Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e41be3ce-ed0e-4c7e-a9fd-4114901fa40b.roa
File:                     e41be3ce-ed0e-4c7e-a9fd-4114901fa40b.roa (raw, json)
Hash identifier:          i6Psv70wu7XkQERREgUOexy6xPI+OCDGlN0bErUtWA0=
Subject key identifier:   CA:D8:24:94:5E:AF:2D:BB:63:A8:74:77:7D:2C:8F:BA:B7:80:C1:85
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       7C97F54948997E951B8DE1372C2CD8A8365B907B
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e41be3ce-ed0e-4c7e-a9fd-4114901fa40b.roa
Signing time:             Tue 06 May 2025 00:20:07 +0000
ROA not before:           Tue 06 May 2025 00:20:07 +0000
ROA not after:            Tue 10 Jun 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:97:f5:49:48:99:7e:95:1b:8d:e1:37:2c:2c:d8:a8:36:5b:90:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May  6 00:20:07 2025 GMT
            Not After : Jun 10 23:59:59 2025 GMT
        Subject: serialNumber=c8774d7c69c1e70b12057856f89eb6e4ca386240adb8f8e80914dc2af67f05a0, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:c7:d6:ba:1f:f6:e0:45:8c:f9:e2:52:40:
                    47:05:d4:d7:73:13:f0:cd:92:3b:3a:da:a9:cc:41:
                    38:6a:db:a8:23:c9:7d:59:a5:0d:bc:f4:5f:ea:44:
                    85:27:e7:ae:7c:fc:70:3c:bc:fb:9c:b3:2e:8b:48:
                    ee:90:32:02:34:33:75:0e:26:61:2b:e0:e3:21:a2:
                    6d:3d:53:f7:6a:06:01:4a:62:37:45:df:5a:21:e7:
                    c0:07:38:07:23:25:d6:1c:0e:5b:bf:d9:c8:77:b7:
                    e9:b6:24:b0:40:98:a3:90:07:7c:56:05:68:d9:17:
                    bb:9f:44:6f:b1:98:94:60:e1:4c:87:13:65:9f:ad:
                    04:8e:39:93:20:37:14:e0:93:b1:3b:fc:7b:46:09:
                    eb:74:40:22:8f:9b:a1:81:41:7c:f6:2f:ca:a9:70:
                    ef:61:a2:90:de:03:d7:00:27:b7:ed:03:d8:09:5a:
                    93:0b:84:f7:78:73:12:1d:a7:0d:ab:7d:e5:ae:58:
                    00:29:3c:4f:59:12:8a:9b:31:66:d5:0b:78:0a:2e:
                    1f:a3:29:b1:dc:b9:01:2a:fd:49:2d:00:db:62:b4:
                    63:00:27:84:bf:d9:2b:0f:5f:39:92:de:f9:d6:bd:
                    1e:44:6e:e7:8f:4e:f3:e0:13:5b:b9:7a:dc:37:2d:
                    71:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D8:24:94:5E:AF:2D:BB:63:A8:74:77:7D:2C:8F:BA:B7:80:C1:85
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e41be3ce-ed0e-4c7e-a9fd-4114901fa40b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a9:50:3a:3a:81:08:c4:57:77:9c:87:bf:c7:1a:2e:d0:e8:1d:
         b5:dd:e6:3c:37:ba:e4:b7:67:1c:ed:41:f5:85:70:ac:64:50:
         89:b8:5e:93:3f:f3:0c:14:b4:d3:98:b8:62:a6:94:98:2c:cb:
         a6:75:83:b8:51:be:db:93:c6:fe:5d:38:d4:c3:9c:6e:d2:c9:
         08:0d:b3:3d:8e:4d:7b:43:75:7f:59:91:38:3d:c3:ba:99:9b:
         ea:33:49:c4:54:67:a2:c7:61:7c:62:1e:f6:b0:73:26:c4:cf:
         f8:90:66:31:74:bf:89:e3:67:5d:16:fc:56:54:57:b3:d4:0c:
         93:67:f1:91:80:4d:a3:f1:ef:73:b3:04:1a:d5:00:5b:ca:4a:
         59:2a:be:b1:fe:af:d6:c1:d9:01:ce:cf:81:cf:28:3f:37:05:
         e0:f8:13:b3:e8:3b:63:d4:d7:ba:4e:80:48:aa:98:fd:98:dc:
         59:d2:de:cb:83:3d:0c:fe:9f:ca:db:7f:a6:0b:43:1a:7c:06:
         97:8d:42:d7:62:e7:8f:4f:b0:40:64:05:7c:d4:26:f3:7c:d7:
         73:39:90:0a:64:5d:41:64:81:4f:4b:f7:bb:dd:79:85:34:62:
         31:df:9a:b9:53:ba:dd:e2:cf:1c:cc:30:bd:25:cc:0e:af:5f:
         9d:63:a4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:27:09 2025 by rpki-client