53:a9:29:a8:f9:10:cb:86:96:1a:93:
                    9e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:81:9E:C8:9F:C1:2B:D2:B2:D7:88:05:45:DD:0E:69:70:EE:50:DE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a07397dc-3051-482a-957d-ed3a4c2859b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.80.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         86:25:7a:3d:86:8a:f7:7d:64:a5:f6:1d:2c:46:99:bd:ea:f4:
         9d:d5:5b:88:a8:14:32:39:a2:c3:b8:75:61:a8:03:c3:52:ff:
         d5:60:5f:a2:8b:00:22:17:6e:81:66:bc:32:7b:ee:93:b3:a7:
         aa:4c:65:5b:63:66:52:2c:50:d6:27:c6:25:2d:eb:5f:f2:fa:
         7a:9f:11:c3:be:2b:54:14:c1:ae:af:b6:6d:57:b8:d7:01:a5:
         e3:f0:b4:12:4d:cf:9b:f5:b0:f9:61:50:c2:89:9e:99:d4:18:
         83:64:12:8d:93:4b:b6:67:52:b8:e2:af:da:ef:35:f3:44:70:
         da:07:11:4a:7e:2e:63:0e:ea:bc:0d:e3:76:9a:86:36:79:f6:
         d1:e1:7a:1e:44:5e:52:37:ef:21:80:4f:3f:a1:20:b0:ef:c5:
         63:93:68:7e:1b:f6:19:49:e8:67:54:8b:c7:fb:ae:34:4f:a7:
         ba:a8:0c:ba:b9:45:43:21:35:65:d0:96:ea:14:1b:8d:59:6e:
         0e:40:e2:d6:f1:9c:20:cb:0b:35:67:4a:c7:cd:62:0e:02:e8:
         ed:89:e6:18:8a:c8:ef:58:da:1b:d2:e0:38:c0:a9:28:67:91:
         92:36:b0:be:c1:dd:48:5e:aa:25:86:01:26:db:02:1c:68:02:
         da:b8:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:55:21 2025 by rpki-client