Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edbe8cc6-1247-4c9a-ac6d-ca0c4ebb166b.roa
File:                     edbe8cc6-1247-4c9a-ac6d-ca0c4ebb166b.roa (raw, json)
Hash identifier:          MFlYC5+k0M+d+NuF5YZQq44NyP24YRL/WIEg/ONDmNc=
Subject key identifier:   58:03:91:C0:81:4C:95:27:54:DA:D8:18:55:DF:FF:E5:6C:96:B2:59
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7A3E46337C46D1A0898E7730BE9531E683CE0673
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edbe8cc6-1247-4c9a-ac6d-ca0c4ebb166b.roa
Signing time:             Sun 10 May 2026 00:00:06 +0000
ROA not before:           Sun 10 May 2026 00:00:06 +0000
ROA not after:            Sat 08 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.10.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3e:46:33:7c:46:d1:a0:89:8e:77:30:be:95:31:e6:83:ce:06:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 10 00:00:06 2026 GMT
            Not After : Aug  8 23:59:59 2026 GMT
        Subject: serialNumber=9251b362dc54690574b42bbc4d2ed01136dfcc152c3320168e2603436643b14c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:46:dd:13:d7:8d:0c:45:5a:b8:8e:5d:dd:55:
                    38:b7:43:3d:e3:88:f2:fa:08:6e:24:f7:eb:57:08:
                    32:f5:6c:9c:0b:86:a2:7b:52:fc:12:7c:f7:34:86:
                    81:7d:7d:45:38:b9:ea:d7:cb:25:bf:68:15:2b:d0:
                    35:f1:59:72:0a:df:ca:6c:4b:9f:2a:d8:4b:55:28:
                    79:9c:0a:c9:c8:a7:73:eb:9e:b3:c7:52:0b:f1:58:
                    e8:81:88:38:cb:1b:bd:e5:f1:04:6f:95:b3:8d:e6:
                    8e:74:b5:95:cb:0b:ba:5f:2b:db:49:68:c6:3a:87:
                    70:4c:77:74:a8:eb:e6:fd:fc:40:86:16:6d:ea:04:
                    7d:72:b0:5e:ff:bf:65:ad:44:16:b7:18:ce:37:21:
                    76:66:a5:70:d1:65:47:1c:7d:37:61:3f:31:18:de:
                    eb:02:be:6b:85:fc:41:22:5a:95:af:50:e0:63:0a:
                    80:53:6b:c6:98:27:33:f4:2e:a0:e8:cf:b6:07:07:
                    c8:29:7c:94:b5:01:98:19:cd:6e:b8:bf:a2:da:5d:
                    dc:9b:c8:06:42:27:47:ec:4f:48:12:e2:33:bc:29:
                    6e:97:f9:f6:4a:d5:5c:5f:c9:08:2c:17:ed:07:84:
                    75:f2:9a:45:5f:cf:45:8a:d2:db:04:2e:b0:f4:ca:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:03:91:C0:81:4C:95:27:54:DA:D8:18:55:DF:FF:E5:6C:96:B2:59
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edbe8cc6-1247-4c9a-ac6d-ca0c4ebb166b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.10.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b1:94:f4:ec:ef:f6:a6:dd:69:f6:0d:16:bc:20:a5:fa:15:86:
         ec:37:f1:2e:62:e5:4c:d9:b8:92:8e:41:d1:82:b6:98:53:77:
         a9:bd:0f:5c:67:73:de:8d:69:db:58:90:c7:e7:9e:87:3b:91:
         f5:e2:16:67:e0:a7:87:db:41:62:05:41:da:14:17:77:c5:04:
         0d:0e:98:ed:aa:b3:2f:a8:53:3a:f7:8e:c6:22:d5:ef:4f:99:
         5b:d6:6d:e5:1e:a5:cd:40:ea:d3:81:94:e1:e0:d0:07:f5:58:
         5e:d2:19:56:7e:1d:97:c0:ef:4b:7e:79:62:30:e3:2b:6d:fa:
         42:c8:91:d1:3b:f5:8d:03:f9:d9:24:49:24:58:b0:ef:f4:b8:
         cf:9e:b5:09:20:32:4b:93:ee:af:17:e6:da:ac:5d:75:89:f6:
         ed:3e:5e:16:63:d5:7c:7f:dc:d6:d9:ef:b9:44:77:63:06:0a:
         63:7a:70:f7:6f:2b:79:a4:9d:39:a4:4d:3f:90:f0:11:99:ce:
         2a:04:47:5b:b5:af:30:9f:64:21:f9:16:ae:38:f1:5a:f0:90:
         56:34:c7:4d:b1:c1:5c:1c:5b:90:2e:d5:8a:d9:d7:0d:90:f9:
         32:91:17:c3:0c:49:25:f8:90:da:73:d7:f6:24:8b:59:e2:0c:
         66:e0:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:35 2026 by rpki-client