Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6fff12b-04f6-4091-84aa-f568d30f090b.roa
File:                     b6fff12b-04f6-4091-84aa-f568d30f090b.roa (raw, json)
Hash identifier:          BPZDAV/ayb3xsim9KCMJvWYLXwV8JrrCaTlYj9789/c=
Subject key identifier:   C7:08:8B:FF:18:E7:3C:31:3F:14:09:BD:D1:2C:1A:07:A4:9A:9F:D1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6B664049BC1FA2C67B045153BDB5BD967D32A89C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6fff12b-04f6-4091-84aa-f568d30f090b.roa
Signing time:             Sun 15 Feb 2026 00:31:33 +0000
ROA not before:           Sun 15 Feb 2026 00:31:33 +0000
ROA not after:            Sat 16 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:66:40:49:bc:1f:a2:c6:7b:04:51:53:bd:b5:bd:96:7d:32:a8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 15 00:31:33 2026 GMT
            Not After : May 16 23:59:59 2026 GMT
        Subject: serialNumber=4b42adced64ba3abb0d25c0911b70c4a5298d59b6c7e0668a9e47de845316adc, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:36:a8:2c:2f:1a:28:99:5c:72:ce:33:91:
                    a1:82:91:b6:c4:af:f4:bd:88:7d:70:9a:3c:91:20:
                    01:e1:21:8a:c5:01:f5:b0:e3:f5:72:93:5e:f4:36:
                    c4:ae:aa:94:1d:2a:f7:12:87:5e:61:5c:14:13:b8:
                    e1:e1:5b:89:81:e3:89:66:48:87:78:2c:44:79:37:
                    30:d8:50:7a:ee:9c:85:32:c5:88:78:da:d3:95:3a:
                    2c:9c:7e:12:91:c1:15:11:34:be:dc:5a:bd:e0:73:
                    37:35:8c:73:6f:7f:09:ca:62:e4:79:0f:00:5c:6e:
                    74:11:37:2e:fe:3e:f8:e8:c3:f0:57:c0:a1:e5:26:
                    8b:48:de:c2:33:73:2d:3a:a0:61:99:7e:05:2d:02:
                    9f:85:84:33:bf:cd:b9:33:c8:8b:5a:0a:33:b2:fa:
                    ad:8f:b5:15:89:2a:fd:35:af:5f:4f:28:cf:e7:ca:
                    e6:1f:a2:4f:49:5f:b2:15:bd:9c:12:d4:47:2d:80:
                    83:e2:a5:73:c0:91:a6:f6:98:3d:f7:80:a8:dd:b1:
                    ad:b1:29:b9:db:2a:2b:1f:7e:fa:7f:e8:66:31:83:
                    d4:9c:ca:98:87:6d:d6:57:f9:28:84:55:a3:cd:a5:
                    59:39:6d:88:d4:00:61:55:2a:43:f7:1a:c1:ca:ea:
                    9d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:08:8B:FF:18:E7:3C:31:3F:14:09:BD:D1:2C:1A:07:A4:9A:9F:D1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b6fff12b-04f6-4091-84aa-f568d30f090b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:42:ae:a3:21:06:3b:c3:c2:af:5e:6d:c4:35:98:a9:9c:eb:
         dd:ce:b1:1e:bb:81:43:76:d0:b2:5b:26:31:e5:3f:c8:ea:80:
         8b:a8:01:8f:22:1d:d5:c5:18:55:70:0f:23:bb:09:c2:77:e2:
         79:dd:78:c8:52:0b:86:d5:e3:f2:45:59:73:71:7b:e2:b5:84:
         da:c5:b1:83:03:ce:2c:7e:03:d5:04:ff:4e:68:75:b3:d5:f6:
         4d:69:4f:e7:a1:37:be:ab:df:2c:8d:8f:67:e3:b2:46:c1:49:
         96:b7:ad:17:14:6a:9a:93:1d:ba:5d:6e:bc:ea:d1:5a:57:18:
         b3:ac:c7:82:aa:3a:2e:08:24:47:26:3d:f6:86:36:ac:30:3e:
         35:9d:4e:24:e0:33:4b:28:56:89:06:27:3b:ac:67:01:ee:15:
         3e:88:13:f3:87:20:cd:22:fb:88:ce:8d:74:db:d0:4c:ce:c5:
         8e:66:7e:32:75:98:bb:ca:66:d4:04:b4:7e:33:58:76:0b:91:
         ff:c3:51:b4:42:b9:57:28:59:a3:a1:07:67:e5:c8:06:09:2b:
         45:12:4c:a3:2f:5a:ba:a9:2f:b8:e7:0e:73:13:a7:70:18:ad:
         b8:df:cb:51:64:ba:1a:a9:8b:17:f2:10:b5:c7:aa:53:24:bb:
         d2:3c:57:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:24 2026 by rpki-client