Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750c6639-e3eb-480d-90fc-80f03249cf86.roa
File:                     750c6639-e3eb-480d-90fc-80f03249cf86.roa (raw, json)
Hash identifier:          7jm7mlYK/Prydbwq7VKBWv5puhcvzMrc6uVWkNSLqGw=
Subject key identifier:   3F:02:8D:29:EF:5B:97:E0:E4:EB:16:10:2D:79:98:BE:E5:B1:0A:80
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1F810386E8F1B468B9863AD43D90BE0DDB8FBB88
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750c6639-e3eb-480d-90fc-80f03249cf86.roa
Signing time:             Wed 28 May 2025 00:50:31 +0000
ROA not before:           Wed 28 May 2025 00:50:31 +0000
ROA not after:            Wed 02 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        99.83.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:81:03:86:e8:f1:b4:68:b9:86:3a:d4:3d:90:be:0d:db:8f:bb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 28 00:50:31 2025 GMT
            Not After : Jul  2 23:59:59 2025 GMT
        Subject: serialNumber=6500db99796009e3d1d0442ca7e6ced2d465a9fe32d665bf23eda2a14e674b73, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:ef:21:59:00:ad:05:c8:19:3d:ee:a7:3c:
                    45:50:0b:41:0f:36:65:d8:55:ee:78:0d:24:81:88:
                    8e:39:d5:95:35:f0:4d:6e:46:61:42:1a:e0:da:d4:
                    fc:b6:7f:74:1f:50:68:aa:a2:41:92:22:3a:8a:c9:
                    a5:83:11:8c:1d:41:30:c1:e8:ad:e2:df:8a:e8:23:
                    fd:e2:28:f9:be:b7:ff:58:31:7c:a7:fb:d4:7e:f0:
                    4b:8f:12:65:4d:44:b6:ee:72:03:ff:47:69:01:42:
                    55:bd:55:7c:aa:d3:d3:0c:e6:81:7e:f7:ed:4b:e7:
                    e9:cd:01:27:3c:29:09:5e:ca:58:a8:3e:0c:d3:df:
                    07:fc:0b:ce:01:69:22:52:5a:00:5e:03:a3:bf:aa:
                    11:9d:bd:12:65:2e:f5:40:f0:11:3b:59:15:84:b0:
                    1e:95:be:75:f0:12:9b:42:26:83:db:2f:39:f0:6e:
                    07:7f:b9:a7:51:78:44:a9:b5:fb:c6:89:5b:01:1b:
                    09:d0:ec:cd:a5:9f:25:9c:7b:a3:74:6c:2b:95:f5:
                    31:ce:ae:89:ae:58:17:95:89:4a:c0:d9:46:8d:38:
                    7d:a9:b1:7c:b8:69:51:00:ef:45:d0:cc:f2:81:de:
                    fb:a6:98:0d:8a:f4:5b:37:ce:56:de:95:07:a3:00:
                    41:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:02:8D:29:EF:5B:97:E0:E4:EB:16:10:2D:79:98:BE:E5:B1:0A:80
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750c6639-e3eb-480d-90fc-80f03249cf86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:d0:21:6f:5f:49:2a:52:4d:20:7a:2b:98:22:c0:f6:7f:46:
         7c:70:2e:75:80:80:fb:26:43:91:87:36:f8:f1:11:55:26:56:
         96:2f:eb:bb:98:fa:f8:f8:27:e8:b5:49:21:0d:6c:df:be:89:
         0e:0a:74:ce:65:87:b9:76:6e:82:90:e3:de:82:ba:7a:7c:bb:
         f7:a8:1d:08:72:27:2b:61:92:b1:fb:16:0b:5c:f7:4c:8b:74:
         57:a7:ae:e1:b6:2c:83:75:f5:08:70:67:8c:a6:90:dd:f9:9d:
         35:88:52:b5:4c:13:a7:11:cc:ff:e1:15:d8:be:d9:a1:60:9d:
         f9:c1:3b:71:c5:9f:bf:67:85:c6:1e:57:67:cf:80:e7:ac:46:
         7a:a8:55:14:4f:41:f2:57:7d:09:d9:44:63:4a:df:c3:4e:9e:
         e9:2e:91:67:81:08:0a:d0:58:20:bf:5c:78:d7:3e:72:5e:89:
         e7:08:23:3c:96:be:29:6c:ab:d4:6f:cb:67:f5:4b:42:10:92:
         7f:ab:b1:92:da:76:0b:15:a1:ae:11:18:52:40:bc:c9:3d:e3:
         16:7d:81:c5:ae:01:c0:a1:85:2f:1c:57:c6:1d:91:bc:bf:3b:
         66:a2:64:cb:f4:b7:c4:4c:9a:1a:5e:6e:72:85:bf:4f:2d:b2:
         c7:94:79:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 05:15:11 2025 by rpki-client