Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/83b18734-ee3d-465a-8a60-c10fbb2c821d.roa
File:                     83b18734-ee3d-465a-8a60-c10fbb2c821d.roa (raw, json)
Hash identifier:          qUp3CKK60h9k1z+fsHYykdo6Ix6DSuCWha+dNovD8HY=
Subject key identifier:   65:2D:B6:86:9E:0C:A5:ED:7E:5D:8A:F1:FE:18:3F:A0:84:EB:F6:EA
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       75BC7557E57DF7D8F7CA1FC0827B26EF9A8A4D0D
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/83b18734-ee3d-465a-8a60-c10fbb2c821d.roa
Signing time:             Tue 05 Aug 2025 15:00:51 +0000
ROA not before:           Tue 05 Aug 2025 15:00:51 +0000
ROA not after:            Tue 09 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        96.127.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bc:75:57:e5:7d:f7:d8:f7:ca:1f:c0:82:7b:26:ef:9a:8a:4d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Aug  5 15:00:51 2025 GMT
            Not After : Sep  9 23:59:59 2025 GMT
        Subject: serialNumber=96e15dc9f5366b9f9f2ebf159ab74984ed0ffc5c82e1037a6252fb74e02713ed, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:b1:f0:ed:c4:30:c0:f7:dd:1c:00:a1:b9:
                    bc:6f:e8:b6:ed:bb:8b:b4:c2:96:4a:bf:8a:aa:12:
                    33:2e:f9:96:1f:e9:ae:2d:e8:15:dc:93:26:d1:a8:
                    51:03:6a:d8:99:0d:95:ec:01:c8:2b:46:e1:cb:98:
                    0c:d9:26:b8:6a:d9:ea:af:e2:b1:ca:3b:9a:b6:cd:
                    4d:68:8d:bc:75:9c:46:0a:c4:51:69:bb:d3:53:ae:
                    e5:85:b4:c0:1a:da:ce:e1:7c:de:92:16:84:12:63:
                    0b:9c:6b:49:23:e2:47:f5:00:2c:17:07:be:1c:33:
                    ce:f7:cb:a4:82:db:da:7d:a3:35:a2:c2:c5:f9:37:
                    81:ca:57:1e:55:fd:76:a7:9f:27:97:ac:35:1c:84:
                    63:8e:20:28:3b:51:67:d4:f4:af:85:15:b6:d8:58:
                    72:e5:e3:d8:c2:42:e8:5e:e8:61:1a:a1:67:e3:bf:
                    e8:51:42:6c:de:71:cc:30:da:4d:27:15:bc:14:20:
                    ac:c1:55:f0:5e:55:23:cc:97:3c:27:83:8a:0a:fc:
                    80:de:18:7a:1b:16:11:e3:96:dd:da:ca:67:0d:4a:
                    a1:96:73:7e:53:c4:a2:b7:bd:ab:32:a4:c5:75:72:
                    3f:94:4f:ea:3e:56:88:71:6f:46:f6:b1:45:d6:ca:
                    1a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2D:B6:86:9E:0C:A5:ED:7E:5D:8A:F1:FE:18:3F:A0:84:EB:F6:EA
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/83b18734-ee3d-465a-8a60-c10fbb2c821d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:bd:1f:07:98:78:4e:64:23:97:e1:08:37:95:90:47:a9:67:
         d7:63:dd:9e:55:b1:6d:47:9f:f5:b5:06:95:93:e1:cb:1e:39:
         3d:9a:c1:70:ba:0e:94:59:83:d3:6e:38:8a:de:ae:cf:89:3a:
         39:6a:45:23:7d:95:e6:ce:d7:5c:f9:8a:4f:83:e8:39:3c:c4:
         d6:9e:03:f0:77:29:cc:ec:5b:4f:ee:1f:b4:67:7b:30:bf:ef:
         00:d1:6a:06:cc:9a:ce:08:1b:f1:81:f2:a2:2b:96:90:47:0b:
         ce:b3:2e:db:b3:d8:5d:08:71:b3:c7:e3:75:32:ac:db:71:a8:
         d6:75:09:90:52:fc:d2:50:0f:fa:0b:99:55:4d:be:73:10:60:
         45:8f:6c:39:4f:58:59:ee:c1:8c:98:9b:ce:63:f2:08:8a:10:
         4b:6a:7a:b0:83:ef:21:77:9b:9c:92:2d:23:11:75:a5:e9:87:
         8e:fd:49:43:32:96:0e:18:7e:71:f3:f2:2a:89:2b:a2:3c:1f:
         49:d4:7b:fa:e4:4c:05:47:97:75:dc:c3:0e:a7:7e:3b:5c:59:
         42:35:2d:89:2c:be:5f:e9:ab:96:07:b2:a2:68:32:4b:2d:f8:
         28:6d:6f:d3:48:e6:45:33:a8:e0:d2:cb:ac:0f:96:21:eb:4f:
         e8:7a:bc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:06 2025 by rpki-client