Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b48ef918-19ab-4cd1-9fbc-53cd849775c3.roa
File:                     b48ef918-19ab-4cd1-9fbc-53cd849775c3.roa (raw, json)
Hash identifier:          fuZktomqU+uVSEN2eVZ4QAcczE35q3DQmhEpyTuvd7g=
Subject key identifier:   B6:09:7C:89:AB:D0:C1:F3:A5:EB:9A:9E:20:C2:61:42:98:EF:BA:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6F11B3D11A956741788B5B66FCAD93992187E76C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b48ef918-19ab-4cd1-9fbc-53cd849775c3.roa
Signing time:             Fri 25 Jul 2025 00:31:49 +0000
ROA not before:           Fri 25 Jul 2025 00:31:49 +0000
ROA not after:            Fri 29 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:11:b3:d1:1a:95:67:41:78:8b:5b:66:fc:ad:93:99:21:87:e7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:31:49 2025 GMT
            Not After : Aug 29 23:59:59 2025 GMT
        Subject: serialNumber=2582ffdf050e01983ce46c0485b045b71623460306b4e106974655b8ac9cbb90, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:b1:fc:a2:73:66:ad:be:88:52:1f:cc:63:
                    ee:ea:34:e2:8b:b2:42:66:57:a9:98:a0:5e:3c:ce:
                    8b:82:aa:28:ec:c2:60:37:e1:71:ca:59:f0:06:d4:
                    4e:ac:eb:56:0c:51:14:d3:ac:c9:7f:cb:52:de:8c:
                    39:94:b4:96:74:9b:bf:d4:19:a2:90:ae:c6:7b:b0:
                    eb:68:3c:b3:81:13:4a:40:4b:36:4a:51:b4:e6:1c:
                    06:91:b0:21:ac:b5:62:eb:d7:7d:72:60:17:0c:14:
                    c6:76:5e:9c:03:a1:da:2a:bd:be:d7:6f:13:37:2c:
                    0b:18:ef:02:a8:14:08:8b:72:8f:b7:ab:0a:b8:66:
                    18:d2:11:56:cb:4d:5d:31:a3:f5:05:29:f7:79:f3:
                    b9:17:a8:ad:a5:2c:5f:91:94:10:df:59:87:a2:31:
                    d1:2b:d1:c3:5c:7f:40:db:f7:e4:dd:17:20:71:70:
                    ae:1d:98:63:98:b2:c8:6f:57:0e:8e:50:c9:4e:f9:
                    17:e4:07:7d:9a:b4:7f:da:02:74:a8:37:71:ad:67:
                    4a:bd:db:6c:8e:21:b8:1c:be:4e:08:43:7b:a6:fe:
                    63:28:27:c7:a0:b9:78:df:9a:81:5f:8a:c7:51:51:
                    d5:2a:42:4a:72:c2:b5:0b:2a:75:2d:4f:f0:4a:e5:
                    35:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:09:7C:89:AB:D0:C1:F3:A5:EB:9A:9E:20:C2:61:42:98:EF:BA:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b48ef918-19ab-4cd1-9fbc-53cd849775c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:f7:80:ca:d4:4d:cb:ee:71:5e:3a:f6:4c:26:4f:a5:09:
         5e:7a:ff:f7:55:e0:b5:cb:83:f6:44:8d:24:69:68:f2:be:19:
         70:be:63:d5:11:59:66:5e:05:f6:34:17:f2:c6:6b:68:6f:56:
         30:ec:2c:19:7e:97:46:62:ac:07:ca:ff:d9:a4:fc:2c:8b:d6:
         bc:e8:ba:e9:a3:5d:26:a2:e3:60:c9:6d:28:cb:ee:18:32:e3:
         e4:dc:bb:d2:06:7b:b4:89:f4:91:85:0a:69:6e:b7:c2:e1:bb:
         4c:16:08:99:73:d7:88:b2:6d:17:03:4a:ca:4f:38:eb:69:4a:
         8d:28:28:a6:0f:11:19:c3:f8:5e:ad:21:a4:ff:7c:14:27:cf:
         1f:78:f8:2d:e3:97:79:66:d5:da:3f:ab:cc:f2:e4:f6:77:05:
         28:9c:11:0a:62:6d:8e:14:28:56:38:1b:19:27:8c:25:07:0d:
         70:48:1b:a1:7f:d1:67:94:5a:a6:a1:81:9d:26:f0:75:c7:e2:
         09:23:67:08:f6:27:4d:59:9e:6b:ec:da:cd:4b:00:36:c9:63:
         b1:2f:a5:83:ba:1d:68:c2:bf:05:04:a9:76:be:37:b1:49:d5:
         4a:80:43:18:dd:a6:e5:2d:ed:6f:00:24:83:f4:43:40:df:1a:
         e2:c8:ff:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 05:23:07 2025 by rpki-client