Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6554cd-810f-493f-bc11-5ac0cedcef7b.roa
File:                     1c6554cd-810f-493f-bc11-5ac0cedcef7b.roa (raw, json)
Hash identifier:          Zkzw4GxyK01lxhqBQycU2artemZVC9JaXGtLvBhqDLU=
Subject key identifier:   C6:DC:2A:87:7C:59:0E:E9:BF:ED:4E:72:09:98:77:C1:B1:E3:76:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5792BED8E8F595E637CC642CF57E248A4BE0914D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6554cd-810f-493f-bc11-5ac0cedcef7b.roa
Signing time:             Sat 19 Jul 2025 00:51:07 +0000
ROA not before:           Sat 19 Jul 2025 00:51:07 +0000
ROA not after:            Sat 23 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:92:be:d8:e8:f5:95:e6:37:cc:64:2c:f5:7e:24:8a:4b:e0:91:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 19 00:51:07 2025 GMT
            Not After : Aug 23 23:59:59 2025 GMT
        Subject: serialNumber=7c3732d0ef8641cf7c35481b94efef062ca5da3f7d5227507531c838d7c7b80a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:e5:70:00:67:53:1a:8e:8b:47:44:58:87:
                    09:5b:42:1b:ab:21:29:7d:6f:28:ea:bd:47:58:de:
                    76:0b:5f:1e:e0:64:55:ee:f1:2c:8e:78:fa:1f:9a:
                    4d:c7:7e:5c:06:61:4f:ff:3f:8a:41:37:68:ad:86:
                    c8:71:1d:69:aa:d4:29:31:54:4e:8e:6a:bb:5a:d4:
                    ba:48:4c:72:04:87:8f:cd:63:0e:9c:8d:3e:e9:40:
                    83:f3:fb:ba:56:d8:30:df:02:1d:cd:b0:6a:31:1c:
                    44:09:b2:37:4f:db:a8:18:c9:f7:8c:29:45:6c:29:
                    c8:15:55:d6:31:b8:d6:9f:c2:96:bf:82:5d:a6:f6:
                    36:ec:cc:2c:ad:29:dd:67:39:1a:9c:2b:13:23:02:
                    68:78:7a:64:c8:c8:8a:d8:28:f6:98:6a:69:17:44:
                    07:eb:94:42:42:1c:fb:f3:d2:b5:ca:c6:8f:2d:02:
                    f3:10:b2:51:1b:80:13:9d:7e:50:ec:ce:10:41:51:
                    1f:39:d2:49:f6:1e:fb:3f:ec:0d:c8:7a:32:ad:ed:
                    36:f9:55:9c:a0:c4:bf:27:2c:95:14:4b:8d:06:c1:
                    43:0b:e2:52:73:83:7c:f8:e7:fd:74:bc:86:05:d6:
                    14:c7:59:09:a8:cc:11:6d:da:d6:cf:3b:bf:d6:c6:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DC:2A:87:7C:59:0E:E9:BF:ED:4E:72:09:98:77:C1:B1:E3:76:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6554cd-810f-493f-bc11-5ac0cedcef7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:32:2c:4f:19:fd:3e:3f:95:f2:27:6f:81:87:ed:59:19:99:
         ea:fa:8c:35:9e:cd:32:8a:1a:27:8c:74:f9:3d:97:57:ae:c7:
         cc:9e:2e:99:57:a4:9d:89:88:b8:6b:5f:a1:b4:f9:ff:1b:22:
         80:84:34:64:91:a9:c7:e3:fe:e2:1c:12:af:54:c8:5d:00:a7:
         5d:72:59:91:91:33:ad:a2:d8:b2:a9:55:67:ee:08:d2:2d:a2:
         2e:6d:db:47:5c:67:bb:33:fe:71:9b:9f:8a:52:16:c9:d4:7c:
         5e:21:f8:77:8a:82:80:f3:0d:6c:d5:8e:70:7c:67:bb:8b:b6:
         91:b1:20:ec:be:58:fd:57:45:22:a4:0e:6b:62:fe:fc:fc:96:
         9d:52:c3:28:e6:27:82:48:41:4d:16:01:34:03:45:23:03:59:
         75:53:f5:96:a0:cb:41:da:8d:0d:16:5b:38:bf:77:05:9a:f2:
         30:82:18:dc:f9:98:5b:5e:05:bd:85:8e:e4:f8:01:63:9a:96:
         70:04:cc:5d:51:64:43:92:f3:b6:ab:b2:f0:b7:cb:a0:d6:56:
         8b:71:34:cb:01:6d:23:80:a4:73:8a:d7:b2:68:d1:c2:75:34:
         ca:23:98:c8:a7:94:19:92:ec:9f:46:c0:f9:02:f9:9b:37:6c:
         98:35:75:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:26:13 2025 by rpki-client