Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5a85156-56d9-44fe-b845-5494537aa440.roa
File:                     b5a85156-56d9-44fe-b845-5494537aa440.roa (raw, json)
Hash identifier:          RQ5yQ6dZ4yFYpcI729D1rmNYvQPpEVJA0QuRSxdHwdM=
Subject key identifier:   C9:4D:EB:20:30:E0:AF:1D:25:71:8F:FD:B8:60:FD:DE:11:3B:14:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       61A8F8E88DA046D292B83481EC0B2CC58572D7B9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5a85156-56d9-44fe-b845-5494537aa440.roa
Signing time:             Fri 18 Jul 2025 00:50:10 +0000
ROA not before:           Fri 18 Jul 2025 00:50:10 +0000
ROA not after:            Fri 22 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a8:f8:e8:8d:a0:46:d2:92:b8:34:81:ec:0b:2c:c5:85:72:d7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:50:10 2025 GMT
            Not After : Aug 22 23:59:59 2025 GMT
        Subject: serialNumber=0b2b30f9b56b85d338854225271e54b1c1aa8e1b9cda1405da62c5eb27b5d60a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:ad:e8:78:a2:b0:a4:f0:59:b0:10:89:73:
                    6e:cd:b4:9c:59:8f:56:35:16:cc:f6:72:38:5f:a9:
                    48:54:d3:9d:28:e0:8e:25:cb:3d:0b:19:bf:c7:43:
                    b8:16:5a:5a:60:d6:be:1e:17:a7:fc:b5:f7:d7:48:
                    e0:82:82:c7:cb:34:42:18:53:22:a9:79:6e:cd:e8:
                    60:fd:e2:c1:e4:ae:19:25:8b:1c:48:d7:07:49:96:
                    cc:5a:eb:e5:e5:79:d9:d3:af:b4:34:58:af:01:b2:
                    62:e7:2d:d6:79:d0:8f:9f:5b:58:b8:45:d2:c6:da:
                    72:54:67:74:d5:e1:63:85:68:71:b8:33:7c:da:5c:
                    74:b6:cc:2f:9f:ba:86:e6:6e:05:ef:10:df:13:fe:
                    da:76:b4:1a:79:12:21:92:80:53:fe:f2:02:c8:1c:
                    40:a8:f1:de:f9:2b:73:01:66:07:3f:5f:95:64:86:
                    95:b7:b5:36:07:de:aa:44:2f:00:a9:e5:7f:ce:5a:
                    a0:9b:8f:0a:5d:de:b1:34:c4:5c:ae:b2:d7:57:4c:
                    95:73:c1:9c:ab:fd:9c:02:77:2d:15:3e:c8:a9:9c:
                    c0:b4:44:36:ed:10:61:98:8b:1a:72:78:a5:c5:02:
                    2f:6b:d6:61:7f:e4:05:84:bd:8a:4d:72:96:30:07:
                    f8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4D:EB:20:30:E0:AF:1D:25:71:8F:FD:B8:60:FD:DE:11:3B:14:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5a85156-56d9-44fe-b845-5494537aa440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:df:e1:ee:36:c0:af:62:d0:88:29:60:19:6a:79:7e:67:1d:
         20:95:8f:9f:71:de:93:ea:b9:c9:d0:42:f8:e9:1f:a9:75:18:
         56:d4:1b:66:c3:fc:7c:54:07:27:24:6f:12:c2:e6:55:1b:7f:
         0f:13:3b:67:95:86:6e:22:de:a8:00:c4:ee:97:d3:67:df:3a:
         53:49:93:9b:be:2a:52:cb:21:36:bc:cc:c4:f0:97:d9:21:10:
         50:06:0f:53:3a:54:e5:f9:bc:70:cb:04:49:61:99:ba:d1:28:
         39:ce:f9:69:5a:a2:23:17:54:e8:65:46:6d:8f:93:06:2f:5c:
         16:08:f5:52:ae:c2:73:d3:63:f3:7b:ae:86:72:c9:40:bb:5c:
         9c:1d:af:a5:00:b3:60:12:22:48:af:f3:1c:72:78:5e:6f:7c:
         8a:0c:6a:c1:37:b3:77:2e:2c:95:10:45:23:1a:bc:7f:a3:d9:
         12:d4:6c:da:d5:bc:d8:72:9c:14:70:30:68:32:95:bd:5c:0f:
         20:eb:35:3e:dd:0e:db:9e:6f:91:6b:50:45:5f:0a:49:60:1d:
         83:ef:9a:08:d8:8a:23:31:fc:5e:d0:d4:ec:fd:9e:52:95:00:
         88:43:c7:03:2e:07:c9:24:b0:44:8e:59:ba:1e:3e:9d:60:6e:
         fe:c8:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:56:51 2025 by rpki-client