Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e96848dd-3369-4e73-af27-2bec7ae42c0e.roa
File:                     e96848dd-3369-4e73-af27-2bec7ae42c0e.roa (raw, json)
Hash identifier:          GazUXHboROSAYE65V98Ke++gcrKOzZaxkGT91V8Xlwk=
Subject key identifier:   83:55:CC:82:57:46:36:B0:38:64:DC:D4:2E:01:33:85:9D:EC:FA:DD
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       5828985FBDBFBFB6788FA21330A99F144FCAE565
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e96848dd-3369-4e73-af27-2bec7ae42c0e.roa
Signing time:             Mon 16 Jun 2025 18:50:13 +0000
ROA not before:           Mon 16 Jun 2025 18:50:13 +0000
ROA not after:            Mon 21 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:28:98:5f:bd:bf:bf:b6:78:8f:a2:13:30:a9:9f:14:4f:ca:e5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jun 16 18:50:13 2025 GMT
            Not After : Jul 21 23:59:59 2025 GMT
        Subject: serialNumber=538310a43a50c4ce8099dff39dbad55b1c6440b50cb5f9fa65e219dea38c5ac1, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5d:22:e3:63:60:41:13:91:b4:9a:f2:ba:cf:
                    dd:fb:75:a6:6f:a9:8d:9d:a6:e8:33:85:95:1f:7d:
                    cd:c0:13:43:dc:a0:23:7e:e3:7c:e7:c1:95:32:86:
                    0a:51:d7:08:84:da:31:81:07:e3:5d:d3:47:5d:2e:
                    a5:0b:30:29:49:ae:fa:0d:c4:83:97:75:28:24:37:
                    19:a0:5c:84:3f:c2:3e:ec:55:ea:c9:a5:a6:97:74:
                    79:30:a3:8c:00:2c:c5:03:61:5c:b7:14:9d:92:9c:
                    69:67:9a:b2:7a:ba:1e:78:b7:5a:df:07:ee:f3:8b:
                    44:f8:af:91:39:77:25:6c:7a:89:05:3d:44:5c:28:
                    1f:5b:ff:72:51:7b:1a:80:a8:10:58:41:6d:fa:3f:
                    98:e9:ce:9b:c4:6c:97:b7:83:24:5f:11:84:98:1f:
                    3d:e3:75:f2:02:a0:cf:ee:be:42:ce:86:36:38:96:
                    3f:ab:66:a9:79:29:58:95:22:02:3a:fa:ec:9d:b6:
                    8f:04:89:f0:d2:6b:6e:38:ef:a1:68:48:f0:67:c7:
                    0a:f2:61:04:3e:b3:99:8e:42:d3:38:5f:a8:9e:85:
                    05:f9:06:a7:a2:57:de:c9:14:f6:9f:be:3e:57:28:
                    63:b8:f1:f2:65:6b:f7:f5:24:6b:c9:a0:e7:e5:07:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:55:CC:82:57:46:36:B0:38:64:DC:D4:2E:01:33:85:9D:EC:FA:DD
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/e96848dd-3369-4e73-af27-2bec7ae42c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:b6:d8:85:83:64:5d:9a:bd:82:35:a7:2e:34:a5:4d:05:
         db:cd:93:0f:fd:72:03:7f:e6:94:90:2d:37:11:cf:ac:b9:56:
         79:cc:ae:ba:02:01:89:ea:02:68:7d:59:a0:4d:a3:6b:0a:57:
         7a:e7:04:07:74:06:8d:20:1c:c3:c9:89:c8:00:1a:af:74:27:
         13:5d:b6:c7:ee:f8:6a:fd:92:91:49:86:bf:3f:05:c0:20:ec:
         82:8c:64:7d:58:35:e2:76:ec:67:de:5f:25:07:26:c0:d1:fb:
         aa:1a:7b:cd:a0:0f:ed:9d:e5:70:f8:09:2d:ee:59:05:16:46:
         6a:d2:58:7a:86:ef:69:cc:4d:b8:ac:87:06:dc:65:df:da:31:
         5a:19:2c:c4:02:23:ee:c8:2f:3d:20:70:47:ee:c6:41:c4:22:
         8b:00:dc:72:a2:3e:d6:c9:24:4d:bf:78:dd:4a:05:46:0c:bc:
         32:44:7e:a5:21:49:90:b9:8d:96:f6:4e:21:b9:a5:70:7b:1c:
         db:10:73:c0:02:c4:e2:40:75:15:e9:2e:bf:07:8a:72:60:28:
         63:05:8d:1a:f5:8b:ef:a8:01:18:5a:10:6d:15:a8:c5:9d:ca:
         1f:f9:41:af:61:df:a2:b3:5e:1b:38:81:3b:0d:be:38:22:4a:
         3c:73:86:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 03:38:27 2025 by rpki-client