Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7247667-78f2-433e-a9d4-4a2073e18b85.roa
File:                     b7247667-78f2-433e-a9d4-4a2073e18b85.roa (raw, json)
Hash identifier:          qHslheJiZTc5NOQH5488M3Lv2VC4wswM11MjMQfy3n0=
Subject key identifier:   CA:E7:4A:F5:2E:08:9B:D0:A7:9F:95:20:B5:76:15:80:67:8B:FE:2A
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       50C61292BA77ED5C39C3DD0C764DA6E0B3DAB992
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7247667-78f2-433e-a9d4-4a2073e18b85.roa
Signing time:             Wed 28 May 2025 00:50:24 +0000
ROA not before:           Wed 28 May 2025 00:50:24 +0000
ROA not after:            Wed 02 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c6:12:92:ba:77:ed:5c:39:c3:dd:0c:76:4d:a6:e0:b3:da:b9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 28 00:50:24 2025 GMT
            Not After : Jul  2 23:59:59 2025 GMT
        Subject: serialNumber=57a9d8a992414fe4993895dea53c01aa838c34165368a91bccf37d0a24e4ce94, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:70:da:20:52:80:2c:a3:b7:eb:a8:bd:79:
                    43:a3:b6:a0:ce:dc:2c:09:53:51:b1:a4:56:8c:b8:
                    d4:65:ec:bc:70:a6:71:ce:c1:00:da:a5:1f:a4:df:
                    87:91:8c:60:a5:f3:31:f2:63:c5:01:60:18:ba:b7:
                    d3:7a:d3:a9:70:ef:cc:ec:d8:ec:36:3a:8e:53:ee:
                    46:a3:be:4b:35:1f:5c:37:88:78:92:e5:c2:b4:a5:
                    6d:91:87:d7:ca:cf:2f:6b:5c:26:d3:b5:9b:32:9e:
                    e8:b0:01:65:25:34:40:e6:78:5d:f4:df:ed:82:33:
                    8a:30:7b:f7:32:2c:dc:1a:11:83:53:2e:b4:e4:22:
                    e8:72:9b:75:10:b2:3a:da:6e:ab:09:b6:a1:82:06:
                    d8:66:e7:47:09:ad:d7:02:38:e6:83:bd:bd:32:7c:
                    39:a5:2e:5e:d1:76:84:a4:22:e8:35:ab:ca:cb:c1:
                    bb:17:78:d7:1b:b2:37:43:78:7d:04:fe:25:4f:76:
                    e6:b6:43:76:d1:08:cc:d7:13:e7:33:32:92:71:1b:
                    98:c5:2c:80:d1:d7:a0:1d:15:12:b6:f9:90:7c:59:
                    c7:15:10:0e:d0:bd:c0:4b:42:be:92:e9:60:65:4b:
                    81:7a:1f:99:9a:c8:b5:9c:d0:34:03:77:1f:ca:60:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E7:4A:F5:2E:08:9B:D0:A7:9F:95:20:B5:76:15:80:67:8B:FE:2A
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7247667-78f2-433e-a9d4-4a2073e18b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ee:0f:d3:cf:2d:ac:a2:96:3b:ad:5d:be:9c:18:86:c5:76:
         f9:cf:6e:c8:f3:13:ae:50:f2:25:74:49:bf:66:1a:e4:12:9f:
         92:ca:48:02:41:f1:03:cf:51:a0:54:85:be:94:02:a4:9c:9b:
         1a:f7:d3:e9:8f:da:74:22:27:e4:65:1f:ee:cb:61:22:77:dc:
         c3:ce:98:4c:16:ef:62:d8:4b:42:83:40:2d:00:13:6a:66:b4:
         25:5d:07:b8:d8:4f:32:5c:e7:59:7a:5d:80:16:77:7b:3e:73:
         2a:4e:59:ee:99:00:b3:2a:a4:71:a8:e3:38:d3:7c:f4:d8:74:
         77:21:17:82:9c:b8:e0:8c:e1:a6:a7:72:b0:72:aa:61:61:27:
         ee:f7:3c:44:cf:ab:bf:23:cc:59:1b:13:46:06:65:d2:f1:a6:
         0c:22:6f:f8:10:d3:ab:99:ee:90:81:97:96:4c:e2:a0:bd:c1:
         8f:9c:10:ec:2a:dc:1a:a2:8d:b2:8f:fa:8c:91:db:a5:bf:63:
         f2:c8:5a:c5:df:96:11:2e:2f:a4:4a:4b:bc:38:ea:32:7b:04:
         dc:1f:c6:4d:47:06:ef:d0:23:49:ed:66:df:6c:33:bd:07:4e:
         9f:17:08:81:48:1c:09:38:20:20:8a:9d:7f:1e:8f:d0:36:fd:
         11:8d:b8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:36:41 2025 by rpki-client