Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d2d5b9-3e22-4ea3-834b-5942aa3af0d4.roa
File:                     35d2d5b9-3e22-4ea3-834b-5942aa3af0d4.roa (raw, json)
Hash identifier:          ftpReqTejSgV0qjTDE59UeuniRMYDG93pS5F+HqI/hE=
Subject key identifier:   16:F4:68:EA:0C:21:7F:5F:2A:5B:62:0D:1E:75:C0:D9:84:B8:AF:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6D48125638716C2200CB5BC1DE30C5219165B22F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d2d5b9-3e22-4ea3-834b-5942aa3af0d4.roa
Signing time:             Sun 15 Feb 2026 00:30:11 +0000
ROA not before:           Sun 15 Feb 2026 00:30:11 +0000
ROA not after:            Sat 16 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:48:12:56:38:71:6c:22:00:cb:5b:c1:de:30:c5:21:91:65:b2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 15 00:30:11 2026 GMT
            Not After : May 16 23:59:59 2026 GMT
        Subject: serialNumber=f8370dd3d82f1cb55afa2a70cb95a3ce3d6a6fd68f6f1bcbaa535c995599128a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:ae:f2:5e:ca:9c:e2:e1:cd:26:d2:35:d6:
                    16:55:41:83:af:40:0c:a9:2c:ab:a9:de:5b:dc:7e:
                    8c:f7:2f:53:2a:e1:61:83:3a:1e:da:85:c8:d0:98:
                    45:a5:d1:75:26:06:7e:e7:c5:84:29:47:12:1b:4b:
                    d2:4c:75:5e:37:da:62:da:f6:54:b5:ef:64:78:3a:
                    de:73:47:d2:56:07:d3:2d:df:2a:98:da:10:a1:23:
                    e4:10:d8:a1:88:b4:69:5a:61:86:6b:e4:2f:6c:8e:
                    77:36:7e:4c:06:34:f3:78:78:3d:4c:e3:e8:c5:9c:
                    0a:ba:ab:fe:ce:f8:ec:74:b0:ec:4b:57:16:4e:ee:
                    c9:80:03:5b:e9:d1:5a:f7:2b:56:70:cb:79:40:3f:
                    d3:a4:51:32:40:a5:29:8d:6e:a4:1e:06:aa:96:f5:
                    96:c8:8f:a8:8f:c9:07:f7:09:bd:55:cf:22:45:8b:
                    8b:fc:d4:42:fa:22:1d:93:0c:b9:84:d6:2c:13:f8:
                    c1:d1:68:91:a0:f8:54:ec:70:ca:b7:8c:6c:6d:82:
                    2a:48:2b:3f:69:29:df:5c:b9:bc:81:6c:78:1b:ec:
                    4a:d0:77:3d:c3:fc:f8:61:26:a7:81:d5:7f:83:da:
                    2e:39:7d:aa:b6:06:f9:11:65:17:f5:51:57:28:8a:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F4:68:EA:0C:21:7F:5F:2A:5B:62:0D:1E:75:C0:D9:84:B8:AF:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d2d5b9-3e22-4ea3-834b-5942aa3af0d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:62:cb:10:d6:81:a0:49:fc:bc:64:0b:39:ba:c5:49:06:a5:
         16:06:2b:95:7e:7c:4c:86:85:ca:ba:c4:f5:81:27:ca:ae:c8:
         5e:b2:4e:63:64:c6:79:3c:29:94:70:01:60:69:e1:4a:8c:04:
         8b:41:6d:6d:2d:34:36:a6:5f:b6:02:69:f8:f0:a0:f5:52:cc:
         83:ea:f0:ee:5b:cf:c9:41:77:90:d4:32:32:a9:16:da:75:16:
         fe:00:f0:5a:bc:67:2c:67:bd:95:1b:67:d7:9c:e4:99:ef:23:
         a7:a2:5f:fa:51:e4:6f:68:db:69:ca:c8:e2:ac:b4:e7:44:dc:
         77:4b:49:f5:6c:10:6d:64:5f:cc:99:c6:b5:bb:57:0a:f9:cd:
         a4:77:72:73:4b:45:55:84:df:be:7c:97:a7:a7:bc:44:72:aa:
         e4:8c:f6:32:5f:97:25:ce:33:37:f2:86:d5:9c:d3:ea:8d:2c:
         a3:b8:74:e5:fc:ed:4d:90:91:17:32:87:5d:e0:f8:d5:13:e9:
         de:85:fe:76:9d:27:3d:53:e1:00:00:8c:60:aa:28:05:66:7a:
         14:ac:c2:b1:53:c3:49:ed:62:77:6d:9e:1e:79:50:76:93:56:
         43:b6:83:e1:bd:b9:45:8e:df:57:32:28:9d:6d:b6:12:1b:22:
         86:19:5f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:58 2026 by rpki-client