Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa
File:                     ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa (raw, json)
Hash identifier:          zOYkT0ed98s0xDkge/RZdptOWKT52AuoO0dW8taW4Os=
Subject key identifier:   D7:2C:EF:D0:82:1E:C3:16:DB:05:01:16:82:5F:3A:9B:02:32:1B:9E
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       14A9F9FA3E68247AC044977ED33905F21C88C68E
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa
Signing time:             Fri 26 Sep 2025 00:50:04 +0000
ROA not before:           Fri 26 Sep 2025 00:50:04 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        96.127.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a9:f9:fa:3e:68:24:7a:c0:44:97:7e:d3:39:05:f2:1c:88:c6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Sep 26 00:50:04 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=81ff861273fa7fdf53725ed4467df19e6f9dffb37a1bf5ebd314d7f6091c3f99, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:b8:06:8e:58:86:85:be:af:6d:19:14:94:
                    cb:bc:7f:bd:2d:0c:0e:97:ee:ed:ca:5e:09:e6:6f:
                    8c:ae:df:ff:44:67:68:3b:3d:14:d4:17:2f:ed:11:
                    c9:48:67:c1:29:17:81:52:91:fc:ef:98:7a:25:6b:
                    08:35:a6:58:50:df:53:45:b4:d3:75:6e:cd:87:e1:
                    e8:55:ea:81:7f:cd:76:3f:90:ad:1b:72:0a:15:b0:
                    7b:65:20:b7:a8:25:67:75:b7:4d:a1:4f:03:4c:29:
                    76:07:f9:99:62:3f:9c:f4:ea:20:75:22:9b:fb:36:
                    24:31:88:0f:f8:de:72:b6:c0:80:55:b4:76:39:99:
                    8a:be:9f:04:c5:76:0f:89:13:1e:61:29:99:de:b3:
                    e6:6e:0c:8a:da:b5:8f:57:98:ac:c2:12:fc:47:c5:
                    82:c0:29:2e:94:5b:87:b5:f1:bc:08:c2:e3:93:16:
                    0a:d5:3b:24:6b:4f:3a:3f:d6:d8:61:60:8b:64:bc:
                    78:54:5c:ad:5d:4a:45:0b:8d:a8:69:38:5d:04:ab:
                    47:9d:9f:e3:46:28:23:c7:44:c8:9e:cd:a9:62:e5:
                    39:df:39:2f:de:0e:d0:1c:0d:13:56:42:ff:f5:cb:
                    05:1b:19:e7:10:bd:22:c8:a9:42:c1:38:55:9e:67:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2C:EF:D0:82:1E:C3:16:DB:05:01:16:82:5F:3A:9B:02:32:1B:9E
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         35:2f:b2:41:a8:34:1a:be:75:a1:03:5d:9f:59:bc:40:bd:23:
         f6:b5:f5:9f:34:77:93:be:cc:d0:71:e7:ff:09:99:48:40:07:
         ab:17:26:7d:1d:ff:ed:05:25:4a:50:ab:61:21:85:8c:35:1a:
         24:20:5d:9d:fb:11:bd:25:1e:21:7a:a0:8b:c0:45:4c:ec:33:
         5f:28:14:f1:5d:0e:e3:d4:ec:8d:b7:4f:95:19:0b:a4:f4:89:
         e8:08:5c:1a:3a:12:77:ce:d6:e7:57:5a:57:69:6e:92:dd:bc:
         73:21:06:71:8b:3c:66:5e:0a:27:40:53:44:8a:28:07:6c:b8:
         ea:25:e0:51:32:41:e6:6e:ff:46:98:15:5b:83:58:be:3f:18:
         7d:d3:80:d4:20:6e:9b:01:08:bd:e5:7d:b8:39:03:42:77:c5:
         9b:2a:8a:76:df:0e:a1:e3:db:1c:4d:03:bd:19:b4:f4:62:3e:
         4b:74:01:0b:0c:d7:74:1c:3f:50:b5:5a:f8:d2:98:8e:f3:74:
         a2:78:22:2c:2d:4b:77:34:f3:ce:f4:48:ea:19:be:92:85:4d:
         ce:3d:e0:df:8b:91:d5:db:a5:f2:88:4f:01:16:98:e3:23:90:
         1c:89:55:e5:3a:29:49:62:ea:12:71:cc:11:e8:94:e6:32:7c:
         56:e9:f7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:58 2025 by rpki-client