Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dd2d960-d24c-43fe-b097-eed3b0589eaf.roa
File:                     7dd2d960-d24c-43fe-b097-eed3b0589eaf.roa (raw, json)
Hash identifier:          KGGKfW1pxvrwPdbBax5tKlc2fJRlOLJvrKRxunM3rZk=
Subject key identifier:   6D:63:02:10:AD:91:A8:C6:FC:17:1C:F5:A2:CE:CA:5C:05:9F:F8:D7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3EC95714904038F7108EB6C550CC8E4FB8B0A03F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dd2d960-d24c-43fe-b097-eed3b0589eaf.roa
Signing time:             Tue 19 Aug 2025 00:31:45 +0000
ROA not before:           Tue 19 Aug 2025 00:31:45 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c9:57:14:90:40:38:f7:10:8e:b6:c5:50:cc:8e:4f:b8:b0:a0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 19 00:31:45 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=2db2b0619fb76c03c9afcf15eca48756d0715adbe1694d84168f5dc38d494937, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:f2:95:be:79:3d:d1:37:0e:fb:94:74:d9:
                    4b:10:19:99:60:6c:19:4e:d2:16:4a:cb:f0:81:1b:
                    e0:f1:53:b9:71:5b:21:cc:c6:83:ad:84:f6:7c:a7:
                    85:62:47:4e:c3:7b:1b:a9:2b:d8:b2:35:4d:db:8e:
                    e4:c6:56:7e:ce:60:fa:f1:cd:dd:3a:e6:98:41:a8:
                    86:e1:72:6d:73:d7:31:32:ce:2d:16:63:7b:29:c5:
                    f3:21:7f:3e:77:ca:81:0f:2e:7d:d8:8c:f3:0b:5e:
                    74:89:78:b8:e2:fe:a8:47:52:0a:c3:c3:60:47:85:
                    ae:31:cb:ba:52:19:03:17:05:68:a5:92:b8:ad:0e:
                    83:fa:6c:99:c6:07:3c:7e:5c:6c:58:a8:4b:cc:a8:
                    15:5b:09:05:77:f1:8c:95:1e:dd:31:d0:30:cf:b7:
                    1f:74:d3:fd:c4:ed:e4:f0:99:09:f7:0e:bd:17:3d:
                    a8:92:58:fe:ba:9c:fb:18:8a:32:52:45:b2:a0:8b:
                    1c:fa:78:5e:10:ec:f8:d7:f1:e2:c1:10:1c:67:a8:
                    74:98:88:dd:d4:37:8c:0d:fd:20:90:b2:68:bf:a2:
                    99:aa:a6:67:4e:aa:0c:33:cf:79:ad:90:54:b0:a9:
                    5e:ba:0e:d4:b1:d8:2e:a5:2f:17:64:25:02:16:37:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:63:02:10:AD:91:A8:C6:FC:17:1C:F5:A2:CE:CA:5C:05:9F:F8:D7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dd2d960-d24c-43fe-b097-eed3b0589eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c3:f1:04:e6:22:60:67:63:28:9d:af:b8:90:8e:ad:c5:8e:76:
         bb:4b:7a:8b:68:88:47:20:66:0c:f3:4b:18:6d:15:5b:6e:f9:
         e6:56:1d:af:ec:16:fd:70:60:c9:ff:12:0b:b6:0f:22:aa:3f:
         40:08:3d:63:e6:42:52:44:55:05:f1:1e:c4:b5:71:f2:d7:ef:
         fb:f5:ca:68:14:e2:f9:f8:70:07:78:0f:01:f8:11:4c:d6:75:
         6a:55:38:66:4d:0e:3c:52:c8:08:6b:d5:06:27:9f:4e:f7:24:
         0f:c1:67:80:8c:da:f8:ec:8d:f5:bf:6c:83:ef:dc:b3:09:b2:
         06:91:dc:42:f4:f8:08:ea:17:2d:c7:cd:2e:2a:50:de:6f:52:
         6f:fd:b0:60:47:f8:28:4b:4b:9a:61:38:0a:b4:3b:c6:6e:59:
         fa:b6:d8:d2:98:7c:f4:30:b0:7e:7f:47:c4:57:59:1b:e2:ff:
         1e:01:c1:b5:2c:c0:a7:e9:87:dd:12:07:08:3a:67:9c:ab:8b:
         a5:6c:5d:57:b9:70:93:08:d6:ac:a5:48:7d:97:46:6e:01:31:
         53:de:c8:2a:8e:bb:88:1f:c0:a5:3f:87:30:b8:9a:1b:6c:af:
         f2:3e:7f:41:41:1f:d9:68:e8:ac:b4:07:30:80:30:c7:df:0a:
         2b:e7:71:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:44:39 2025 by rpki-client