Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa
File:                     51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa (raw, json)
Hash identifier:          Z3JMDS1pocsxuCENuOHadyPF0AFjPyacVEZdNr7h5CI=
Subject key identifier:   7A:58:F7:32:7E:B3:67:69:2B:A1:20:1C:D0:7B:7C:3E:8B:9B:0F:ED
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       33D9E0670DFBA3BA3285F0789F2881902E4FD0ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa
Signing time:             Tue 12 Aug 2025 00:50:26 +0000
ROA not before:           Tue 12 Aug 2025 00:50:26 +0000
ROA not after:            Tue 16 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d9:e0:67:0d:fb:a3:ba:32:85:f0:78:9f:28:81:90:2e:4f:d0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 12 00:50:26 2025 GMT
            Not After : Sep 16 23:59:59 2025 GMT
        Subject: serialNumber=8604111688c4d3a90cca1065ec47f1001df8e5c39b14c03fbfb8f232725803ec, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:de:e8:7f:71:8b:01:7e:3b:89:b0:9f:4c:
                    be:56:72:db:2d:f3:ac:25:c9:96:4f:51:b6:d9:20:
                    89:7a:2d:40:38:22:1c:52:1d:73:d9:24:03:5a:a6:
                    00:c0:10:2d:ac:51:73:9a:d4:ff:b8:f7:e5:be:3c:
                    fe:c3:bf:0b:75:f2:a1:cd:97:21:a5:4d:9e:a8:c7:
                    06:63:84:74:3b:51:d2:1e:a3:b1:d2:d5:d5:39:14:
                    5e:de:e5:73:8e:f7:72:5d:02:6e:58:1b:bd:e8:4a:
                    04:35:c9:9e:61:91:58:80:e2:75:6d:f8:7a:c2:52:
                    fd:21:fc:ef:42:f5:0b:71:5b:b1:25:32:0f:2f:fa:
                    73:ee:ba:d3:e3:e4:e6:f3:b4:70:85:d7:b7:c0:cd:
                    cd:2f:6e:cc:fb:91:98:de:5c:ca:5e:2a:e6:36:a8:
                    b8:90:25:dc:bb:23:65:52:1e:f6:6a:8b:72:2f:9e:
                    71:83:66:6e:52:4c:a9:80:2e:d9:fe:6b:68:41:84:
                    d3:33:a7:d1:45:a6:f4:3b:6a:fd:c4:2a:21:55:82:
                    b6:a4:c1:55:d1:c3:e5:98:db:ea:f7:84:60:09:59:
                    2d:76:b3:cd:1c:75:22:f2:ed:8a:4b:91:a0:e8:55:
                    0c:9e:e6:c1:0a:61:67:a1:0a:3c:70:3f:cb:e9:bc:
                    82:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:58:F7:32:7E:B3:67:69:2B:A1:20:1C:D0:7B:7C:3E:8B:9B:0F:ED
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:e9:25:78:a2:f4:ad:4f:db:92:27:48:23:84:d8:e7:36:d7:
         5e:f1:ca:10:62:a9:f4:fa:37:29:56:15:97:89:2f:b4:fc:e1:
         5d:26:80:2d:9e:30:24:87:8d:a1:80:73:bb:d8:ae:0c:23:68:
         1a:76:79:7a:e3:a3:2b:35:a6:61:69:83:e4:b6:1a:bd:13:dc:
         d8:34:99:06:f9:c7:0e:50:87:a1:84:d5:12:fa:bf:c7:4d:1b:
         8b:58:63:fd:99:43:9b:d2:98:89:29:79:aa:c3:91:a9:28:7d:
         5f:07:b4:3c:f8:43:5c:4a:2d:b8:44:53:c8:c1:0f:00:90:3f:
         8e:cb:9a:d1:3b:4d:85:97:74:d7:d2:64:58:70:52:d8:d1:27:
         2f:98:87:d2:fc:b0:6a:10:41:2f:4b:de:64:36:c5:3b:4a:02:
         d2:a4:f9:79:8e:1f:03:9d:11:34:ac:8e:40:06:d8:91:ab:bb:
         68:2b:d2:d0:53:ef:1b:ba:60:75:e9:f1:ef:70:d5:cb:ac:9c:
         13:73:38:cc:a3:bc:f2:e0:31:d2:24:d8:fc:56:d5:d2:99:c3:
         81:a8:c3:32:23:e9:df:d5:65:f4:d0:81:02:02:cb:2b:b0:09:
         a2:f5:56:36:8a:16:b2:38:8b:16:b7:f8:42:8c:4e:88:78:3f:
         9e:30:14:35
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUM9ngZw37o7oyhfB4nyiBkC5P0O0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwODEyMDA1MDI2WhcNMjUwOTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A4NjA0MTExNjg4YzRkM2E5MGNjYTEwNjVlYzQ3ZjEwMDFk
ZjhlNWMzOWIxNGMwM2ZiZmI4ZjIzMjcyNTgwM2VjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDN/t7of3GLAX47ibCfTL5Wctst86wlyZZPUbbZIIl6LUA4
IhxSHXPZJANapgDAEC2sUXOa1P+49+W+PP7Dvwt18qHNlyGlTZ6oxwZjhHQ7UdIe
o7HS1dU5FF7e5XOO93JdAm5YG73oSgQ1yZ5hkViA4nVt+HrCUv0h/O9C9QtxW7El
Mg8v+nPuutPj5ObztHCF17fAzc0vbsz7kZjeXMpeKuY2qLiQJdy7I2VSHvZqi3Iv
nnGDZm5STKmALtn+a2hBhNMzp9FFpvQ7av3EKiFVgrakwVXRw+WY2+r3hGAJWS12
s80cdSLy7YpLkaDoVQye5sEKYWehCjxwP8vpvILNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUelj3Mn6zZ2kroSAc0Ht8PoubD+0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUxZGE0ZGJjLTc4ZDgtNDZhZC04YmQzLTY5ZWRkYjNhOTZlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTfgwDQYJKoZIhvcNAQELBQADggEBAL7pJXii9K1P25InSCOE2Oc2117x
yhBiqfT6NylWFZeJL7T84V0mgC2eMCSHjaGAc7vYrgwjaBp2eXrjoys1pmFpg+S2
Gr0T3Ng0mQb5xw5Qh6GE1RL6v8dNG4tYY/2ZQ5vSmIkpearDkakofV8HtDz4Q1xK
LbhEU8jBDwCQP47LmtE7TYWXdNfSZFhwUtjRJy+Yh9L8sGoQQS9L3mQ2xTtKAtKk
+XmOHwOdETSsjkAG2JGru2gr0tBT7xu6YHXp8e9w1cusnBNzOMyjvPLgMdIk2PxW
1dKZw4GowzIj6d/VZfTQgQICyyuwCaL1VjaKFrI4ixa3+EKMToh4P54wFDU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:46:53 2025 by rpki-client