Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9d0e16e-bce5-4522-b44e-614362edb054.roa
File:                     e9d0e16e-bce5-4522-b44e-614362edb054.roa (raw, json)
Hash identifier:          zTEF0k8s1blOpVpdlJl8nyyTUtA9QFZ9z1jBHKOoGWQ=
Subject key identifier:   70:C5:89:E6:7A:80:EF:EA:76:EA:FC:D7:08:69:62:E5:58:94:67:71
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       63352AC361C93C523FACE7B477BE27C08DA142E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9d0e16e-bce5-4522-b44e-614362edb054.roa
Signing time:             Wed 06 May 2026 00:11:44 +0000
ROA not before:           Wed 06 May 2026 00:11:44 +0000
ROA not after:            Tue 04 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:35:2a:c3:61:c9:3c:52:3f:ac:e7:b4:77:be:27:c0:8d:a1:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:11:44 2026 GMT
            Not After : Aug  4 23:59:59 2026 GMT
        Subject: serialNumber=424dd0be26baf6848d3d9cf56a4c09b212e09702bb000f85a9c9088ad2dc3339, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:26:99:cb:1b:57:28:92:6d:2e:14:d8:20:
                    e5:fa:b1:1d:82:f2:7f:c4:f6:e0:bc:e8:7e:8f:dc:
                    fb:37:02:e6:43:41:ee:b5:1e:92:ae:08:f2:e8:0c:
                    52:a5:e2:68:6e:98:48:7a:6e:e1:fb:65:79:7b:f2:
                    1a:4e:a6:ea:b6:cd:bb:28:4f:4c:98:bc:43:83:4b:
                    17:97:74:b5:9e:6b:8a:f6:94:50:6c:35:ba:e3:2d:
                    45:94:d2:8b:4a:8e:68:8f:1b:0d:b0:fd:0b:6e:b1:
                    11:92:02:9c:83:86:10:a8:9f:6d:19:ac:8b:fa:72:
                    b7:e2:21:f9:c0:59:65:fd:3e:14:0d:e2:3f:51:7e:
                    2f:da:26:24:69:58:9c:21:47:83:d9:51:25:9f:32:
                    b6:bc:ee:31:8a:7a:c0:3f:dd:1e:c5:f2:05:db:e6:
                    ea:3c:1e:28:2b:d7:6d:d2:6e:2a:0f:f5:a4:88:23:
                    7e:21:75:3e:67:e0:9f:bd:76:91:88:49:52:5d:81:
                    6d:5d:76:50:35:81:e7:88:ca:d3:67:d3:29:e4:c1:
                    40:ea:bf:43:cf:3a:3c:d8:6c:57:13:36:02:ba:a8:
                    1f:de:8c:75:a0:c4:84:e0:a6:fb:33:53:d9:2e:ee:
                    fd:f9:82:bf:32:fb:8f:9b:5b:ed:35:e9:7d:df:9d:
                    96:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C5:89:E6:7A:80:EF:EA:76:EA:FC:D7:08:69:62:E5:58:94:67:71
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9d0e16e-bce5-4522-b44e-614362edb054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:36:eb:f9:f3:99:a8:28:cd:9d:d5:11:c3:ea:9c:db:9d:3f:
         65:5e:e7:3d:3b:9f:cd:d1:82:2c:7f:06:66:07:cc:f5:79:e4:
         0a:1f:20:70:7c:1a:02:cf:4d:9a:fe:e7:7a:f6:d6:f4:f8:62:
         fb:27:99:17:53:24:68:d4:b2:59:f3:13:3f:ce:56:86:bc:d5:
         a2:61:ef:3e:ea:4a:25:42:3a:28:0a:8a:3a:08:2d:af:1b:30:
         15:45:10:1c:c1:17:45:10:b3:d9:f7:09:fa:35:8a:ec:3a:06:
         16:78:92:03:18:94:70:8f:01:8a:bc:e6:09:79:15:5a:05:a0:
         1f:a2:5f:1c:2e:b9:23:54:ad:4d:70:55:fd:ab:c8:d8:22:5a:
         a7:0f:dc:92:44:89:f6:2e:91:a2:9e:7d:4e:81:e2:eb:03:63:
         b6:50:8b:0c:a9:68:54:80:db:89:55:f1:24:05:b0:a5:36:b5:
         72:39:b8:24:b4:4b:03:1e:2d:ef:ae:a0:45:86:a0:35:2c:ef:
         57:96:fe:9e:82:0b:5d:d8:e7:ec:95:c3:05:37:e4:fd:f3:98:
         b3:06:78:c7:d0:86:49:32:68:5e:43:df:88:af:47:8d:f0:20:
         3b:cb:c2:81:fc:3f:6e:67:68:cf:88:a0:74:8e:f7:d0:4b:ef:
         62:0c:35:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:47:42 2026 by rpki-client