Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa
File:                     1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa (raw, json)
Hash identifier:          ZUVXAeiVH9aOH+v8p+RTX/CEQuYOGbc1U6XWowt9h04=
Subject key identifier:   FC:50:BA:0C:80:72:45:F6:F9:2D:82:AF:51:5B:F5:46:95:4C:4E:2E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       0FC07C78DF498CB689249621EDE12FCA96CA7C5C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa
Signing time:             Wed 13 Aug 2025 00:51:04 +0000
ROA not before:           Wed 13 Aug 2025 00:51:04 +0000
ROA not after:            Wed 17 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c0:7c:78:df:49:8c:b6:89:24:96:21:ed:e1:2f:ca:96:ca:7c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 13 00:51:04 2025 GMT
            Not After : Sep 17 23:59:59 2025 GMT
        Subject: serialNumber=cc039b592cabfc0d27c109809d1e76cbdaf0dc37cd7eeda9a754587981c692e6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:81:4d:5a:d2:db:a5:84:6e:3a:d9:0d:d4:e2:
                    b9:f9:fc:0b:90:6d:b7:a4:97:d0:ad:74:e9:4a:be:
                    56:af:f6:6c:e1:ba:7e:a9:ea:47:05:0a:45:a8:8e:
                    67:b2:14:bd:70:cd:d9:8f:1b:63:ac:61:1d:9c:2a:
                    0e:4f:bd:5f:24:e4:23:50:11:c7:4c:76:67:9a:5b:
                    49:2b:d9:e4:b3:55:b4:e8:cd:64:b8:ed:36:ec:fc:
                    30:7c:04:33:a2:bc:6c:74:0a:a0:65:45:79:b6:c7:
                    62:27:0c:33:21:89:8a:f4:32:6c:ba:53:60:9b:c3:
                    bc:27:69:9d:84:10:71:ce:4d:a2:4d:8a:0b:7a:b2:
                    48:3b:ae:de:68:54:8b:0c:a2:6c:30:16:ae:27:b0:
                    63:ec:79:20:50:f2:94:5a:4d:88:62:21:5b:a0:bd:
                    ac:dd:23:1f:38:82:cd:2e:1e:cc:ca:39:c8:9f:4d:
                    01:91:a5:a6:90:04:af:f9:9c:6d:6e:98:06:74:78:
                    e5:89:50:16:53:8c:f9:6a:ee:40:10:a1:ad:55:d0:
                    de:dd:20:1c:17:54:4c:5b:7e:0e:94:39:ca:be:ea:
                    77:c2:47:ef:47:19:56:64:1a:43:ef:77:83:a4:f8:
                    f7:8d:4d:09:5e:9d:37:ec:ff:f1:83:25:cd:93:40:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:50:BA:0C:80:72:45:F6:F9:2D:82:AF:51:5B:F5:46:95:4C:4E:2E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b441a4c-67d7-45c3-bf76-426c89ac2cc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:7a:71:ed:01:b6:71:0e:7b:37:3f:a5:59:ac:23:28:b1:c0:
         61:de:da:9c:ff:05:75:14:ee:3e:3b:c6:55:3c:ab:84:9f:0a:
         8d:dc:b0:9a:e6:33:07:82:83:d3:b4:49:15:68:60:71:08:05:
         9e:9c:87:0d:a8:f1:37:ce:76:ec:a7:8e:ba:aa:fb:9f:05:f2:
         98:6b:09:40:61:0a:60:59:8f:ac:db:64:ed:0c:1e:8a:88:dc:
         6c:22:96:86:c6:b8:15:43:51:f4:0b:0b:e5:c3:58:7b:18:ef:
         ee:3f:13:88:64:f8:7c:24:e1:98:4a:f3:81:6b:04:aa:ca:cc:
         28:b6:a7:f5:ce:61:d2:fd:4f:14:dd:76:aa:d7:4e:82:a3:55:
         66:ef:e8:a1:94:0c:3b:a3:b6:2e:28:7c:1a:3f:9e:59:e3:dd:
         0f:a1:93:ea:b4:b3:49:63:1d:2a:51:2d:9b:d8:c5:a2:bb:b3:
         64:96:e2:9b:cb:33:94:eb:b2:4f:b5:6b:f6:77:90:f6:fb:5e:
         ef:50:f1:5c:ab:98:7e:ea:ce:44:02:e4:b9:93:a9:82:71:5b:
         e5:ab:18:a7:e5:51:3d:5d:44:61:fd:df:30:9e:04:e5:ca:a7:
         14:56:e5:05:4d:6a:79:30:2d:99:c5:28:ca:f1:d7:05:26:fe:
         69:92:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:45:11 2025 by rpki-client