Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/716035e6-da4b-468b-ab9f-cd3cf32befda.roa
File:                     716035e6-da4b-468b-ab9f-cd3cf32befda.roa (raw, json)
Hash identifier:          eyKoprGLeYmJvC/E3dWbpt9oXBYkhlUk19eP44jzr3A=
Subject key identifier:   D4:7C:0A:C9:96:86:DA:E1:D8:DE:54:05:F4:27:94:8F:50:E7:4D:97
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6090A3F2A33305E4C5436914CCDD1F49EF1711E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/716035e6-da4b-468b-ab9f-cd3cf32befda.roa
Signing time:             Fri 30 May 2025 00:42:13 +0000
ROA not before:           Fri 30 May 2025 00:42:13 +0000
ROA not after:            Fri 04 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:90:a3:f2:a3:33:05:e4:c5:43:69:14:cc:dd:1f:49:ef:17:11:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 30 00:42:13 2025 GMT
            Not After : Jul  4 23:59:59 2025 GMT
        Subject: serialNumber=7052592e0f565cf59e54b36b12656bc5a5e6e4a4c537c09269f966ec440d548b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:fa:bf:cd:da:6a:e1:ec:7e:b8:90:0d:f7:
                    d2:07:b8:a9:62:99:7f:95:59:a1:4b:ac:87:b0:57:
                    2f:a0:b6:d9:30:c4:27:fa:04:1b:fe:92:b9:8d:1a:
                    91:a2:e1:13:52:9a:f1:f7:8d:6c:9c:c4:e1:56:9d:
                    3c:50:57:0d:ea:99:ec:ed:45:79:a0:f2:0f:dc:e2:
                    6e:80:ae:1e:0b:b8:c7:69:7f:f5:50:b8:7b:8e:bd:
                    a8:bc:2b:0a:f1:e7:bb:68:50:2f:f9:85:97:fe:5a:
                    36:ee:c3:45:85:11:51:ea:43:20:5b:a4:a5:fd:70:
                    04:5e:7a:6b:23:dd:79:0e:fc:32:90:03:4b:06:6e:
                    5d:17:61:72:46:54:27:17:29:89:cd:83:16:6a:80:
                    e0:19:2c:80:7a:d3:b5:55:74:8e:1a:c6:79:3f:4d:
                    5b:2d:2f:f1:c8:19:60:df:b8:9d:8b:fa:6f:59:7d:
                    ad:d1:42:72:71:ba:88:6c:24:5f:47:ab:2a:69:13:
                    9f:dc:14:6d:78:aa:7c:bc:bc:7d:12:4d:23:f2:77:
                    8e:42:59:ad:68:d2:fa:9d:f4:13:d8:03:25:40:7d:
                    93:a7:6e:5d:8e:23:fa:73:38:0c:17:9a:80:f6:69:
                    ae:02:27:19:b6:e9:ca:de:1b:0d:f1:d9:75:24:a7:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7C:0A:C9:96:86:DA:E1:D8:DE:54:05:F4:27:94:8F:50:E7:4D:97
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/716035e6-da4b-468b-ab9f-cd3cf32befda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a1:8c:fa:1c:7d:02:8d:24:72:a7:79:a7:a5:4b:b9:62:b4:
         6d:c8:f6:e1:8c:9f:bf:b0:ba:28:18:e4:63:03:b7:55:7f:9a:
         39:1a:87:28:79:6d:5a:76:46:85:8a:47:5e:44:a9:05:d6:ba:
         56:5a:b8:9a:b5:d8:70:67:c0:cf:c6:7b:87:f0:f6:24:2f:b7:
         92:ec:31:1b:81:ec:8e:a9:9c:e9:8c:5c:40:4f:ed:19:87:c3:
         a6:11:e7:e7:77:17:d1:d2:a9:db:19:23:ef:6c:88:c9:aa:46:
         ce:b6:54:70:ca:34:7b:7f:aa:13:15:a1:83:8a:66:1f:81:3e:
         46:a8:da:c0:0d:87:5d:4e:4b:6c:86:03:4d:95:05:b9:ec:0f:
         b4:3e:cf:f6:85:08:be:28:9b:a9:fc:8a:88:45:1d:f1:02:59:
         a7:d2:86:62:ff:9f:78:08:2e:2d:6f:75:12:84:41:a8:46:5a:
         a4:90:44:a9:5d:3f:42:aa:ab:b9:21:e8:25:d6:14:07:20:22:
         db:0f:5c:f1:0b:59:d3:46:09:ca:58:21:1c:ba:ab:2a:b6:50:
         c5:bc:3a:02:f0:ea:49:9d:9f:fc:4b:c1:d2:bb:1c:89:9c:86:
         c9:ec:d4:6c:d1:8f:65:3e:7d:c6:06:54:96:eb:cd:31:d6:61:
         c0:9d:48:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:39:38 2025 by rpki-client