Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/232545d3-dcc7-4f04-bb6d-1d3d9c17d37d.roa
File:                     232545d3-dcc7-4f04-bb6d-1d3d9c17d37d.roa (raw, json)
Hash identifier:          oiXmkogSzZKl0K9YSBa+q88Fdu1n3xjqNyi0As9rjps=
Subject key identifier:   FE:03:63:5B:6D:A8:F7:9B:B2:80:1D:36:B6:21:4D:DE:68:14:04:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4AF3FDAB6DEF5F90EE462DE7F2501991BD40EFD8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/232545d3-dcc7-4f04-bb6d-1d3d9c17d37d.roa
Signing time:             Tue 02 Sep 2025 00:31:02 +0000
ROA not before:           Tue 02 Sep 2025 00:31:02 +0000
ROA not after:            Tue 07 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f3:fd:ab:6d:ef:5f:90:ee:46:2d:e7:f2:50:19:91:bd:40:ef:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  2 00:31:02 2025 GMT
            Not After : Oct  7 23:59:59 2025 GMT
        Subject: serialNumber=f1915a74232b93f7d7fa37749495df9d54e8db512bbcd90af625ad2ca68081b4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:da:3f:f8:88:2d:ad:ae:8f:3c:22:0e:52:1c:
                    17:a2:ac:cc:87:18:c3:e5:f9:b5:38:87:95:03:ec:
                    99:2f:80:5b:d8:fd:ac:20:e1:10:86:ea:e7:4c:46:
                    1e:0f:0e:ae:e3:ab:3d:ba:25:74:43:c1:a4:37:82:
                    67:9a:9e:82:dc:42:ae:fd:8a:97:8c:ac:ee:32:8f:
                    e6:43:c9:d1:9e:f6:57:7d:af:65:08:85:b8:68:c5:
                    9a:96:c6:5d:12:0b:a0:d0:c5:64:f5:8a:a0:d2:a8:
                    98:65:4d:9e:12:b9:a2:27:ac:35:26:0d:c6:d4:5f:
                    a3:56:d2:44:a8:c7:1d:80:81:3c:f7:b3:95:0d:b1:
                    fa:35:95:2e:fc:23:78:aa:d9:b8:b9:3d:7b:79:b8:
                    43:9d:de:a5:92:67:e1:e2:d4:f2:32:1d:ba:f8:4b:
                    cd:2d:03:80:04:2d:11:82:a9:b3:72:37:62:cc:d7:
                    67:97:b1:ae:14:21:36:7f:47:8b:01:15:9a:94:8d:
                    60:30:a4:5e:df:0e:9c:59:dc:60:c4:b7:cc:13:73:
                    de:b4:2f:e4:6c:33:e0:df:ef:ad:33:e3:ae:bd:cb:
                    62:df:67:32:7b:5f:23:96:93:8f:2b:be:e8:83:7d:
                    14:c6:8f:73:8a:e8:05:8b:9b:c4:ac:db:26:4d:2c:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:03:63:5B:6D:A8:F7:9B:B2:80:1D:36:B6:21:4D:DE:68:14:04:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/232545d3-dcc7-4f04-bb6d-1d3d9c17d37d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:dd:fe:93:14:d1:a4:1c:ca:85:d2:a5:85:49:8e:d6:4c:90:
         b8:db:8b:7f:b8:0f:e2:6b:78:da:2c:f4:8f:28:10:bc:ba:40:
         af:9e:cf:61:c6:d0:3e:bf:de:cf:1d:07:ee:5b:4d:a1:c1:03:
         1e:6f:be:c3:a8:79:a5:10:68:1b:58:55:7d:92:2a:b6:29:1c:
         7b:a4:04:69:d0:92:ea:a5:a9:da:7f:09:e0:df:b9:43:3b:8b:
         4e:51:84:ed:4d:75:f7:92:e7:e1:75:d9:73:56:77:ba:a6:55:
         71:d5:92:e0:24:ae:e8:8f:86:fb:33:92:16:4d:cc:4f:d8:0f:
         d5:2a:59:fb:75:21:d0:4e:97:9d:7c:89:49:18:d1:12:03:72:
         01:00:1f:f3:4b:1a:6a:64:13:f9:8b:7a:9e:12:04:c6:7f:e7:
         88:88:95:bc:51:cf:ea:85:c4:44:7f:18:b3:39:81:59:b2:91:
         93:c5:2a:59:fb:aa:38:e0:37:73:74:c0:5c:6e:3a:80:f0:9c:
         d3:4c:d2:41:c8:58:f1:bf:4c:53:db:6a:a5:d8:98:63:c2:80:
         94:c3:66:2c:f3:05:e5:c3:e5:9e:9b:17:f9:3e:6c:65:c0:05:
         1e:7d:bb:25:12:e8:dc:2a:2f:75:c2:96:cc:45:b7:db:dd:83:
         41:71:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:05:54 2025 by rpki-client