Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e182208-33f2-4cdc-804c-df7ed11518f5.roa
File:                     2e182208-33f2-4cdc-804c-df7ed11518f5.roa (raw, json)
Hash identifier:          PG4nArgcQDmbKuhjKc3TCG5ZvysKPIkTM8DNy+IgRl4=
Subject key identifier:   04:5B:B8:09:9C:B6:40:EB:46:7B:BE:8C:6B:CD:A9:47:FD:A5:D3:A2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       23D1DB2BC8FB92743A538DC3703F33A8544CE7B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e182208-33f2-4cdc-804c-df7ed11518f5.roa
Signing time:             Mon 04 May 2026 00:30:10 +0000
ROA not before:           Mon 04 May 2026 00:30:10 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.83.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d1:db:2b:c8:fb:92:74:3a:53:8d:c3:70:3f:33:a8:54:4c:e7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  4 00:30:10 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=18484d684d89fe8c4277b83e48d8d7b14501cc896178852b594a4faff71b494c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2b:7b:ed:44:a6:f9:99:16:3f:7d:2d:df:eb:
                    b0:5a:68:f2:c5:9d:f0:c5:f5:20:6c:8e:bc:8f:ec:
                    a6:02:a0:37:29:37:bd:08:9d:b1:33:ef:c0:3b:94:
                    df:bd:16:cf:7c:cb:55:a7:0d:97:76:e3:53:1e:d0:
                    ea:e3:05:0f:4e:8e:59:50:cc:f2:9b:f8:bf:3f:1d:
                    2e:0a:02:33:46:f8:5b:1b:dc:a2:d6:5f:fa:1f:7c:
                    93:d9:8e:65:7f:67:60:dc:93:e1:cb:44:45:19:22:
                    1b:e1:63:db:e4:d6:90:5c:0a:ba:92:8c:9f:86:3d:
                    09:9c:6d:35:79:35:60:71:a2:1f:41:8f:de:f4:e3:
                    f6:40:c4:8a:2e:82:f8:60:14:63:43:92:f0:b4:88:
                    8d:b0:6e:e1:0f:59:15:9d:94:54:33:1e:a6:66:18:
                    57:7d:66:b5:da:3f:52:3b:91:fb:cd:19:24:85:08:
                    72:06:40:10:92:12:e4:51:7f:31:ed:9e:2f:c1:95:
                    e0:f9:fc:e3:c0:c8:d9:ee:03:49:37:6c:97:d7:42:
                    f1:fb:dc:4e:9d:79:d3:ba:98:8e:95:96:83:06:67:
                    87:02:7f:7c:24:e7:d6:ba:4d:a4:b3:4e:75:ae:12:
                    cd:f5:5e:59:cd:6b:be:0d:d2:8b:c5:bc:74:01:d7:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5B:B8:09:9C:B6:40:EB:46:7B:BE:8C:6B:CD:A9:47:FD:A5:D3:A2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2e182208-33f2-4cdc-804c-df7ed11518f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:92:fc:d1:f9:2d:3a:c6:c2:2f:46:e2:b5:9d:63:b4:e6:b0:
         89:77:59:04:e5:ee:1d:f2:77:0b:87:2e:2f:f9:47:66:b2:27:
         fa:6c:d6:f2:35:91:58:9f:f5:ed:94:2c:11:b2:55:3e:a2:2b:
         a6:d8:d6:d8:f1:25:c3:80:86:79:7e:07:22:ba:7f:05:92:28:
         74:36:04:55:d9:b1:2f:30:9d:88:be:0f:3e:e8:68:56:6f:98:
         80:80:1f:48:f6:77:20:3f:60:f7:98:e8:15:4e:df:38:42:b8:
         26:f9:c3:59:7b:a6:93:39:08:b9:92:de:8c:aa:f0:0e:0f:4c:
         61:20:8a:26:99:ee:4b:54:55:0c:14:fd:1d:17:4d:74:e6:dd:
         6d:32:ad:66:2b:2e:32:e9:87:9d:82:42:7c:6c:5a:44:7c:dd:
         1b:59:01:a9:6b:53:4d:9a:d0:3c:b0:f9:92:37:6b:3a:8e:2e:
         49:da:ed:15:82:19:a1:b6:c5:76:2e:0a:ce:56:b4:ee:19:3a:
         35:a5:de:11:70:14:2f:e7:39:4e:01:dc:05:73:6b:6d:dd:4d:
         72:ac:77:be:5d:17:2c:0f:c2:07:46:1b:01:91:d8:89:1c:08:
         e3:d7:29:29:ad:8b:f6:d1:af:0a:8f:22:c7:d6:14:1e:10:c2:
         55:d3:a2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:07 2026 by rpki-client