Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08588117-d118-4b7a-831a-9a9b66890b9b.roa
File:                     08588117-d118-4b7a-831a-9a9b66890b9b.roa (raw, json)
Hash identifier:          BbZkzN6hym7PxBBkTBzpry5er4a8NGxd1QihMOjgWCg=
Subject key identifier:   A8:E4:CC:31:EA:5D:C6:3F:B0:27:D9:E7:75:E4:F1:93:B4:A9:22:BD
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35FB795DC8B19EF649D7FF488AFA8CDDB1677577
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08588117-d118-4b7a-831a-9a9b66890b9b.roa
Signing time:             Mon 04 May 2026 01:01:18 +0000
ROA not before:           Mon 04 May 2026 01:01:18 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fb:79:5d:c8:b1:9e:f6:49:d7:ff:48:8a:fa:8c:dd:b1:67:75:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  4 01:01:18 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=39ac3808da921a0cdb25f50d7b5d49dfb3ebda63670fbe86ffa4dc847a4f0380, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:a0:84:ff:d6:45:38:17:cf:f1:82:ed:50:
                    ac:e1:8a:bc:38:ee:02:aa:35:a2:53:19:9c:cd:f6:
                    b0:ca:51:f3:95:62:87:84:0e:d3:48:09:a4:9c:70:
                    9f:05:1f:32:01:60:c5:a2:3b:cb:69:b2:d0:0c:48:
                    a9:fc:1d:7b:22:69:57:2a:d1:40:55:d4:e0:a1:d9:
                    e8:09:b7:3c:d1:a2:d3:b3:eb:61:d9:18:bd:0f:a6:
                    cd:70:b7:39:b5:54:e1:9c:38:d6:70:6a:44:33:cf:
                    0b:f3:c6:f3:ca:b7:0e:ce:7e:1b:f1:98:56:4e:ff:
                    ed:64:e7:57:5c:22:fb:ae:af:da:f7:4e:32:b6:5b:
                    00:ed:df:fe:4d:05:0e:a1:95:57:59:8c:98:43:31:
                    08:c3:cc:49:19:15:e8:93:01:46:ec:80:01:77:77:
                    63:9c:df:fe:6c:02:54:18:30:2c:71:b7:fd:2d:85:
                    b7:80:d3:57:c2:38:d5:d6:72:16:40:35:57:ce:5d:
                    f4:7e:22:71:c8:48:9f:9c:87:a7:f6:95:3f:e7:66:
                    9e:44:70:2e:d0:25:ad:c9:bb:d2:7b:d1:49:41:53:
                    23:7b:03:22:d4:e3:5d:46:ba:b3:14:7e:86:ae:24:
                    c9:6a:54:1a:40:3f:f9:ed:95:d4:b5:35:97:21:9c:
                    29:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E4:CC:31:EA:5D:C6:3F:B0:27:D9:E7:75:E4:F1:93:B4:A9:22:BD
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08588117-d118-4b7a-831a-9a9b66890b9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:1c:6c:dd:ee:1d:6e:e0:9a:3c:6d:2c:ee:ff:e6:d2:d7:1f:
         36:3f:79:af:a4:56:cf:64:8e:2e:f9:79:6f:48:25:a9:84:9b:
         71:22:a0:83:30:ca:f8:ee:c3:b9:5b:d8:a7:a9:ce:1c:78:8f:
         6a:e7:95:c7:39:06:f3:31:59:a5:eb:af:77:d8:75:2e:22:3e:
         46:22:92:39:f0:47:e6:44:0c:b5:0b:52:10:48:b4:75:8e:72:
         0c:d7:86:fd:7f:21:54:f2:f7:fa:be:c4:d4:23:e9:6e:d2:68:
         b5:52:e9:f3:73:41:e3:e8:28:90:60:bd:b0:2c:82:61:c2:63:
         e4:95:46:80:1d:cd:a3:ee:b3:d7:e4:a0:be:4e:f8:70:91:a0:
         02:ad:53:d4:db:4a:5e:1a:31:a5:6e:73:5e:02:ca:a1:f2:45:
         38:12:a7:e1:a0:1c:4b:80:84:16:71:b6:0d:d5:53:95:b6:09:
         cb:9e:92:b7:58:c4:83:9e:3b:d9:21:24:94:a3:1f:dc:f5:dc:
         71:8e:f5:1a:46:ee:9c:7b:36:3b:c1:49:df:96:5c:48:80:68:
         a9:b2:e0:97:3b:36:18:e5:4e:83:97:76:b8:9e:36:a0:ab:57:
         bd:d3:1a:8a:9f:70:8d:55:57:1b:98:7e:a3:67:d2:09:c6:71:
         e9:90:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:10 2026 by rpki-client