Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/232545d3-dcc7-4f04-bb6d-1d3d9c17d37d.roa
File:                     232545d3-dcc7-4f04-bb6d-1d3d9c17d37d.roa (raw, json)
Hash identifier:          uoKV4bWqek73ydJi1xC32ZmPLbqQpNOwCvLXgIgwYTE=
Subject key identifier:   94:79:87:90:59:28:AC:14:BF:16:AA:C5:E7:E9:44:12:08:C7:99:C5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3EE3CA94DF40D3C0B1DC8F7EF6D606B35D38C04F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/232545d3-dcc7-4f04-bb6d-1d3d9c17d37d.roa
Signing time:             Wed 20 May 2026 00:00:45 +0000
ROA not before:           Wed 20 May 2026 00:00:45 +0000
ROA not after:            Tue 18 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e3:ca:94:df:40:d3:c0:b1:dc:8f:7e:f6:d6:06:b3:5d:38:c0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:00:45 2026 GMT
            Not After : Aug 18 23:59:59 2026 GMT
        Subject: serialNumber=c6d1843b2301dee9178d7a00a0a5a0a11315dd326129716b6c257bfd05840488, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:8a:bf:d1:a3:52:74:15:bc:14:8d:ce:4b:
                    14:78:40:c9:51:cb:cf:e2:83:27:8e:eb:16:ae:09:
                    56:59:d8:ca:7e:f2:02:aa:46:d4:04:ef:38:ac:b5:
                    a9:8c:6f:0b:69:e2:a7:73:30:8d:64:cf:87:84:f2:
                    a4:0a:30:86:7b:a4:64:63:ed:22:ee:24:7c:90:35:
                    72:6c:d7:78:6b:1a:ab:0e:3a:f3:0e:3d:8b:7e:76:
                    29:ba:f8:a2:90:17:da:4a:17:f7:3d:36:3c:3b:e9:
                    4d:6d:57:96:ec:df:2f:3d:23:84:b5:83:73:dd:8e:
                    78:48:9e:3f:d4:16:51:99:8c:ed:6c:d1:68:1c:2b:
                    00:f5:36:09:a5:0e:22:66:3d:79:94:73:a0:38:f6:
                    f6:a8:88:48:e2:67:8f:b0:91:21:80:c2:88:8b:aa:
                    ab:d7:c0:14:48:74:ed:ee:1d:7e:51:44:13:3d:b7:
                    73:d7:7a:8a:98:7f:59:2b:b3:b3:b8:cf:1e:df:e4:
                    95:38:81:b8:56:d1:89:96:3a:36:0d:ac:68:e1:ed:
                    ca:ce:34:2b:5f:c0:a9:10:fb:3f:83:58:b2:7c:99:
                    d8:bf:a3:0a:6a:f2:38:b6:92:c5:22:01:58:f3:ab:
                    ea:e2:1b:ba:54:d0:52:52:77:f0:c3:d2:ae:ba:e9:
                    33:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:79:87:90:59:28:AC:14:BF:16:AA:C5:E7:E9:44:12:08:C7:99:C5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/232545d3-dcc7-4f04-bb6d-1d3d9c17d37d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:6c:ba:2d:4f:90:09:f0:58:38:e5:13:be:93:7d:57:d4:88:
         f0:23:54:12:91:f4:e4:6b:57:7f:97:79:43:04:a0:89:ac:21:
         8c:c0:06:76:fb:d3:5d:04:97:d8:08:8f:9a:1f:41:a1:da:ad:
         a3:b8:8c:e1:b8:55:a7:38:40:b0:3c:4d:eb:ed:34:3e:b9:e8:
         c6:3e:eb:af:ca:f1:39:fc:f0:39:15:8d:76:f7:3f:a8:a0:ea:
         cb:c4:1b:a8:03:0b:95:c1:97:19:88:6b:03:d8:a1:7d:0f:eb:
         4e:18:a7:36:41:c8:1b:c8:e1:19:d4:2c:2e:61:ba:3f:58:35:
         e8:81:bf:3e:d9:63:d3:28:17:64:48:8a:be:96:3b:09:0a:07:
         1e:87:02:a1:db:56:cb:79:ca:23:a9:f8:9c:b2:cc:33:77:19:
         cc:99:3e:85:b9:c2:e3:e3:ea:45:2c:90:1f:5f:b1:fc:7c:e9:
         85:f2:51:87:37:20:42:a7:7a:d4:25:2b:f6:bf:26:4c:39:2c:
         9c:8c:0c:cb:c1:2e:df:ba:7f:eb:66:2d:cf:44:64:e0:c9:c5:
         70:9b:07:a2:86:8b:be:0d:89:7e:6c:eb:19:90:c6:09:14:d7:
         98:ca:82:04:5a:0d:13:e1:05:dd:05:b3:a2:6d:89:51:20:b6:
         a3:90:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:31 2026 by rpki-client