Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ed41037-5334-48c4-867a-9c8a685c4482.roa
File:                     6ed41037-5334-48c4-867a-9c8a685c4482.roa (raw, json)
Hash identifier:          a7L0dEKPmkjhHpAsXRl/WFoVq2IZw6dh6eBCS4v8rlA=
Subject key identifier:   6C:F7:27:B5:3F:A6:92:15:F4:12:91:DF:15:F0:F9:6D:B1:7C:55:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       76EEACA2019923524F6D2E224AA1F2510D89FC44
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ed41037-5334-48c4-867a-9c8a685c4482.roa
Signing time:             Fri 13 Feb 2026 00:30:37 +0000
ROA not before:           Fri 13 Feb 2026 00:30:37 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.83.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ee:ac:a2:01:99:23:52:4f:6d:2e:22:4a:a1:f2:51:0d:89:fc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:30:37 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=0f646b6ffe74cfeb7f68e65959603066fbc9bff41c6244ba9bd8acaf2d964680, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:c5:51:35:5e:70:33:50:5a:58:7a:46:26:
                    b9:c2:1f:ca:7d:a7:bb:48:c6:86:9b:a6:50:33:b4:
                    64:17:a0:54:4f:18:f7:ec:f6:3a:84:49:43:4f:5b:
                    b7:7e:ba:bf:2e:43:d1:35:49:b0:5f:2a:25:04:a5:
                    bb:d3:1b:9c:6c:36:59:d4:33:da:5b:c8:5a:44:7d:
                    84:02:46:82:1e:75:9f:9d:36:99:08:c3:c9:da:e2:
                    a3:26:30:44:6d:52:41:d8:a7:60:63:65:29:ae:8b:
                    3f:84:fa:e3:9c:20:b2:a6:10:fb:9f:27:27:97:91:
                    dc:5d:a5:44:71:df:7f:af:c4:a3:99:be:4b:78:62:
                    a8:52:0c:0e:2e:16:79:ac:e9:24:86:50:00:73:30:
                    3a:34:3f:3a:84:c0:2f:c6:47:37:bc:31:bf:c5:3d:
                    85:0e:63:32:06:0a:99:cb:07:56:21:ca:2c:20:c3:
                    70:66:57:dc:c9:4b:e9:b5:49:9c:62:9d:20:26:b9:
                    62:d0:69:b9:41:e4:c6:9b:75:8b:6c:14:a4:6f:54:
                    f7:9c:8e:97:00:c8:2d:b1:2b:9c:03:20:e8:56:c4:
                    ae:ef:4c:f8:14:42:75:4d:ae:b3:9a:a2:ee:c5:5d:
                    f4:f9:c1:f4:76:d1:04:ac:1a:ba:a9:26:15:ff:df:
                    03:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F7:27:B5:3F:A6:92:15:F4:12:91:DF:15:F0:F9:6D:B1:7C:55:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ed41037-5334-48c4-867a-9c8a685c4482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:40:24:c7:2e:ed:94:45:51:78:2a:01:95:a5:ff:be:40:03:
         0b:8c:fa:11:ba:ed:7f:cd:70:ea:e6:e3:10:dc:a0:10:05:a0:
         b9:bf:69:f1:d5:3f:61:ca:5d:d8:39:61:d2:bd:74:9c:f8:9b:
         93:d5:06:b4:b8:c3:8d:7d:01:70:65:af:ce:3e:2d:f1:49:97:
         c2:70:a5:aa:64:4a:33:a5:90:a3:c5:2d:0d:b6:1d:60:73:c0:
         e9:5b:57:5d:92:33:4c:15:5a:b9:51:8b:ea:7f:61:31:8c:c5:
         9f:9d:4a:bd:c7:75:b4:ff:b8:99:c1:a2:49:a4:98:63:b9:3d:
         5e:c3:0c:8b:ad:ee:79:44:30:30:f9:ec:52:a3:a1:d0:8f:5f:
         6e:82:89:6e:dd:88:43:e7:f7:f0:2d:4c:42:66:33:87:5b:05:
         eb:d0:cc:29:3a:08:51:b6:3e:f7:62:97:a6:dc:67:cc:bf:97:
         40:e2:81:73:f5:19:cc:20:dd:74:d4:94:ef:85:83:55:93:08:
         cf:e7:e6:e7:29:92:af:dd:6c:d4:c5:1c:83:c7:57:6d:c2:7d:
         8c:c5:39:bf:cd:33:76:b6:b8:40:aa:6b:07:40:5d:c2:04:db:
         a4:cd:f5:08:09:ec:37:24:e3:9d:22:5d:45:38:62:43:d3:08:
         5c:0f:fc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:02 2026 by rpki-client