Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7dfeb30-5869-41ac-b07f-d4e9aaa9f20b.roa
File:                     d7dfeb30-5869-41ac-b07f-d4e9aaa9f20b.roa (raw, json)
Hash identifier:          Mdgmo46SOjFNZSHsxdQw5vjKN0Npt1MaPBMQ6gh8uTI=
Subject key identifier:   70:09:F8:D9:D2:02:BD:32:5C:18:E7:05:FE:28:6C:22:AD:01:C4:2C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       09E5DCFBA907AA4ED146391B21D6271C5E263DB2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7dfeb30-5869-41ac-b07f-d4e9aaa9f20b.roa
Signing time:             Fri 18 Jul 2025 00:50:13 +0000
ROA not before:           Fri 18 Jul 2025 00:50:13 +0000
ROA not after:            Fri 22 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e5:dc:fb:a9:07:aa:4e:d1:46:39:1b:21:d6:27:1c:5e:26:3d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 18 00:50:13 2025 GMT
            Not After : Aug 22 23:59:59 2025 GMT
        Subject: serialNumber=bd755c846993e405b9d4088ae0afd05a37904d6f88cd1747b0b6f0fe0c707b43, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:9d:67:6f:1c:4d:0a:01:1a:d9:8e:7e:d4:
                    de:b8:11:97:70:1b:38:c1:c6:42:7d:ac:5c:10:00:
                    81:0b:47:3f:d3:0f:db:bf:4e:34:80:85:82:1d:77:
                    19:04:be:be:0f:08:b1:6e:90:c6:dc:c1:45:57:82:
                    96:d5:ce:07:13:60:d5:a0:5e:ff:18:f8:46:9a:19:
                    63:74:d7:c9:48:90:3e:b1:bd:79:d2:a0:a5:93:a9:
                    8f:03:cd:5b:7c:20:0a:cf:66:90:1f:85:0b:ab:a3:
                    eb:cb:20:e5:58:fd:0b:52:d6:22:1d:2a:8e:6d:be:
                    4f:50:71:e5:b6:b6:ee:08:54:a5:73:bb:fe:de:39:
                    f7:0a:ec:86:91:4e:33:15:27:52:22:d4:73:36:fa:
                    9e:fc:55:59:a7:70:0c:8e:9b:b8:99:ed:a0:2d:96:
                    7a:d1:65:c7:38:7c:42:bc:22:3a:43:d1:d6:80:d0:
                    db:26:1b:cd:3a:ef:ab:5d:5f:62:d2:de:ba:22:16:
                    61:d3:ee:a5:49:b3:86:77:4b:6a:bd:89:e4:e9:61:
                    73:60:fd:b0:1c:b3:3d:40:2c:fb:98:4a:75:f7:70:
                    65:fb:7f:6c:b1:ad:c0:e4:a2:0c:8b:63:0f:51:92:
                    e3:ba:ed:36:9c:b6:f0:34:da:fe:cb:09:1f:f3:a9:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:09:F8:D9:D2:02:BD:32:5C:18:E7:05:FE:28:6C:22:AD:01:C4:2C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7dfeb30-5869-41ac-b07f-d4e9aaa9f20b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a1:8c:e0:2f:77:52:a8:7c:21:64:42:0a:be:60:54:c7:d0:
         f1:de:e2:62:d8:1c:14:aa:01:92:b6:88:d8:fb:21:9e:54:f8:
         1e:34:bb:4d:9e:12:cb:2f:a7:14:49:01:c8:c2:75:a5:5b:b8:
         85:ff:52:f8:88:ce:78:8f:2d:6a:d1:f1:c2:8e:b4:0c:38:76:
         2e:ca:d5:34:ce:16:27:99:c0:61:88:e8:04:6a:7d:7d:8f:fe:
         2c:7f:3a:90:0c:bd:da:77:3a:76:48:fe:fe:68:22:60:43:d1:
         ba:bf:c6:42:70:ed:13:49:cf:9c:98:bb:ca:80:57:0b:b9:61:
         0e:4d:81:ad:95:dd:b1:43:db:89:8f:94:18:fb:95:5a:dd:b0:
         53:2a:db:21:20:f7:e4:cd:40:97:9a:6a:21:d8:ec:98:f4:97:
         14:91:ca:e2:5d:79:60:e4:f3:33:3a:f1:7d:0d:e6:da:01:37:
         a9:29:18:c5:aa:6a:04:c0:8c:eb:bb:54:07:6f:e3:d8:00:1d:
         c3:7d:b4:7b:6b:0e:2d:66:f4:14:d1:67:c9:b6:65:93:20:5b:
         4b:08:1a:c6:6d:54:0b:ab:25:1c:86:03:d6:66:97:b2:bd:f7:
         0e:fa:05:90:68:63:e8:27:cd:96:68:8f:63:99:a1:3c:bc:eb:
         f0:9b:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:09:57 2025 by rpki-client