Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fd2bd53-38ec-4a62-80d5-78aaa40d7895.roa
File:                     7fd2bd53-38ec-4a62-80d5-78aaa40d7895.roa (raw, json)
Hash identifier:          yjLS8n0iysMJNk896uWhhs/L/R/vsN7VVDghRNMMwjY=
Subject key identifier:   49:16:AC:5B:ED:A5:DA:19:7A:03:BC:4A:BB:D7:A4:CF:AF:C0:85:EB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       39A2E0FEE2494F6C63FD96C0763BBB657C47B658
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fd2bd53-38ec-4a62-80d5-78aaa40d7895.roa
Signing time:             Fri 30 May 2025 00:42:05 +0000
ROA not before:           Fri 30 May 2025 00:42:05 +0000
ROA not after:            Fri 04 Jul 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        99.77.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a2:e0:fe:e2:49:4f:6c:63:fd:96:c0:76:3b:bb:65:7c:47:b6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 30 00:42:05 2025 GMT
            Not After : Jul  4 23:59:59 2025 GMT
        Subject: serialNumber=0f106af7bc8ec027825e0e5f84aa1f503bc1be5fcab1417f9f0a3029222fd936, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:2d:d2:ad:98:00:0f:65:74:40:77:9e:e2:
                    d9:4c:e2:4d:13:d8:ef:95:fd:6b:f6:63:c0:14:db:
                    23:da:1f:cf:52:ac:54:09:ff:fe:8c:fc:1c:07:ca:
                    d1:50:c3:a6:2b:8d:da:6d:e7:9e:e0:2e:e8:fa:9a:
                    e1:ee:6f:42:15:97:96:6e:22:c7:d2:b0:3a:36:a4:
                    76:77:33:0e:a5:f3:09:bb:56:28:56:1c:c5:e7:a7:
                    c3:33:01:4c:37:33:13:96:96:d2:81:c2:ef:da:75:
                    19:cc:66:6a:53:87:b1:57:8e:c2:97:85:c8:f6:70:
                    42:ad:f6:06:e7:c3:07:a0:32:e1:2f:ac:17:5c:84:
                    25:23:52:ec:3c:92:99:50:ce:32:9a:32:92:ab:7f:
                    a5:3d:43:25:1d:fb:8a:51:af:4e:9a:34:63:75:7e:
                    2d:73:9a:b5:b7:db:60:f7:06:97:fb:c4:4c:ac:62:
                    f4:ea:2e:dc:8c:44:5b:33:f1:22:b4:8c:34:77:bf:
                    3e:65:2e:1f:60:d6:9a:83:bb:be:e8:7c:4b:04:1f:
                    07:54:e6:d8:0c:a2:e5:04:6d:36:e9:5d:e3:46:35:
                    cb:0a:f2:13:ff:30:89:6c:87:d7:16:a4:e1:b1:81:
                    f8:1f:28:4d:d6:e2:be:69:3a:34:47:3c:f6:8b:c2:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:16:AC:5B:ED:A5:DA:19:7A:03:BC:4A:BB:D7:A4:CF:AF:C0:85:EB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fd2bd53-38ec-4a62-80d5-78aaa40d7895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:ba:42:c5:23:d8:2b:e8:92:7c:37:ef:8a:41:aa:e0:2e:c5:
         ff:9d:b5:d4:2c:10:bb:70:5f:9d:b2:e7:20:10:d8:69:d0:e9:
         66:2c:f7:e4:cc:57:e0:86:45:4d:aa:71:3e:86:52:5f:ad:8d:
         a1:01:f1:58:1d:fc:5a:fc:30:79:92:58:30:bb:a6:0c:fb:06:
         37:ec:52:92:99:39:6b:24:cb:61:80:ee:a6:61:9e:c1:4d:c4:
         10:23:e7:df:3d:f3:64:ba:84:12:25:c7:37:a9:59:25:d2:31:
         c3:14:30:a8:53:be:3d:d5:96:11:38:5a:0a:ab:87:0c:f1:07:
         55:86:a9:8c:14:15:84:02:1b:4d:82:58:b4:bd:78:05:ec:53:
         74:fc:5b:62:69:58:2d:b8:1c:62:f2:57:32:10:c3:c6:f0:72:
         c6:36:3b:a2:55:43:10:c3:ea:3e:9a:87:f8:88:59:07:04:ba:
         50:6e:17:4c:63:4a:56:81:f4:65:fb:15:43:2c:2f:4c:0a:77:
         d9:d9:1b:81:f3:1e:f2:0e:a6:8c:9e:88:09:01:56:c9:4d:9a:
         0d:04:e2:d9:66:4e:ec:a8:2a:4e:18:81:41:a7:0b:09:33:f2:
         89:0a:7a:2f:6e:72:11:6b:a4:f7:3c:f4:03:c9:f2:74:1f:b8:
         56:db:91:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:34:21 2025 by rpki-client