Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa
File:                     81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa (raw, json)
Hash identifier:          wDdSeKgBRh0fSpV5brGQ1l54w5R8RnlMexnyqpWEKbI=
Subject key identifier:   94:62:5C:45:FA:93:46:E0:D3:CF:BB:15:BC:83:74:D4:9D:4C:A4:CD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6AFDDDF1AF3F9CA7A6E5DB74D6BB888CE30101C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa
Signing time:             Fri 30 May 2025 00:41:59 +0000
ROA not before:           Fri 30 May 2025 00:41:59 +0000
ROA not after:            Fri 04 Jul 2025 23:59:59 +0000
asID:                     8987
IP address blocks:        99.77.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fd:dd:f1:af:3f:9c:a7:a6:e5:db:74:d6:bb:88:8c:e3:01:01:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 30 00:41:59 2025 GMT
            Not After : Jul  4 23:59:59 2025 GMT
        Subject: serialNumber=def1d73d170ce0526901454527aa6d4251c6225c658fadf050e3faf9d11d83ce, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e6:4d:90:31:53:6f:cd:89:c0:ae:aa:14:fd:
                    7e:36:78:c6:f4:52:91:7e:46:31:74:1f:ab:2d:3b:
                    fb:4d:0f:9d:c2:02:00:4d:31:0e:51:26:9d:2b:9a:
                    77:be:59:68:eb:57:cb:c3:d9:b7:30:ad:26:87:6b:
                    29:ba:9a:71:f6:8f:33:28:c4:53:de:12:3a:57:7d:
                    e8:fb:11:c4:6d:a6:6f:72:6b:68:9d:88:31:0a:72:
                    be:26:69:21:d6:0b:70:aa:25:38:9f:c5:3e:53:65:
                    cb:13:e0:2c:41:05:c6:ab:32:7c:d7:3e:65:f0:f0:
                    1a:6c:9b:45:f8:0c:5a:65:43:7b:10:0f:2a:33:71:
                    4e:a4:a2:a6:7f:da:4a:58:49:ec:03:72:13:fb:69:
                    0b:45:fd:dd:b6:15:b9:94:bd:e3:ab:4e:b0:eb:cb:
                    6e:9f:07:7c:b8:9a:19:8b:c5:2a:6b:0a:92:ac:9f:
                    10:d2:12:65:72:ff:38:ac:4a:ea:91:25:8d:41:e6:
                    f5:14:f7:3c:a6:ec:3a:21:c5:ec:bb:40:ad:39:99:
                    ec:0c:66:19:f8:ca:b6:67:bc:2e:ee:fc:25:ff:1e:
                    0c:94:41:b4:41:83:b0:fd:3b:72:2b:d1:e1:34:88:
                    bd:a5:d7:79:a5:9e:b8:57:2d:c7:0f:33:db:f7:94:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:62:5C:45:FA:93:46:E0:D3:CF:BB:15:BC:83:74:D4:9D:4C:A4:CD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81a5c051-b9d8-4f24-88cc-8249e1d2e982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:a4:8a:86:b4:a8:3e:ed:fc:d1:52:fe:36:e1:35:c6:04:04:
         72:b7:c1:da:be:7d:c5:b1:eb:89:4f:a8:45:b3:be:58:ac:6f:
         13:c6:ec:ac:67:38:db:0a:f9:33:2b:16:24:b9:df:ab:e7:f3:
         37:81:88:32:c0:26:b2:33:ad:a2:3e:49:60:03:88:96:f3:96:
         8b:9a:aa:fd:1f:f5:35:5f:ae:92:c3:19:4c:e4:b2:93:bb:0d:
         97:e8:a4:64:90:ae:fe:da:a6:8c:bd:35:9f:cc:47:ef:08:99:
         8d:a8:42:70:8f:ac:e9:70:3e:3b:b4:e0:75:a5:40:67:22:85:
         e3:a7:97:70:e6:c1:d6:02:c4:e2:22:a8:f8:72:76:58:e4:7a:
         17:a9:11:60:bd:c6:76:ba:ea:43:0e:1e:d8:bd:34:73:22:54:
         65:9d:58:bd:5a:83:5a:6b:98:c5:26:cd:cd:41:75:61:49:11:
         64:f3:94:88:b1:f6:67:b5:4d:98:da:05:91:c3:b0:d3:1d:c4:
         f0:62:a2:bf:a3:89:bc:26:92:e3:4a:ff:9c:78:03:51:40:f8:
         0a:c7:8f:21:8a:f9:d9:68:ad:34:93:d9:9c:46:91:ad:44:b5:
         07:b5:29:db:6d:e0:18:c2:b5:59:d2:22:72:9d:7c:be:41:e0:
         12:2f:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:50:33 2025 by rpki-client