Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a742ab6f-52d7-459d-b6ac-a4a50279b25c.roa
File:                     a742ab6f-52d7-459d-b6ac-a4a50279b25c.roa (raw, json)
Hash identifier:          UAWJ2REzrkd12CA28CFWrj/4fFx0mJM7onrnBPgkVHg=
Subject key identifier:   96:8F:0A:FD:F8:3E:CF:D8:92:65:94:B3:F3:F7:B6:CE:52:A9:ED:AF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       73EB9C5BEC80678AB67B95550792A5549E849769
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a742ab6f-52d7-459d-b6ac-a4a50279b25c.roa
Signing time:             Sun 15 Feb 2026 00:31:36 +0000
ROA not before:           Sun 15 Feb 2026 00:31:36 +0000
ROA not after:            Sat 16 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:eb:9c:5b:ec:80:67:8a:b6:7b:95:55:07:92:a5:54:9e:84:97:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 15 00:31:36 2026 GMT
            Not After : May 16 23:59:59 2026 GMT
        Subject: serialNumber=ddf9629386d1fccf6a7bcb3b14661debe8e2914c0de8a8f55b12137a7343cf3a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:00:18:0b:75:ba:c5:fb:bd:5e:49:fe:7a:
                    9c:5a:f5:73:68:fb:f9:0b:5b:07:99:87:67:06:53:
                    0c:09:da:b8:1f:3d:42:4a:05:a1:a5:fb:ee:8f:b5:
                    50:ca:b4:35:8b:df:e5:67:a4:7d:c7:03:59:0a:5c:
                    37:69:07:ff:81:62:1f:ba:ad:c3:77:d9:85:49:8d:
                    89:27:d2:51:49:de:49:33:03:8c:5a:75:02:1c:c7:
                    9b:d7:20:9b:ce:19:86:21:c5:8d:f7:41:7d:9e:90:
                    81:a2:31:db:b3:71:82:01:41:5b:13:c4:86:22:6b:
                    be:7a:a1:8f:9b:73:82:a1:0b:fe:48:49:82:b0:30:
                    d5:3b:c4:f9:7f:a7:a4:7a:20:01:51:8e:59:02:76:
                    18:7f:4e:43:61:80:06:4b:15:aa:ca:21:a1:82:bd:
                    e5:2b:24:f5:3b:c0:ce:55:26:4b:c7:12:ed:52:09:
                    ee:ee:0a:12:b9:2f:ec:0d:2f:f9:88:4e:15:e0:37:
                    55:97:d6:5b:d3:c7:55:71:7f:97:1f:fd:52:a4:f4:
                    fd:11:74:50:fa:af:e1:0d:f8:a5:f8:5d:7e:81:97:
                    4b:0f:d2:d5:bb:0a:36:bf:ba:c5:33:3c:39:44:a3:
                    aa:2d:a5:eb:a9:ae:14:7b:86:a6:6f:88:ba:4f:72:
                    ad:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8F:0A:FD:F8:3E:CF:D8:92:65:94:B3:F3:F7:B6:CE:52:A9:ED:AF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a742ab6f-52d7-459d-b6ac-a4a50279b25c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d5:a9:04:f6:0d:19:33:00:de:f4:7b:6f:3a:48:44:e1:a4:6a:
         59:76:7b:55:b5:b8:20:82:0e:cc:20:67:80:3e:ce:bb:0e:32:
         1e:e2:85:d8:ba:f5:0a:ec:2c:1c:ff:21:3a:e6:8d:b6:44:a5:
         8d:bc:c1:14:db:43:5c:52:d8:23:15:4b:94:4c:76:58:25:8c:
         d8:89:c0:45:4b:90:a6:5f:5c:7f:02:78:f5:e8:36:fb:f8:43:
         8f:bd:1c:8e:7e:e9:ed:d0:de:2e:36:0c:17:70:96:46:a4:c8:
         48:72:a6:c0:40:57:71:b9:09:bd:eb:2e:03:ad:3e:4c:8f:55:
         49:fd:2a:67:f8:0c:69:54:9d:56:2d:96:af:ff:b0:30:c0:1f:
         99:2e:ea:c7:50:48:cc:65:f1:db:21:2e:e8:d7:39:cc:8f:96:
         be:d4:81:83:22:6f:3b:97:ef:4e:7e:18:d9:66:7c:ca:b0:4d:
         e2:88:6a:13:aa:da:21:43:83:91:e7:16:f6:7b:88:de:f1:c0:
         06:56:01:af:a8:cc:c0:ba:9b:41:7e:bb:dc:b4:f1:68:7f:d9:
         8e:39:b5:75:de:65:d9:15:e5:dd:9e:5a:01:ee:9b:2d:d7:85:
         a9:a7:c3:de:5c:9e:05:37:5d:e1:4b:7d:c7:52:2e:4a:d9:b9:
         e3:8c:c8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:00 2026 by rpki-client