Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f3cc807-8e8e-4c91-b344-9f6fe0506248.roa
File:                     1f3cc807-8e8e-4c91-b344-9f6fe0506248.roa (raw, json)
Hash identifier:          EUwd6k6opVsSSjf0Vbw3QXWXkBTpIKt2R0hPsjUwfIg=
Subject key identifier:   53:45:EC:9F:E9:6A:23:7D:63:73:19:17:17:2A:86:E1:D2:1F:F2:50
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7BDB574D3C1358BBAA2326870BBC0CD1464E23C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f3cc807-8e8e-4c91-b344-9f6fe0506248.roa
Signing time:             Wed 04 Jun 2025 00:40:27 +0000
ROA not before:           Wed 04 Jun 2025 00:40:27 +0000
ROA not after:            Wed 09 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:db:57:4d:3c:13:58:bb:aa:23:26:87:0b:bc:0c:d1:46:4e:23:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun  4 00:40:27 2025 GMT
            Not After : Jul  9 23:59:59 2025 GMT
        Subject: serialNumber=4021279709c1cde55e9057e11f22a570aac28d4e2b308495ae5e38bbf9aff590, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:43:df:88:9d:66:65:c3:a3:70:1c:14:c0:
                    82:64:b1:31:0f:96:e8:6e:02:10:62:52:80:81:26:
                    f1:72:a3:56:46:e1:8d:c8:c1:ce:5c:58:68:6c:56:
                    9d:2b:67:c0:b6:33:37:58:88:f3:00:b9:80:56:47:
                    eb:31:1e:a8:8b:9b:16:89:af:66:82:67:67:d3:1a:
                    dd:e5:df:7e:31:d2:09:e7:fb:89:02:e0:db:15:d5:
                    84:92:09:3e:85:6e:19:57:df:6e:02:1f:78:75:c4:
                    ce:a1:21:9c:09:4c:03:ea:7f:9a:04:ce:5e:6a:4b:
                    61:70:61:b6:94:d5:ab:ed:68:a6:04:39:4b:37:ef:
                    1f:bb:20:4a:8d:8b:2e:77:54:c4:a8:05:c6:1f:84:
                    68:32:cc:c2:3c:78:cc:e1:30:cf:e9:aa:b2:84:10:
                    a4:b0:de:4d:93:3a:e9:c9:e7:2e:6d:6c:44:51:3d:
                    aa:4f:12:19:84:f9:16:a6:0e:27:ad:56:48:36:42:
                    a5:6b:0a:5f:16:ed:e9:01:bc:23:bc:ce:db:b6:28:
                    4d:c7:6f:40:f6:7b:e6:66:e4:5a:08:40:42:ff:55:
                    15:ca:ec:be:7a:a5:09:c3:d1:b6:a9:de:69:40:40:
                    b7:a8:34:34:2a:06:50:be:9f:24:31:c3:d6:d5:d9:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:45:EC:9F:E9:6A:23:7D:63:73:19:17:17:2A:86:E1:D2:1F:F2:50
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f3cc807-8e8e-4c91-b344-9f6fe0506248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:5c:7b:86:c1:26:52:d2:c3:aa:61:b3:6c:d8:17:63:ee:
         00:15:58:24:41:fd:42:30:f5:d5:71:ab:9c:f7:9d:8f:40:eb:
         c9:cd:46:b3:d7:03:d5:18:33:7e:c5:37:ce:d7:fd:41:11:3a:
         6c:dd:16:76:ba:57:57:bc:d3:33:b7:1f:ff:e5:89:fc:22:79:
         62:44:f2:9b:18:00:a7:f0:cc:d9:8e:32:03:ef:45:09:4c:e7:
         bd:0f:0d:76:45:1d:57:f7:60:68:e8:92:8c:30:22:db:8d:6d:
         fd:aa:32:41:ea:3d:82:fd:b3:f2:8a:49:fb:f6:05:e5:e9:12:
         a5:c2:90:7c:be:fe:00:ad:83:20:81:a5:e3:56:b0:05:87:47:
         c5:e2:3e:e0:cf:a1:84:5b:a9:97:6a:70:ab:26:70:4e:96:09:
         9f:0a:fc:0a:81:4b:66:ed:89:bd:ec:f9:c8:24:43:1c:8d:b6:
         c0:f1:c3:f2:bb:eb:c1:70:bd:4b:7b:e9:6b:05:a5:2c:92:62:
         87:03:c6:85:eb:d1:1c:de:aa:80:e7:4b:89:53:1a:67:e3:57:
         c3:68:42:87:ea:01:6a:d7:b8:06:f2:20:f7:b5:16:c2:46:3a:
         e3:b9:1f:82:08:86:4f:a2:97:cb:a0:52:d2:c8:a5:fd:8c:bb:
         cd:90:50:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:02:55 2025 by rpki-client