Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4fab25-7784-4b8c-ae9b-bab51faa4834.roa
File:                     7b4fab25-7784-4b8c-ae9b-bab51faa4834.roa (raw, json)
Hash identifier:          pvF5bHev0ITevSQimo0yKFislH+KEvw+KvrC1BfLv90=
Subject key identifier:   91:E1:0D:74:9C:E8:9B:FE:C7:18:1A:23:06:B3:01:09:04:9E:B3:F1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7365E15F575B3E39151B002DB7FBE00CAF0C68B9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4fab25-7784-4b8c-ae9b-bab51faa4834.roa
Signing time:             Wed 20 Aug 2025 00:20:16 +0000
ROA not before:           Wed 20 Aug 2025 00:20:16 +0000
ROA not after:            Wed 24 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        93.77.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:65:e1:5f:57:5b:3e:39:15:1b:00:2d:b7:fb:e0:0c:af:0c:68:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 20 00:20:16 2025 GMT
            Not After : Sep 24 23:59:59 2025 GMT
        Subject: serialNumber=e61b1cc5b612c0ae59f65debb389dc73e62c9916db67eae383be4dd69749f7da, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c6:42:86:1c:52:3e:f3:bf:31:21:6a:48:eb:
                    f0:9a:8b:02:a2:d9:f9:e6:73:6b:69:82:cb:c2:a5:
                    ac:6d:c4:45:66:e9:c6:6e:ec:3a:2f:c2:fb:cd:32:
                    f0:fb:61:39:59:56:02:7f:ed:1b:a6:de:b6:d3:fb:
                    01:49:9a:0c:d0:20:c1:07:f4:9f:f4:c0:6e:ae:d6:
                    77:8b:09:4c:86:45:b5:f9:43:27:d8:e1:4e:ab:6e:
                    a2:f8:57:1a:e7:e9:ab:64:e1:96:2d:60:97:b0:3c:
                    61:a5:06:98:12:d0:8c:5e:be:95:69:a2:49:ce:57:
                    6c:c8:58:a1:f9:c8:73:d0:6c:2d:7b:c1:9f:a3:7e:
                    e7:f4:a3:a3:5a:78:c6:8d:94:11:a5:f0:67:a0:01:
                    53:c2:92:f9:a7:63:88:3d:ae:7d:ee:1b:93:60:78:
                    5f:70:f6:fd:21:99:d4:ad:ed:42:24:95:d3:e8:f6:
                    99:b8:4d:d0:4e:9e:ad:75:8f:b9:99:c3:e7:71:31:
                    8e:04:36:f1:d4:69:9b:9d:99:d9:0a:56:58:db:86:
                    41:32:a4:c8:02:81:36:c5:2e:8d:d5:d2:ca:63:5a:
                    5c:e3:75:f5:74:a2:41:ea:c4:b1:5c:63:09:0f:12:
                    26:01:4d:bc:d4:8e:c3:a0:c4:2e:f9:a0:50:6a:38:
                    bb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E1:0D:74:9C:E8:9B:FE:C7:18:1A:23:06:B3:01:09:04:9E:B3:F1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b4fab25-7784-4b8c-ae9b-bab51faa4834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.77.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7d:06:77:50:0d:26:a7:70:38:67:d9:92:28:d8:68:be:f7:56:
         70:a0:bd:2c:f3:7b:f7:54:0b:8d:4d:b8:d6:13:c5:9b:79:c4:
         33:2f:1b:91:f0:03:82:12:d7:a5:53:11:76:4f:ef:dc:f4:98:
         ea:67:08:80:b2:0e:e8:58:35:e5:54:07:7c:b5:1a:a4:cc:88:
         ee:06:c8:25:8a:67:98:6a:c5:22:ee:5a:03:00:41:6c:fc:c8:
         d2:fe:fb:f6:d7:54:ba:19:33:2a:49:ea:7c:50:a8:90:fe:e5:
         07:c0:03:5a:0a:62:5d:37:fb:4c:7c:3b:0b:78:ed:d0:15:04:
         20:21:a3:0e:f5:53:92:ef:6d:f1:10:32:10:ad:ac:95:90:50:
         24:ef:5b:1f:03:7d:ff:8f:7a:0c:09:1e:29:8a:1c:b5:24:62:
         ec:a7:c6:98:b8:c6:4b:58:10:8b:4e:58:71:ae:6e:2e:0b:bb:
         2e:19:67:3e:f5:f6:bf:3e:3b:ba:68:ad:1e:aa:d2:64:91:57:
         12:d6:f4:b2:c7:dd:2b:fd:57:27:d0:b4:fd:94:ba:ac:4f:ad:
         b7:23:9a:f3:b9:02:03:ee:6f:09:7f:c5:de:0f:7c:27:f1:0f:
         e1:3d:1d:2e:5b:d4:04:ce:97:ec:65:de:b6:e7:ef:30:b4:d4:
         03:8b:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:06:54 2025 by rpki-client