Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22ee097c-78c8-4c75-866c-6092e78e76d5.roa
File:                     22ee097c-78c8-4c75-866c-6092e78e76d5.roa (raw, json)
Hash identifier:          bl97ELRvKXrTXlX46KPfc704I+dsI3fQlOEpiIkoSio=
Subject key identifier:   F1:6B:44:9B:04:EF:1F:D3:A2:29:FD:46:1B:76:69:20:56:07:5A:42
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5A4FCCD7EC73229A23A20E2431066C3C7ADEFFFC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22ee097c-78c8-4c75-866c-6092e78e76d5.roa
Signing time:             Wed 13 Aug 2025 00:51:05 +0000
ROA not before:           Wed 13 Aug 2025 00:51:05 +0000
ROA not after:            Wed 17 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4f:cc:d7:ec:73:22:9a:23:a2:0e:24:31:06:6c:3c:7a:de:ff:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 13 00:51:05 2025 GMT
            Not After : Sep 17 23:59:59 2025 GMT
        Subject: serialNumber=1675dc206dd98bacf3f42bb8e1225246772ea70381a87f8e23db142998ea068b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:30:ce:85:ae:7b:55:0b:76:91:8d:78:23:
                    f9:f3:35:ee:17:ac:54:b0:de:b1:ad:b4:f9:7f:5a:
                    c1:bf:43:50:c2:c8:18:3a:9e:67:88:55:70:fd:90:
                    91:8c:60:9a:4f:4b:23:d4:d5:cd:34:cf:28:4a:c3:
                    6e:36:51:d9:0a:56:7a:92:a8:f6:99:2f:db:d2:f0:
                    c3:fe:e2:59:3e:c9:70:ea:3f:f4:94:0e:29:e5:f0:
                    18:52:75:4f:ec:85:f3:1f:c1:03:8b:af:a0:92:e0:
                    58:9a:34:de:26:f6:d8:f3:0b:ea:63:9a:a8:ea:55:
                    38:1c:df:69:38:70:5d:87:61:41:c2:8e:16:3d:b0:
                    90:7b:eb:77:b3:be:81:dd:6f:a6:3c:a5:68:d3:3b:
                    b1:e1:88:f3:b9:b5:71:2d:89:12:66:b4:ba:19:a1:
                    4f:18:e3:7a:40:9e:76:54:27:3c:ae:f2:5f:c7:fa:
                    80:2d:01:29:ca:f1:5a:b0:47:05:53:7f:de:06:65:
                    d0:59:b9:ef:5c:06:05:7d:2b:92:ab:f8:36:96:ed:
                    e9:9c:5e:21:f3:07:aa:c0:33:2e:5c:98:62:86:6f:
                    19:b5:28:bd:31:76:fe:d0:82:fd:b5:b1:cd:b7:7a:
                    e8:8a:10:30:73:9c:65:4e:98:f0:3d:16:53:bf:23:
                    41:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6B:44:9B:04:EF:1F:D3:A2:29:FD:46:1B:76:69:20:56:07:5A:42
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22ee097c-78c8-4c75-866c-6092e78e76d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:6d:f1:76:fe:69:c2:c1:ae:91:a0:5c:c8:dc:5f:ea:ee:
         d6:aa:5a:3c:80:89:60:c4:46:c3:58:3c:1c:b9:ad:4d:48:5b:
         dd:85:0a:34:56:00:7d:24:cd:cb:07:56:90:48:05:4f:2c:58:
         a5:24:6a:2c:17:76:e8:ba:e4:68:37:7b:f1:81:a9:c6:eb:eb:
         62:a6:89:5b:92:f9:a0:65:75:84:f8:44:70:dc:30:d4:23:76:
         9f:f2:55:e0:c7:27:9e:20:ea:81:86:48:be:95:de:fa:cb:f4:
         da:82:1b:02:df:0b:1d:20:4c:ed:28:fa:41:a3:1f:f8:a8:e3:
         7b:0f:fa:67:12:fe:09:2f:87:8c:be:6a:c7:5e:0a:d5:b0:79:
         ed:ab:d6:71:4b:b1:7d:17:b9:a9:84:17:c9:ba:f3:88:d3:45:
         48:b3:14:40:0a:36:1f:a6:4f:c1:2e:a2:98:50:b5:80:ab:3d:
         2b:4a:23:95:f8:a0:38:48:87:5d:ba:12:c9:99:72:5c:65:08:
         03:69:f9:66:d6:9e:19:b4:a1:0f:8f:90:08:b3:e5:3e:b3:c6:
         59:22:1a:f7:2c:50:4c:d2:a9:55:a3:bc:05:82:36:63:47:da:
         69:92:36:9f:3a:e2:bb:fa:41:1f:38:00:30:4c:e9:f8:f7:1b:
         c5:7f:f0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:37 2025 by rpki-client