Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa
File:                     77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa (raw, json)
Hash identifier:          CeJ74DXxTrHaqaDp/9lJEBxcAZkQsVxEbO6a1yWoKZ8=
Subject key identifier:   84:67:B6:DE:F5:EA:23:46:A1:D2:A2:FD:9A:C1:BD:B9:7A:A6:BA:7B
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       1F3DD4089B14070393582E92E8A88735BE2F8119
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa
Signing time:             Mon 19 May 2025 18:50:04 +0000
ROA not before:           Mon 19 May 2025 18:50:04 +0000
ROA not after:            Mon 23 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3d:d4:08:9b:14:07:03:93:58:2e:92:e8:a8:87:35:be:2f:81:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: May 19 18:50:04 2025 GMT
            Not After : Jun 23 23:59:59 2025 GMT
        Subject: serialNumber=65a750104c97b182e9de3026e40a8f498b45def6d2f96c58d36ee01486a62032, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:be:22:92:d2:e0:dd:aa:48:ab:26:f2:65:
                    fc:2c:8b:f7:e3:1f:26:a7:de:11:8e:6f:df:c5:17:
                    10:aa:c9:88:56:8b:16:68:58:47:35:3b:cc:03:e8:
                    bb:c6:74:40:b1:19:38:59:58:e3:00:28:a4:1a:6a:
                    25:6e:b6:e2:9c:93:35:b7:48:20:37:9a:b2:e2:31:
                    e9:4d:7f:7d:e5:e7:8b:dd:69:48:58:a4:18:93:ab:
                    04:d4:4f:d0:29:2b:02:5d:bf:13:70:9e:3f:99:ec:
                    f8:38:0d:25:04:c4:19:84:80:4f:86:d7:da:76:2f:
                    39:44:00:66:eb:72:8c:5f:8c:10:66:4a:6e:d2:41:
                    1e:8b:35:4a:10:bc:ec:5a:31:30:6f:99:3f:e0:61:
                    17:9d:8f:64:50:7f:cd:d0:bf:06:57:7e:5d:0a:96:
                    17:d9:0e:52:ef:d1:01:d9:bb:e1:27:7b:97:71:21:
                    1a:4e:f0:50:17:8c:8a:76:84:ac:54:e6:3c:86:08:
                    c3:eb:65:8d:d0:7f:95:75:9b:81:7e:95:0c:80:8c:
                    fb:1f:a6:76:b0:cf:ff:64:6c:40:da:9b:34:f0:5a:
                    ea:9b:1b:17:e6:11:e6:64:13:ee:48:3e:08:24:4c:
                    fa:28:46:f7:90:24:d4:4f:29:2f:a9:08:91:76:09:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:67:B6:DE:F5:EA:23:46:A1:D2:A2:FD:9A:C1:BD:B9:7A:A6:BA:7B
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:28:49:13:c8:b9:f8:f5:c6:23:04:af:3d:e5:c1:f6:68:6c:
         f0:5e:13:20:3e:45:1a:ce:92:2d:98:8d:a2:ae:5e:49:5c:f4:
         89:3c:b1:90:1d:f2:1c:5b:a7:43:5e:68:bf:ad:a2:50:f1:d5:
         08:d5:29:73:45:fc:46:d2:93:04:8a:86:90:2d:3c:23:71:3e:
         ea:73:9f:e5:4a:96:0c:2d:c0:95:b0:fe:06:47:16:73:0d:2f:
         41:35:53:d6:79:64:07:db:7f:c4:70:8d:58:92:1f:76:7b:fd:
         fe:c8:9b:92:0a:d2:16:5a:33:b6:ff:25:04:ee:48:1f:d0:ba:
         19:d6:11:c2:ab:e8:ef:76:90:79:4b:83:f8:ca:6d:45:ab:9b:
         5c:fb:c9:13:65:0a:d0:cb:a8:51:98:04:b2:46:2c:4b:2d:f3:
         6a:61:d7:6a:f5:bf:65:25:a8:2c:9e:62:4a:67:ba:4e:c9:6f:
         e7:37:be:ad:60:f6:9f:ce:75:eb:6c:ff:44:ae:51:6c:0b:bb:
         66:c5:a2:c8:2f:13:6e:b2:ce:7d:a4:80:ab:d8:e1:d9:68:81:
         ca:cc:d3:bf:a2:07:98:a8:78:7d:c9:25:61:1e:e5:5b:00:6a:
         71:7d:54:fc:1f:84:bb:e0:9f:79:86:2d:1e:38:c7:af:7a:12:
         bc:19:b1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 16:27:31 2025 by rpki-client