Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2790fa50-7a71-46ac-a374-b39800d22bbd.roa
File:                     2790fa50-7a71-46ac-a374-b39800d22bbd.roa (raw, json)
Hash identifier:          I1n4mEMMsPDp6Ce18OOQZ/k3QWphw3A3XtxFkT1MTxE=
Subject key identifier:   DD:82:60:92:92:59:5B:E0:7C:69:CD:0D:64:23:A7:25:15:98:A0:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7D3000FD4A9B5CBAAD104B43872200834C649C0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2790fa50-7a71-46ac-a374-b39800d22bbd.roa
Signing time:             Tue 21 Jul 2026 00:51:18 +0000
ROA not before:           Tue 21 Jul 2026 00:51:18 +0000
ROA not after:            Mon 19 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        99.151.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:30:00:fd:4a:9b:5c:ba:ad:10:4b:43:87:22:00:83:4c:64:9c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 21 00:51:18 2026 GMT
            Not After : Oct 19 23:59:59 2026 GMT
        Subject: serialNumber=29b7559b348a781f3424575b5aee9283cdab443f6340c114e62060163eba2af5, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:13:4f:f8:df:98:8d:cf:7b:98:89:7d:43:b2:
                    07:71:5a:4c:bd:e5:d1:3a:c8:72:15:96:17:d2:3c:
                    32:79:24:53:9b:5e:02:3b:34:c9:1e:65:f1:13:1b:
                    18:9d:b5:68:dc:07:89:50:9e:bc:b0:e4:c2:f4:dc:
                    c5:fe:86:1b:ca:7e:d7:61:d9:a8:51:0d:6d:0c:45:
                    ef:23:a3:47:d9:88:f6:7a:11:ca:ba:0b:68:3f:e9:
                    87:7d:bc:5a:30:86:f6:77:11:05:47:d8:ec:8f:b9:
                    c6:d1:e0:9f:76:a0:a3:1e:f5:39:b4:41:b7:67:59:
                    81:4f:c4:57:51:3f:2f:b3:71:95:31:35:f1:66:56:
                    91:e8:50:80:b3:2a:2f:75:c4:8a:18:08:33:5b:63:
                    3f:d5:2b:79:63:64:25:31:65:ff:69:4b:5d:9a:24:
                    1a:8d:22:dd:f1:36:aa:d4:57:03:ea:57:61:a7:30:
                    73:32:9d:b7:0a:d2:a7:2a:5e:aa:d2:55:a4:3c:bb:
                    c3:b9:86:a1:64:28:60:6b:cd:ea:d8:ec:e9:a0:06:
                    c3:b7:97:bc:20:b8:d5:31:9d:05:76:e2:70:ea:ae:
                    c6:7e:e2:bd:ed:c3:3b:40:94:0e:64:ec:64:3a:59:
                    65:a2:36:19:12:38:91:26:09:1e:0d:5c:9f:70:31:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:82:60:92:92:59:5B:E0:7C:69:CD:0D:64:23:A7:25:15:98:A0:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2790fa50-7a71-46ac-a374-b39800d22bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:f5:b0:46:bf:37:ef:14:a5:80:7f:7c:01:f2:d7:b1:fe:c4:
         9a:41:49:a3:4d:4f:03:35:c9:0c:c8:36:31:8c:4b:bc:8c:66:
         7b:58:3c:09:91:d8:09:be:6d:b4:e8:3a:44:74:c2:b8:26:42:
         62:40:4d:02:bd:a0:04:29:dc:a8:04:c0:c9:b1:3f:b2:52:5f:
         63:bc:df:7f:f2:7c:bf:0d:d7:6c:4e:d9:fb:d9:07:b5:e9:91:
         10:dd:d8:b5:3d:5d:64:75:56:4c:6e:2d:a8:e7:83:64:0d:1e:
         fa:f6:f9:db:a2:c6:c6:42:d0:e1:60:47:8e:89:0f:cc:25:04:
         99:3b:bd:6a:d0:8f:a3:ab:94:38:5e:cb:4f:e2:6e:23:bc:8a:
         2c:e5:06:b6:ad:1e:fe:e1:d6:c5:e1:9c:7d:5b:ae:0c:51:cb:
         ac:70:b4:25:8e:79:47:65:d0:bd:eb:31:f1:b6:8a:89:fd:a5:
         ee:45:fc:61:35:8d:f8:64:fb:50:39:09:e9:65:48:ce:98:1f:
         be:39:f2:99:b3:10:53:63:89:1e:93:66:56:d5:11:e7:1b:01:
         92:01:f6:71:71:fb:fa:92:05:c6:47:20:b3:4b:bd:67:94:a8:
         88:fd:34:a4:12:30:37:87:e5:ee:0b:62:0f:f0:81:e2:c6:44:
         c3:2b:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:44:09 2026 by rpki-client