Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d0c428d4-96a3-4df6-b260-bb2067e0ac20.roa
File:                     d0c428d4-96a3-4df6-b260-bb2067e0ac20.roa (raw, json)
Hash identifier:          JobR8YkA+0mB7xWrfQVvHH2xXUYK+qPZxzaOC8KToYg=
Subject key identifier:   3F:87:35:44:A4:C4:83:1D:77:D5:83:99:CD:B1:C4:03:4D:2D:8C:D0
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       23176664A5B9FBC9F677727FEDBEA784FF5E40EB
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d0c428d4-96a3-4df6-b260-bb2067e0ac20.roa
Signing time:             Fri 11 Jul 2025 18:01:04 +0000
ROA not before:           Fri 11 Jul 2025 18:01:04 +0000
ROA not after:            Fri 15 Aug 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        173.82.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:17:66:64:a5:b9:fb:c9:f6:77:72:7f:ed:be:a7:84:ff:5e:40:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: Jul 11 18:01:04 2025 GMT
            Not After : Aug 15 23:59:59 2025 GMT
        Subject: serialNumber=3349145e6253a3039debef750b409012d9bbb3c16b708a83699d7efbb51aec03, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:40:f8:31:93:20:ef:1e:ab:8c:c2:9b:7a:
                    97:1b:60:fc:e2:1e:9f:c8:c5:0e:9a:0b:7e:de:c5:
                    27:bd:45:6f:d7:93:8e:db:8e:70:6d:66:9e:bc:78:
                    99:2c:ca:06:d7:ae:f1:29:25:93:0b:23:94:12:da:
                    e0:6e:f6:48:99:60:ac:8e:82:ad:bf:55:9d:7a:e8:
                    1c:28:b9:51:d6:e5:0c:c6:b0:7c:3f:07:49:9f:61:
                    86:57:71:91:aa:81:35:0f:2e:be:58:44:cf:d2:18:
                    3c:2a:66:f0:d9:c7:47:44:ca:e8:f3:f7:59:b5:99:
                    fe:fa:35:2f:b9:9e:16:ae:a3:56:ce:f1:1c:e4:e1:
                    6c:5f:8e:da:be:91:2d:53:d5:f3:20:54:a1:54:27:
                    b2:c5:c9:91:ff:fb:93:be:7d:f5:1b:72:90:5a:f0:
                    8b:5e:e5:1e:e1:17:c2:bc:65:a8:2e:78:5e:2b:95:
                    2c:3a:dc:8e:99:c3:7f:d0:0d:83:35:17:de:f1:5e:
                    df:03:31:67:e5:b6:66:fd:48:7c:9a:66:0c:0a:e0:
                    b3:a8:3a:f5:4d:0a:62:20:c6:fd:ac:41:1e:05:8a:
                    8f:d3:10:93:50:e2:a7:26:f0:bb:50:47:27:6b:a4:
                    08:91:cf:6e:5c:49:2a:0b:5b:e8:48:37:c6:b1:9f:
                    df:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:87:35:44:A4:C4:83:1D:77:D5:83:99:CD:B1:C4:03:4D:2D:8C:D0
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d0c428d4-96a3-4df6-b260-bb2067e0ac20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.82.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:30:17:95:a5:c4:17:10:e9:67:6e:8e:65:6a:5c:40:6b:7d:
         53:d9:b9:a0:73:1d:d0:c9:a4:7a:94:99:50:ef:43:f7:4b:3f:
         8f:6f:18:95:d4:a2:fd:03:e9:78:94:a5:d1:51:97:f9:46:54:
         13:3b:5d:be:89:77:e5:d4:8f:f4:f9:22:a6:2a:7a:22:1d:c8:
         1c:7d:3c:91:5b:01:f6:71:eb:33:01:21:eb:80:df:c5:02:be:
         ad:56:a2:3d:76:b6:70:26:4b:4c:54:1a:aa:df:f7:bf:77:01:
         8d:cf:8b:b1:3c:8c:92:77:5d:8d:48:64:2a:e1:6b:4b:c4:aa:
         f5:2b:e6:ca:01:1d:22:b8:0d:3f:08:bf:81:ad:d4:82:a0:e9:
         8a:72:91:da:0f:ba:fa:fe:20:4a:78:0e:9c:c8:0b:1c:6c:87:
         e0:cf:2d:77:17:e1:9d:58:51:57:13:88:d1:89:7e:94:d3:d2:
         01:f1:e7:63:e4:6c:84:ea:c9:c2:04:9f:48:af:95:e7:cd:47:
         c4:ec:2e:25:9b:59:f8:9e:19:cc:0f:9d:39:70:8d:a5:04:a1:
         be:73:8e:60:b0:95:01:01:30:06:0f:ac:e4:5c:1f:a4:b9:11:
         8b:99:70:34:e9:80:32:c1:88:d1:5c:f3:47:c6:8b:94:bf:7d:
         54:60:f7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:18:05 2025 by rpki-client