Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78cc0850-e74b-494e-9a5a-1749dccc6974.roa
File:                     78cc0850-e74b-494e-9a5a-1749dccc6974.roa (raw, json)
Hash identifier:          9w3zMQWNCdP/HZWzKo0le0030Lv8H+CeQYRPvFyJSo0=
Subject key identifier:   B1:34:39:9B:03:28:7C:50:C9:27:76:3C:CF:06:E9:84:08:49:B3:F3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       74EBA9B38A2B329E1B01F6DEE581A25EAB8463A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78cc0850-e74b-494e-9a5a-1749dccc6974.roa
Signing time:             Sat 19 Jul 2025 00:42:00 +0000
ROA not before:           Sat 19 Jul 2025 00:42:00 +0000
ROA not after:            Sat 23 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:eb:a9:b3:8a:2b:32:9e:1b:01:f6:de:e5:81:a2:5e:ab:84:63:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 19 00:42:00 2025 GMT
            Not After : Aug 23 23:59:59 2025 GMT
        Subject: serialNumber=c9d2bbf8061ed5e39296e030a6af00c321862b8d0c4096aba8412f2df35698c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:02:9a:a0:43:3a:80:ee:8c:78:4f:76:44:
                    c4:77:41:df:e0:c6:f2:ba:e7:71:ed:d5:d9:2b:32:
                    db:62:2d:c1:1d:13:dc:68:22:00:7f:fd:f3:0d:06:
                    bf:00:35:85:8e:82:88:2b:35:3d:ec:07:e3:af:33:
                    55:40:f5:3d:cc:8a:52:96:23:33:6c:83:f2:40:a4:
                    f3:3e:30:6e:e6:e1:75:ea:0e:c0:1a:7a:46:9e:ed:
                    ae:1e:90:a3:dd:20:e3:a2:60:19:1b:7a:6a:49:0c:
                    5c:46:e9:27:6f:2f:c3:40:56:d9:90:80:25:d7:87:
                    40:09:09:4c:53:19:20:29:d5:2f:51:e0:94:5f:6a:
                    2d:12:42:c2:40:51:cf:8a:ad:28:0b:8e:a1:9b:28:
                    cc:07:2e:6f:6c:c1:88:87:4a:fc:fd:e0:58:11:95:
                    34:74:bb:b9:4b:1d:a0:40:86:d1:44:d8:f0:35:e4:
                    43:8e:2e:d9:5b:53:2a:37:a5:8d:1a:b0:e9:7b:16:
                    5f:f5:d0:38:e0:bf:26:8a:9e:70:ae:60:f6:c4:8c:
                    f0:52:e3:4d:f0:62:3c:05:12:26:46:76:d3:15:5e:
                    3f:91:65:d0:ba:41:69:34:36:8d:b5:ad:bc:53:17:
                    fe:97:68:9e:47:54:52:75:61:6d:9e:f0:66:d8:29:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:34:39:9B:03:28:7C:50:C9:27:76:3C:CF:06:E9:84:08:49:B3:F3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78cc0850-e74b-494e-9a5a-1749dccc6974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:cb:96:fa:e1:73:dc:c7:9d:3d:c0:4a:23:22:29:e8:17:41:
         8c:f7:f8:31:b4:10:30:49:cf:32:c7:83:24:e1:a7:8c:a2:be:
         dd:31:68:8a:fb:a4:ea:25:d3:1e:31:1d:3f:42:e7:62:99:b2:
         14:32:8c:c4:d8:88:7b:89:23:ba:2c:1e:27:75:29:7f:9b:b8:
         00:e1:49:58:87:e3:5d:67:d7:ca:bc:a1:7a:b4:32:d3:be:15:
         6a:6a:d1:6e:72:e2:56:48:3b:03:ad:6a:08:b3:8b:94:75:7b:
         24:1b:5a:4c:1f:00:de:c8:be:c0:93:6d:0b:6b:36:07:24:88:
         1e:8e:17:98:bf:25:77:59:a3:95:b5:2a:12:8e:46:99:6e:3b:
         75:78:d7:ad:5e:6e:02:be:c6:bf:8f:7c:4b:cc:f8:9a:6e:b9:
         1d:e6:83:71:62:89:0e:0a:af:dc:c6:a5:59:a2:2d:a4:a1:c8:
         66:47:94:45:95:b1:ce:11:40:4f:85:dc:c2:1d:35:d2:84:e7:
         77:9e:c0:6c:b7:f6:9a:06:a5:31:17:98:18:7e:d8:7b:09:0c:
         81:41:af:4c:f9:67:28:c8:a9:6d:4b:c2:9e:c9:ce:f4:a4:e4:
         dc:a5:b3:02:91:e0:a4:76:bf:fc:ab:95:91:6a:a6:8d:bb:14:
         21:ce:d3:a6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdOups4orMp4bAfbe5YGiXquEY6YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE5MDA0MjAwWhcNMjUwODIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjOWQyYmJmODA2MWVkNWUzOTI5NmUwMzBhNmFmMDBjMzIx
ODYyYjhkMGM0MDk2YWJhODQxMmYyZGYzNTY5OGMwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCv+gKaoEM6gO6MeE92RMR3Qd/gxvK653Ht1dkrMttiLcEd
E9xoIgB//fMNBr8ANYWOgogrNT3sB+OvM1VA9T3MilKWIzNsg/JApPM+MG7m4XXq
DsAaekae7a4ekKPdIOOiYBkbempJDFxG6SdvL8NAVtmQgCXXh0AJCUxTGSAp1S9R
4JRfai0SQsJAUc+KrSgLjqGbKMwHLm9swYiHSvz94FgRlTR0u7lLHaBAhtFE2PA1
5EOOLtlbUyo3pY0asOl7Fl/10DjgvyaKnnCuYPbEjPBS403wYjwFEiZGdtMVXj+R
ZdC6QWk0No21rbxTF/6XaJ5HVFJ1YW2e8GbYKQ1xAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsTQ5mwMofFDJJ3Y8zwbphAhJs/MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc4Y2MwODUwLWU3NGItNDk0ZS05YTVhLTE3NDlkY2NjNjk3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTbcwDQYJKoZIhvcNAQELBQADggEBAIfLlvrhc9zHnT3ASiMiKegXQYz3
+DG0EDBJzzLHgyThp4yivt0xaIr7pOol0x4xHT9C52KZshQyjMTYiHuJI7osHid1
KX+buADhSViH411n18q8oXq0MtO+FWpq0W5y4lZIOwOtagizi5R1eyQbWkwfAN7I
vsCTbQtrNgckiB6OF5i/JXdZo5W1KhKORpluO3V4161ebgK+xr+PfEvM+JpuuR3m
g3FiiQ4Kr9zGpVmiLaShyGZHlEWVsc4RQE+F3MIdNdKE53eewGy39poGpTEXmBh+
2HsJDIFBr0z5ZyjIqW1Lwp7JzvSk5NylswKR4KR2v/yrlZFqpo27FCHO06Y=
-----END CERTIFICATE-----
Generated at Sat Aug 9 03:01:17 2025 by rpki-client