Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a826b4c5-814a-445f-a0db-f0f6c166ab63.roa
File:                     a826b4c5-814a-445f-a0db-f0f6c166ab63.roa (raw, json)
Hash identifier:          15nTYYPK3WJQrX31qr86KMMkKzDGzshTymrDIuQrAsw=
Subject key identifier:   CD:67:F2:9F:A1:E6:74:CE:5A:3F:73:C9:68:BF:81:19:07:BF:4E:C6
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       1E7EAF7A125AEFC4D2F2FF70828D210B09B04AC9
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a826b4c5-814a-445f-a0db-f0f6c166ab63.roa
Signing time:             Mon 16 Jun 2025 18:50:45 +0000
ROA not before:           Mon 16 Jun 2025 18:50:45 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7e:af:7a:12:5a:ef:c4:d2:f2:ff:70:82:8d:21:0b:09:b0:4a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun 16 18:50:45 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=18874999a8cd92b5fd9273ca3b153ba219c4a87e9d82ea7759883c978657c181, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:ed:b0:6b:a8:b1:30:15:8c:30:02:b1:27:
                    7c:91:f6:13:32:f8:1f:d5:44:6d:61:d1:63:9d:f6:
                    96:01:a0:21:84:53:5c:1d:cc:37:d2:a0:bd:f0:55:
                    5e:e8:e1:0f:b7:64:8d:fe:ca:f4:6c:45:e6:fa:63:
                    59:a3:30:bf:5d:89:07:c8:21:04:e5:79:37:0c:09:
                    a3:35:6b:1d:17:07:5f:ed:cf:cd:0b:10:47:f6:3d:
                    87:18:ec:7c:45:0f:96:20:ef:a7:0a:d9:cf:5a:a1:
                    4e:3d:0d:78:aa:b1:43:a4:6c:6e:44:50:c2:1c:b6:
                    7e:32:e1:72:92:10:35:93:f3:f5:f4:7c:71:94:cd:
                    ec:e9:1f:2d:5a:ed:b6:15:9d:e7:c7:e0:3d:3a:95:
                    c7:fa:96:c7:19:7a:09:fc:17:5d:97:b9:a4:f3:99:
                    09:0a:eb:da:d6:60:fe:79:b9:ba:6b:00:6b:ec:f9:
                    9c:dc:32:61:14:02:79:f9:7d:0b:1e:08:64:9d:62:
                    32:0f:d3:f0:12:d6:95:24:54:03:20:06:a2:da:d1:
                    7c:ee:b2:7a:44:77:11:b3:16:90:a8:0f:aa:9a:98:
                    1b:e5:05:b3:24:01:03:9f:4e:bd:f8:4b:7c:16:43:
                    69:74:4c:f3:bb:10:45:bb:8a:98:05:05:b2:88:37:
                    5f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:67:F2:9F:A1:E6:74:CE:5A:3F:73:C9:68:BF:81:19:07:BF:4E:C6
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a826b4c5-814a-445f-a0db-f0f6c166ab63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:52:9e:3c:9c:40:e7:e4:48:cd:89:f1:02:ec:d5:05:6d:3b:
         0e:19:8b:3d:29:92:b6:db:50:50:62:bb:af:3d:ba:6f:ac:74:
         1a:ce:e8:d3:f0:65:7a:1e:dc:ae:f9:50:b0:0b:c8:6b:4a:96:
         39:af:a1:1d:7d:bd:72:14:52:fa:7f:7a:e6:49:5a:83:79:d7:
         53:d1:61:40:94:46:9f:0d:ff:e7:7d:5f:d3:fa:6b:d6:fe:aa:
         e6:11:81:77:70:ac:75:d6:a6:af:f7:f8:ad:a8:fe:dd:db:7f:
         3e:0f:b7:61:b0:e4:28:02:da:f8:39:c7:13:e3:f8:d0:65:43:
         fc:fe:ea:cb:8b:61:94:b8:7a:06:35:90:cc:12:16:ed:65:2f:
         6e:b6:77:74:40:54:b5:00:79:e1:8d:7d:76:2c:f5:ec:08:16:
         bb:e5:38:2f:8e:9e:77:54:ab:9d:e8:b6:7d:10:d4:aa:2a:a1:
         8f:e2:ec:74:af:c4:5d:45:81:c6:bb:f0:9d:dd:85:fb:49:71:
         85:81:80:38:5d:a1:05:98:c0:f0:14:ef:e2:4a:d3:2c:ae:1c:
         60:4b:64:0a:00:3c:12:de:56:50:bb:de:66:5e:14:91:f1:fc:
         36:9d:cf:cd:d3:ae:4a:95:e3:43:24:fd:65:1b:de:63:db:88:
         11:d1:92:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:54:05 2025 by rpki-client