Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91f64723-3e76-4b11-8f43-0a8fde10d676.roa
File:                     91f64723-3e76-4b11-8f43-0a8fde10d676.roa (raw, json)
Hash identifier:          +KjavZcf7GiqVUspAs9nk8paBB4sla7aGECRBqBAGPM=
Subject key identifier:   D5:F6:BA:1F:8C:28:20:D1:5B:70:8B:A2:D8:FE:DE:19:75:01:41:DD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       117846C9ED2C79147D3DACC6CC31D03BEF0016A1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91f64723-3e76-4b11-8f43-0a8fde10d676.roa
Signing time:             Sat 25 Jul 2026 00:11:49 +0000
ROA not before:           Sat 25 Jul 2026 00:11:49 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:78:46:c9:ed:2c:79:14:7d:3d:ac:c6:cc:31:d0:3b:ef:00:16:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:11:49 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=3ad47825b3f0ee571c8db49a012035c575edbb888ef8839d9c7e0b7f8987c63b, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e1:f9:76:f5:f7:34:2e:ab:57:fa:30:a6:7a:
                    7a:04:1d:37:de:71:00:e5:8d:79:96:14:81:05:60:
                    30:42:8b:85:a1:a5:49:62:2b:ea:d6:a4:1c:0b:d0:
                    3b:a0:c1:f7:0a:4c:59:3c:61:fb:6a:e9:30:29:a0:
                    e3:8d:bf:0f:2b:04:70:80:75:71:fa:83:5a:46:10:
                    17:43:d5:ed:a2:2c:1f:1d:ff:65:bf:39:f6:df:74:
                    54:2a:2f:89:4c:8e:ba:7d:43:28:b0:ae:76:da:89:
                    16:c3:df:5d:98:2e:d6:d2:f6:10:58:eb:fc:43:72:
                    39:2f:1a:9b:8a:f2:66:d7:27:e9:57:84:7d:10:2d:
                    39:6e:29:9a:21:e5:09:3b:1a:af:59:ff:93:32:1b:
                    a8:b6:f1:6b:88:cc:60:55:52:8a:dd:27:15:e0:5a:
                    2e:ad:20:f5:e8:95:43:8a:3d:b4:92:66:9d:a1:7e:
                    92:fa:2a:e6:23:bd:a7:d4:59:85:5c:b4:9f:77:4b:
                    dd:c6:63:e0:73:f0:57:5b:cb:67:ca:21:c1:51:57:
                    9d:6d:89:2d:ea:56:d9:58:19:4d:9e:86:0f:09:58:
                    bc:c7:02:f7:3a:ad:e7:00:fb:27:39:3c:97:e2:f3:
                    b4:d8:2a:f2:bf:7f:09:58:7d:36:1b:bf:21:4c:84:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F6:BA:1F:8C:28:20:D1:5B:70:8B:A2:D8:FE:DE:19:75:01:41:DD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91f64723-3e76-4b11-8f43-0a8fde10d676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d8:4f:ba:b6:f9:0b:74:33:53:54:f9:ae:f6:7c:84:24:59:ef:
         eb:ed:7e:1a:77:a4:04:43:f0:02:ba:c4:a8:2e:86:1b:40:24:
         09:cc:fa:9e:2d:bd:6b:1e:4e:53:35:46:4c:47:89:d1:9d:b3:
         f1:4d:98:52:40:d1:4d:ee:ae:11:fc:e1:c2:17:bd:ba:7f:66:
         a3:83:02:31:c4:1a:9c:26:9e:aa:09:52:06:81:40:ef:ce:52:
         19:88:47:87:25:34:1b:0d:49:a9:ed:ef:df:f4:33:15:d6:8f:
         d8:c1:77:b0:84:a5:19:f6:9d:ed:48:0a:2f:eb:b6:cf:ac:d7:
         5f:63:5f:e1:5d:63:8e:dd:33:1e:e1:b5:bb:ad:6c:ea:82:9d:
         d5:c3:ed:4e:89:62:5a:ed:e2:9c:52:8b:85:8e:b9:a1:46:99:
         95:6f:b9:81:b7:fe:9b:63:8b:ec:11:db:6c:e9:11:7a:f9:ae:
         d7:ce:d6:f3:a4:a2:d4:38:9c:ed:b9:08:8b:9a:89:44:98:09:
         25:0d:e8:27:36:24:8a:e9:10:ac:28:38:81:83:a9:05:26:8b:
         b8:9a:c7:26:a4:38:e4:b5:f8:f8:17:b1:1d:ff:1a:76:64:78:
         ec:95:ab:2a:b8:bd:a1:cb:17:a5:92:f3:dd:3b:cd:0b:06:18:
         59:bb:ef:08
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEXhGye0seRR9PazGzDHQO+8AFqEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI1MDAxMTQ5WhcNMjYxMDIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzYWQ0NzgyNWIzZjBlZTU3MWM4ZGI0OWEwMTIwMzVjNTc1
ZWRiYjg4OGVmODgzOWQ5YzdlMGI3Zjg5ODdjNjNiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCg4fl29fc0LqtX+jCmenoEHTfecQDljXmWFIEFYDBCi4Wh
pUliK+rWpBwL0DugwfcKTFk8Yftq6TApoOONvw8rBHCAdXH6g1pGEBdD1e2iLB8d
/2W/OfbfdFQqL4lMjrp9QyiwrnbaiRbD312YLtbS9hBY6/xDcjkvGpuK8mbXJ+lX
hH0QLTluKZoh5Qk7Gq9Z/5MyG6i28WuIzGBVUordJxXgWi6tIPXolUOKPbSSZp2h
fpL6KuYjvafUWYVctJ93S93GY+Bz8Fdby2fKIcFRV51tiS3qVtlYGU2ehg8JWLzH
Avc6recA+yc5PJfi87TYKvK/fwlYfTYbvyFMhNxjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1fa6H4woINFbcIui2P7eGXUBQd0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkxZjY0NzIzLTNlNzYtNGIxMS04ZjQzLTBhOGZkZTEwZDY3Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjl74wDQYJKoZIhvcNAQELBQADggEBANhPurb5C3QzU1T5rvZ8hCRZ7+vt
fhp3pARD8AK6xKguhhtAJAnM+p4tvWseTlM1RkxHidGds/FNmFJA0U3urhH84cIX
vbp/ZqODAjHEGpwmnqoJUgaBQO/OUhmIR4clNBsNSant79/0MxXWj9jBd7CEpRn2
ne1ICi/rts+s119jX+FdY47dMx7htbutbOqCndXD7U6JYlrt4pxSi4WOuaFGmZVv
uYG3/ptji+wR22zpEXr5rtfO1vOkotQ4nO25CIuaiUSYCSUN6Cc2JIrpEKwoOIGD
qQUmi7iaxyakOOS1+PgXsR3/GnZkeOyVqyq4vaHLF6WS8907zQsGGFm77wg=
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:52:00 2026 by rpki-client