Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d95802-c80e-48cb-8f8e-746d414d0f7f.roa
File:                     46d95802-c80e-48cb-8f8e-746d414d0f7f.roa (raw, json)
Hash identifier:          5VXeWHUbFZT3ioOt5xkBSf0bEUTCmzirXo1CWcgVDtQ=
Subject key identifier:   D7:CA:31:D6:89:60:F1:B9:65:F6:89:B5:9C:DA:E1:38:11:D7:F0:C7
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       696F3AC4896BAC82AAE1B864EC627CFE20763CC0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d95802-c80e-48cb-8f8e-746d414d0f7f.roa
Signing time:             Wed 20 May 2026 00:01:21 +0000
ROA not before:           Wed 20 May 2026 00:01:21 +0000
ROA not after:            Tue 18 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6f:3a:c4:89:6b:ac:82:aa:e1:b8:64:ec:62:7c:fe:20:76:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:01:21 2026 GMT
            Not After : Aug 18 23:59:59 2026 GMT
        Subject: serialNumber=dfb7814008b65823fde15becf7758e46a7bcdb8a0385d23678cc8c09abd8396b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:14:2d:2c:ef:fd:f1:ce:21:03:2c:e5:7a:
                    73:a8:d6:3d:b1:a1:9a:94:57:be:c8:f7:52:39:43:
                    1e:9e:a7:84:aa:73:7e:34:dd:9a:75:76:3d:d8:5f:
                    65:f5:82:de:9f:f8:28:96:6f:60:0b:ec:16:5a:e3:
                    b7:7a:cf:51:46:b7:4b:b8:86:95:ab:10:a9:ad:ad:
                    88:c9:da:d5:44:43:7e:ba:2d:8f:73:76:32:21:47:
                    0f:74:31:5f:6d:f4:ef:86:0f:db:57:9b:13:60:2c:
                    4d:77:b8:4f:dc:7c:0e:4d:d3:67:5c:ab:d6:ac:5e:
                    93:c1:1c:4e:7e:3b:c7:56:10:3b:7d:aa:b6:57:f3:
                    e2:ce:27:76:6c:e7:4f:43:b3:70:f9:23:7f:fd:d3:
                    46:c9:bb:92:11:d4:1b:6c:73:41:95:6f:4d:c4:a4:
                    ba:de:89:f2:c4:8c:c8:65:16:0b:99:0a:17:9c:0c:
                    3d:a6:c6:36:04:1a:cd:1b:8b:3d:e0:d6:93:a3:61:
                    1b:b8:1e:db:28:85:96:ca:aa:f6:79:ec:98:f8:5a:
                    93:6e:29:1f:fa:fd:e1:db:e5:1a:23:b5:52:2b:25:
                    95:4a:7a:3c:60:07:c3:25:ab:d3:ff:88:78:3f:76:
                    37:11:83:52:ac:53:5a:ea:3d:ee:7a:13:f2:91:92:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CA:31:D6:89:60:F1:B9:65:F6:89:B5:9C:DA:E1:38:11:D7:F0:C7
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46d95802-c80e-48cb-8f8e-746d414d0f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:53:55:ee:3a:c8:03:79:ca:56:de:64:29:22:ca:95:f5:00:
         78:58:5d:bd:7e:3d:02:ed:61:79:ec:42:04:23:27:01:ee:ad:
         62:03:86:6f:22:b0:3a:ec:3a:93:1e:1b:56:c0:99:c0:9b:0e:
         86:a8:61:3d:78:62:ab:1c:4d:cc:f5:cc:11:9c:65:91:6d:49:
         62:e2:65:9b:bc:e9:59:3d:be:c5:88:8e:3a:e7:7c:77:50:3e:
         f9:4a:64:f0:a3:4c:5c:a3:56:94:cf:84:c2:2e:6c:a2:49:26:
         4d:58:dd:c0:16:9b:e4:06:c1:79:c1:90:a0:fc:50:bc:b5:3a:
         c8:b9:76:78:8b:bd:58:1e:58:70:2d:db:39:e1:8c:26:d2:1b:
         6f:ce:ba:b7:e4:47:27:83:ea:ed:7f:d8:43:fc:be:ab:90:be:
         1c:10:c0:08:28:bc:4f:bc:67:85:39:6f:7f:7a:0f:e2:4f:ba:
         88:ba:83:35:0c:10:4a:9b:b0:36:42:5f:ea:f6:36:23:c9:97:
         7a:e8:5a:8a:0c:92:43:19:41:23:a2:ab:30:de:7e:8e:49:9a:
         0b:21:f0:1d:c5:ce:cc:00:43:72:e5:a7:6f:a9:a8:93:3e:e8:
         d3:8d:d0:5b:40:5e:41:48:fc:6d:4b:8d:6d:6c:7d:3d:a0:dd:
         9b:29:f0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:47:53 2026 by rpki-client