Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa
File:                     83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa (raw, json)
Hash identifier:          dhjk4O/H261ApqzUUbUuH/0SwNadXvH8qwOWs2/xCIc=
Subject key identifier:   2F:1E:05:4E:82:8F:AE:A5:42:A6:FA:90:16:6C:95:06:BF:60:C7:6F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7E51EC7F5DF4D3B2E3988D1B3CCD3E229ABC57C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa
Signing time:             Sat 30 Aug 2025 00:51:30 +0000
ROA not before:           Sat 30 Aug 2025 00:51:30 +0000
ROA not after:            Sat 04 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        75.101.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:51:ec:7f:5d:f4:d3:b2:e3:98:8d:1b:3c:cd:3e:22:9a:bc:57:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 30 00:51:30 2025 GMT
            Not After : Oct  4 23:59:59 2025 GMT
        Subject: serialNumber=2ee00d7c45f0b33f81f942a36dc16bbb56c299c3c341fe60046bea6b544dc52f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:70:79:8d:2c:8d:d9:8f:48:69:ab:2d:b4:61:
                    e9:94:fc:47:b7:c1:11:22:ce:2d:74:be:23:38:bb:
                    a7:19:97:0b:64:e3:ca:e1:51:81:27:57:c7:33:55:
                    db:8b:9d:2b:7f:7a:a6:80:0a:da:a6:ba:f8:a0:5a:
                    8b:3f:a5:46:2e:94:ad:73:b8:52:d5:1e:97:14:0e:
                    23:4a:79:02:83:76:c6:a2:22:d6:d5:ef:8f:58:a4:
                    09:7a:2c:b2:67:04:6b:4e:d1:16:ce:b0:27:a8:4e:
                    e8:e0:6c:2f:df:b7:4a:7e:2f:cf:1d:76:5c:1e:a3:
                    6b:2e:08:93:a6:60:a7:ed:a9:42:b3:2b:c7:01:6d:
                    80:c1:98:57:9b:0f:8d:ea:63:e4:a1:77:13:c8:d7:
                    c5:73:fc:93:f5:9c:31:53:80:a3:80:86:eb:d1:d8:
                    9e:2f:8a:cf:56:47:8c:52:d8:73:ed:0d:5e:2b:87:
                    f7:3a:e7:06:b4:47:13:cf:88:d3:56:64:87:f1:e7:
                    c0:77:ad:ac:c1:53:45:f0:96:01:af:33:c7:a4:8c:
                    24:65:92:c2:7c:dd:cf:20:8d:d2:b6:ed:a6:2f:0a:
                    17:9b:00:fa:e7:3e:8d:0d:91:01:18:b0:bb:e7:06:
                    a1:62:a5:65:5e:50:5b:b0:ff:bc:d6:57:91:9b:25:
                    88:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1E:05:4E:82:8F:AE:A5:42:A6:FA:90:16:6C:95:06:BF:60:C7:6F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83c934e0-e04c-4a64-94a4-cd0e5a2b3c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.101.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         98:b6:65:5e:61:01:87:13:18:e6:58:23:e3:63:00:bf:bf:0d:
         83:5f:2d:9a:53:82:e4:f3:6e:08:84:ba:41:f9:cd:07:ad:98:
         a6:68:c5:da:d5:d9:79:36:f3:55:9b:e3:91:2d:b3:a1:c2:44:
         56:51:88:b9:55:e0:e3:3e:cd:e5:aa:7c:92:90:f4:52:58:21:
         ba:30:c2:1a:91:76:85:22:2c:7c:9b:f8:ae:d7:89:9d:89:42:
         6c:76:6e:f9:5f:ef:5c:b5:49:f9:93:17:88:4d:f5:7b:73:a0:
         41:a2:f6:a6:59:29:6e:9b:83:7b:4c:a6:91:a5:15:c2:49:1f:
         f7:c8:96:48:49:cf:46:4c:14:43:66:4b:10:05:2b:25:0e:fe:
         97:fc:c6:cd:52:3a:9b:45:85:a1:6e:ff:bf:cf:e2:d6:77:d8:
         79:ea:db:66:79:08:0c:bc:dd:89:74:5c:9f:f2:e2:0a:04:10:
         37:57:ad:58:30:77:d0:f9:2c:bb:de:70:ce:dc:cc:fd:9b:1a:
         69:bb:ad:82:6c:63:34:e7:8c:ae:11:8f:ef:a9:7f:8c:d7:44:
         a3:7d:bb:33:73:a7:46:ca:5a:bb:55:fa:1e:26:67:b3:43:36:
         7e:1a:71:bb:00:76:f8:c5:67:85:8c:de:91:4a:3d:3f:f0:39:
         e5:22:19:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:25:48 2025 by rpki-client