Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa
File:                     77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa (raw, json)
Hash identifier:          nAJewmJ8ziWd/1lCVLvtqEqi6LxNcaL/GOcio7kBL5Y=
Subject key identifier:   A1:25:5C:C7:07:AC:52:E6:CF:75:A7:D4:60:3E:AC:71:C1:CC:73:FE
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       79FDA8D1A3F8CD06E4D277A7E8A7C7F5CDF8B691
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa
Signing time:             Mon 04 Aug 2025 17:40:19 +0000
ROA not before:           Mon 04 Aug 2025 17:40:19 +0000
ROA not after:            Mon 08 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fd:a8:d1:a3:f8:cd:06:e4:d2:77:a7:e8:a7:c7:f5:cd:f8:b6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Aug  4 17:40:19 2025 GMT
            Not After : Sep  8 23:59:59 2025 GMT
        Subject: serialNumber=7a2e5f74f6c0503e4ce5c6e7c198064ce1ad5cb5a3f66f04650041b33fa38b87, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:9e:5a:b1:c6:44:8b:94:59:b6:ca:26:ff:
                    b1:2c:e9:b0:5d:82:f6:29:6c:7c:4c:4e:0f:b3:83:
                    25:1b:17:5a:fd:84:49:89:01:78:59:aa:29:e0:73:
                    51:42:5e:93:3a:72:87:a9:21:cd:06:1c:55:3d:34:
                    93:80:6b:01:e3:0e:fb:f1:88:43:84:31:e0:21:b5:
                    e9:99:70:9a:7c:47:eb:d1:92:59:35:ea:97:28:0c:
                    56:e3:1e:89:1f:15:75:88:97:67:62:b4:c7:42:fb:
                    36:10:91:fe:da:5a:1e:b2:f2:87:e0:70:f1:a9:21:
                    4a:4d:e5:8d:89:94:bc:42:93:a2:fa:1e:0d:d5:9e:
                    2e:ff:69:83:b7:73:36:9d:59:af:fa:96:2b:66:34:
                    33:db:45:6c:79:81:43:9f:ce:2f:ea:5f:f4:32:fc:
                    26:a0:22:34:39:a2:35:8d:6c:b3:b3:e4:76:50:47:
                    9c:9f:c8:36:21:30:86:9e:54:91:39:b7:80:8e:63:
                    df:64:99:46:22:a1:88:e0:a3:26:28:63:14:68:4b:
                    fb:de:1d:e9:48:e2:e2:c5:bf:4f:81:0a:63:62:82:
                    7f:96:5e:ca:0f:c9:6a:4a:f5:fb:29:2e:e1:bf:dc:
                    1d:58:75:c3:e5:ce:32:b0:98:e6:be:b8:29:af:e8:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:25:5C:C7:07:AC:52:E6:CF:75:A7:D4:60:3E:AC:71:C1:CC:73:FE
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/77589b1b-ff9a-42b2-bec7-a1653f08cb4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:8f:19:ac:b3:9a:f3:ae:dc:2b:59:de:61:2f:a8:77:27:67:
         53:9b:f4:0c:49:b2:b7:81:42:4e:24:95:48:e3:78:90:3c:e7:
         12:d7:da:d0:e2:b3:45:88:c1:87:eb:0b:60:c1:66:5c:38:e2:
         ea:ec:ca:eb:b3:12:f3:c5:e8:3a:fe:2d:b3:0a:e0:bf:f5:ad:
         d9:b5:be:1c:6e:df:4e:4d:75:d5:84:a5:4a:9a:9b:ff:8b:c6:
         26:37:06:c3:7a:78:93:33:6a:fc:a2:7e:c6:85:98:b5:a3:7a:
         be:f6:3a:a2:f1:38:35:0e:92:af:80:ad:e4:39:8e:78:b3:e4:
         4c:e6:23:20:59:d7:9d:4f:54:af:d6:79:6c:80:8d:42:9d:df:
         a8:e6:c8:8a:49:30:45:82:22:b9:e7:96:dd:b7:ac:86:d6:10:
         38:52:1b:84:33:60:b3:d5:ad:e0:9a:6c:cb:44:40:04:6a:4a:
         14:25:84:74:ae:46:43:0e:2b:1f:e2:ce:0f:05:b9:20:31:1c:
         e9:e2:d1:37:ec:38:db:a9:58:34:00:a7:e0:87:50:4c:77:ec:
         27:5e:b1:d1:71:91:a0:df:75:40:5f:72:f8:64:f6:80:42:cb:
         93:a4:2e:6b:09:a2:38:f5:b4:1c:ec:02:c7:99:8b:22:23:ac:
         64:6a:64:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:33:19 2025 by rpki-client