Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aedf8f32-b690-4e4c-9ce7-bfae770f020d.roa
File:                     aedf8f32-b690-4e4c-9ce7-bfae770f020d.roa (raw, json)
Hash identifier:          C2UyWCzlcUhfUQbg2LHy5CqFls4fr3c794p0gQmuW+U=
Subject key identifier:   2B:80:87:21:4A:7E:03:81:16:0D:8B:ED:7F:BF:3C:6F:FF:52:B8:0F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A883CA322B688FA66BC8965878055206F755C5F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aedf8f32-b690-4e4c-9ce7-bfae770f020d.roa
Signing time:             Fri 13 Feb 2026 00:11:31 +0000
ROA not before:           Fri 13 Feb 2026 00:11:31 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:88:3c:a3:22:b6:88:fa:66:bc:89:65:87:80:55:20:6f:75:5c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 13 00:11:31 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=2a08e95b366d61521ce9ef72dedb4fe8bddae5f824fc1233c74dd479d72a7285, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8d:dd:5c:ca:ad:41:42:18:ea:97:44:ca:d4:
                    e7:47:d0:85:75:6c:97:69:0d:10:24:4a:77:f6:c6:
                    ed:5a:65:a3:43:41:6a:6e:24:fc:3f:6c:9e:bc:b7:
                    99:d6:11:4d:5f:e4:ee:e8:4f:73:bd:00:d4:b3:df:
                    31:ed:14:da:2e:05:0f:77:85:30:5c:e3:50:97:df:
                    68:1d:b6:13:89:25:dc:20:17:85:5f:42:bc:49:ae:
                    91:a7:40:0b:d2:22:a9:3e:39:46:a1:4f:e7:09:50:
                    6d:12:19:f7:4e:82:b9:14:5a:22:d8:36:d8:cb:78:
                    f5:1e:8a:6d:18:cc:9e:59:d1:b6:2f:1d:65:ad:ba:
                    b5:a1:31:2c:c9:3f:4e:a2:a0:69:2a:7b:8c:de:17:
                    ce:79:49:34:05:0c:2b:fc:05:96:c6:39:91:02:ec:
                    ca:9f:ce:8b:24:b3:94:e0:de:6b:a5:b7:b2:c0:bd:
                    10:43:2d:98:6a:39:10:ec:50:91:a5:4b:88:25:6f:
                    59:f5:7f:b5:b9:5a:63:01:db:e0:e4:59:9d:14:42:
                    df:f9:f9:76:38:c8:87:52:e5:3d:4a:7f:43:4c:66:
                    4f:49:85:14:44:8b:c6:41:43:0d:cc:07:42:ae:2c:
                    30:99:cc:af:6c:9f:ea:59:d8:97:26:53:a0:62:00:
                    e4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:80:87:21:4A:7E:03:81:16:0D:8B:ED:7F:BF:3C:6F:FF:52:B8:0F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aedf8f32-b690-4e4c-9ce7-bfae770f020d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:b0:50:8a:1b:3e:ce:ba:35:ae:a0:7a:5b:c8:41:f1:e9:28:
         79:ef:c4:0a:ca:5f:04:1e:7f:c7:26:a3:3b:87:a0:49:80:47:
         8f:0d:3d:96:a7:94:1d:6d:6f:c8:25:ea:7d:af:1a:07:13:3d:
         60:79:8f:e6:0a:69:39:77:1c:23:b1:de:b1:97:ce:53:35:71:
         71:ce:9f:9b:c9:86:c0:16:14:4a:e1:de:25:d6:06:82:8e:1f:
         88:3d:57:eb:ea:49:ed:82:8a:ed:5a:ad:9c:cc:89:a8:22:e0:
         49:74:cc:fb:80:3e:4b:a2:b4:fc:d0:99:77:ef:90:78:55:53:
         f2:81:6d:b9:a8:a5:58:41:42:0c:fd:b6:49:72:30:35:44:19:
         62:ce:2b:00:be:8b:c2:f2:2f:e2:b7:c1:31:5c:46:c6:bc:66:
         e9:d9:5f:89:ae:30:fb:56:35:3c:7d:51:62:46:43:38:0c:eb:
         61:4b:c9:0a:22:4f:08:18:8a:ff:2e:50:38:2b:d1:aa:aa:3a:
         97:9f:2b:d0:1a:fa:25:2e:3b:57:b8:ff:47:7d:52:e0:8c:ab:
         93:02:a4:6f:ee:9b:b9:3e:03:35:95:c2:35:9a:0c:f0:db:e3:
         c0:32:e6:ee:a8:be:dc:cf:6a:0c:0f:3d:8a:ed:1c:86:ce:9f:
         96:1c:ab:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:04:27 2026 by rpki-client