Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750c6639-e3eb-480d-90fc-80f03249cf86.roa
File:                     750c6639-e3eb-480d-90fc-80f03249cf86.roa (raw, json)
Hash identifier:          ZK2lg0CTPLOvBzXIzVciAwEw5ZlWUwd+WyPcGHvh4uM=
Subject key identifier:   FE:2D:AC:DA:29:F2:4B:05:63:D4:87:26:DE:A6:B8:29:77:E0:61:49
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       185466E00AFC38768234F433209C71D99955A21C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750c6639-e3eb-480d-90fc-80f03249cf86.roa
Signing time:             Mon 20 Jul 2026 00:00:10 +0000
ROA not before:           Mon 20 Jul 2026 00:00:10 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        99.83.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:54:66:e0:0a:fc:38:76:82:34:f4:33:20:9c:71:d9:99:55:a2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:00:10 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=c72c2c84417c2e8dac6b56c9b89097a31c658e30a3cd5584a250524b2dd688f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:2e:2f:0e:06:04:a2:c4:3b:d8:dc:5b:ca:
                    03:6e:23:d1:62:fb:dd:66:bb:ec:c2:d6:b1:f5:9b:
                    78:f9:01:98:13:f2:af:82:8e:b1:56:ef:09:dc:78:
                    b0:f5:5e:81:c2:21:a1:89:7c:57:68:77:40:1a:3c:
                    58:32:2a:df:f8:95:4f:b1:fd:01:1b:b0:a1:bd:7e:
                    2b:4d:6e:f3:9c:3b:11:dc:ef:6f:ee:e8:ef:a4:60:
                    9c:35:7d:a4:ea:99:6a:79:f3:bc:d1:9b:2c:30:99:
                    10:07:0d:9e:35:e7:cf:b1:fd:d8:b8:a6:e7:e4:ac:
                    55:b9:8e:59:19:94:d8:f3:c8:24:93:e5:3c:37:82:
                    0c:5a:ea:3d:aa:ba:9d:ff:2c:e4:e9:11:ba:93:81:
                    25:4d:cd:9b:21:00:84:92:de:fb:c1:0f:a2:1d:8c:
                    96:85:77:be:0a:e4:7d:ba:33:6a:aa:df:cb:3e:a5:
                    34:e4:28:8f:9e:b7:5e:4e:33:e2:ef:e8:a5:e3:06:
                    49:eb:19:f8:90:64:4b:de:40:52:0c:b7:6a:7f:12:
                    fd:7f:87:f9:cc:8e:80:0b:af:ab:e7:55:95:df:35:
                    66:32:bb:e5:80:a2:84:9f:5b:37:68:af:fa:04:68:
                    a3:6a:6d:c5:e9:32:c5:80:01:48:df:f2:29:00:9e:
                    4a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2D:AC:DA:29:F2:4B:05:63:D4:87:26:DE:A6:B8:29:77:E0:61:49
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750c6639-e3eb-480d-90fc-80f03249cf86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:df:8a:6d:7f:c7:52:b8:f1:85:cf:1f:e7:2f:21:1a:ea:01:
         38:11:c5:b4:37:9d:17:ee:67:03:f1:de:85:a2:6e:87:73:7f:
         e9:b5:55:b0:32:b8:c9:46:a8:4b:bf:08:4e:2b:98:e7:55:91:
         f5:5e:e9:d6:ae:43:dc:b6:71:72:d2:e0:25:6c:0f:fe:dc:d8:
         ef:94:20:d9:f8:2a:fe:6f:2d:57:c5:26:60:5b:df:87:6f:28:
         00:db:a4:5a:cd:c6:67:2a:57:8a:f3:40:00:d3:34:d9:3e:13:
         5f:6f:33:0c:18:f7:f0:3a:90:36:c9:86:83:3a:4e:1d:71:fb:
         5e:87:88:15:7c:90:c7:fc:2b:67:17:9d:f1:9e:cf:01:c3:06:
         cd:b5:a1:ff:3e:de:9f:89:3d:cd:d7:79:84:d9:c5:eb:73:e1:
         23:9a:79:04:98:a9:66:64:30:f2:ad:28:0d:50:bb:d3:7c:5b:
         08:44:d7:e6:d5:8b:27:e7:01:19:54:99:5a:a9:a3:b0:43:ad:
         cf:a2:da:04:00:ed:4e:92:0f:63:b0:ab:4f:81:c3:51:17:2a:
         ff:e6:ba:68:f6:5d:de:bb:55:32:8e:00:53:b7:35:17:85:61:
         0e:59:b3:84:96:3b:a4:0f:b0:70:cb:77:79:c7:45:cf:96:b4:
         9e:e8:b3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:28 2026 by rpki-client