Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5a85156-56d9-44fe-b845-5494537aa440.roa
File:                     b5a85156-56d9-44fe-b845-5494537aa440.roa (raw, json)
Hash identifier:          ZmPBldmmM/mdgEs52uxAiVyAjPaQTtFeU8qrGr6TvTA=
Subject key identifier:   54:D6:90:28:75:E5:4D:1B:CB:03:C6:DF:A0:7C:73:BD:4B:23:2A:E9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2DCF93E2912BDAB558BAFD5C663E1944EF4E6D34
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5a85156-56d9-44fe-b845-5494537aa440.roa
Signing time:             Tue 12 Aug 2025 15:00:21 +0000
ROA not before:           Tue 12 Aug 2025 15:00:21 +0000
ROA not after:            Tue 16 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:cf:93:e2:91:2b:da:b5:58:ba:fd:5c:66:3e:19:44:ef:4e:6d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug 12 15:00:21 2025 GMT
            Not After : Sep 16 23:59:59 2025 GMT
        Subject: serialNumber=f82fc36006d61b78974679dcca83a4e9740721299b36e1b0bb95fc547e118649, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d6:c0:63:3f:a5:99:d1:d1:77:f9:16:8e:63:
                    a0:77:c8:9f:3e:f2:2f:92:7a:6d:bc:44:d0:b4:43:
                    1a:f4:b1:4b:cb:5d:54:c0:b3:37:53:ae:e0:1e:4d:
                    92:1a:28:5a:e1:10:1d:2c:b0:17:cc:27:b0:90:a4:
                    56:60:40:a7:b0:d7:c0:12:48:f9:4d:60:d8:9f:0a:
                    fb:a5:63:f0:83:9f:89:49:c4:33:e3:2c:66:59:14:
                    58:59:12:a8:47:1b:22:2b:cf:6c:4e:7e:5d:d1:ef:
                    91:45:38:f5:50:86:97:48:89:21:e5:ae:d5:79:0f:
                    06:f0:e2:8d:50:56:ff:c3:92:b1:fe:d7:19:72:c1:
                    a5:fd:aa:81:a2:3e:83:18:91:7d:8d:e8:b0:69:36:
                    ed:d8:9c:71:c6:93:94:d9:f9:8a:99:cf:4c:e7:4e:
                    f7:47:8e:db:fe:d2:18:f2:60:eb:aa:08:24:17:b6:
                    58:63:c3:ae:5f:10:c3:33:c2:22:25:16:cd:19:e5:
                    22:b9:a3:65:bc:db:2c:da:c8:4b:f1:3f:4b:17:73:
                    e5:75:8a:b1:40:4b:f2:19:77:4f:7a:ae:59:0e:26:
                    f3:70:2e:83:bf:f6:52:21:6b:9c:1e:28:4b:1a:e1:
                    6f:00:79:38:23:b8:69:5a:73:c1:a4:ef:8e:23:e2:
                    0b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D6:90:28:75:E5:4D:1B:CB:03:C6:DF:A0:7C:73:BD:4B:23:2A:E9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5a85156-56d9-44fe-b845-5494537aa440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:d1:b8:4f:ae:e9:a3:68:c9:75:60:36:09:73:8f:9a:85:80:
         66:36:b5:b4:52:a9:b6:99:91:31:ee:52:af:11:2c:43:26:51:
         76:f4:a4:ad:6e:cf:08:9b:42:4b:bd:ae:7c:46:f5:c8:85:44:
         b0:82:4e:40:6c:4c:c6:8f:d2:48:09:de:88:d0:a7:50:1a:0e:
         74:a6:bf:a4:ad:62:57:ea:a0:08:7b:76:f2:f7:df:a3:fa:37:
         a3:f2:08:37:da:a4:a3:9f:59:3e:01:f2:7f:fd:4d:fc:ee:2e:
         94:9a:ec:14:17:39:3d:f8:15:f6:a0:42:fa:c1:71:fa:cd:1f:
         8e:0b:df:69:f1:cf:7b:27:b6:7e:2d:f0:3f:4a:89:70:04:0d:
         fd:91:ed:25:41:d6:68:9b:f5:d9:ea:48:1c:fe:aa:71:c9:7e:
         98:cf:f1:ae:80:52:05:4c:79:01:e3:a8:17:16:93:2e:15:97:
         56:d3:2b:66:90:d9:61:42:23:67:99:6b:4a:08:43:e9:c5:02:
         a2:88:47:da:29:0a:e8:0b:f3:d8:e4:84:95:4c:5c:e6:b9:ab:
         43:80:08:9f:52:59:41:75:b7:6f:63:2b:74:9f:a2:ee:3b:1a:
         c9:14:b0:a4:48:b0:43:09:93:30:70:43:9a:a4:4b:86:4a:f0:
         5b:a1:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:13:03 2025 by rpki-client