Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82472b31-7e77-4ac9-b2af-3bfa80b720a7.roa
File:                     82472b31-7e77-4ac9-b2af-3bfa80b720a7.roa (raw, json)
Hash identifier:          FTGcGby5bpMQ7tfySSv19OGX+onNPsEJQ+HKVQe4FS4=
Subject key identifier:   02:51:0B:19:E7:90:19:E2:90:4F:2A:B4:03:E2:19:29:E8:24:6D:14
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5838BBF4F2792CF4D66422E59C045D4EBFADC2AC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82472b31-7e77-4ac9-b2af-3bfa80b720a7.roa
Signing time:             Wed 06 May 2026 00:10:10 +0000
ROA not before:           Wed 06 May 2026 00:10:10 +0000
ROA not after:            Tue 04 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        99.150.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:38:bb:f4:f2:79:2c:f4:d6:64:22:e5:9c:04:5d:4e:bf:ad:c2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:10:10 2026 GMT
            Not After : Aug  4 23:59:59 2026 GMT
        Subject: serialNumber=4dee64f5a31f1fa067b7fd6c3b4d2efaaea688741f047d75a4f09aabdd21f3d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e7:fd:2f:8d:46:9e:62:0c:ce:92:0a:1d:56:
                    fb:21:bb:6f:33:fb:6b:fa:76:9c:bb:81:1c:a3:d8:
                    c9:63:f6:24:14:c2:ca:e4:f8:85:ca:ac:eb:cf:c6:
                    51:96:de:50:a5:43:e0:3a:22:37:5a:98:18:ff:59:
                    a0:18:81:16:10:3c:d4:ee:dc:f7:22:15:93:ac:e9:
                    32:f7:e7:fd:6a:2d:59:fb:a7:88:27:93:a0:f6:c6:
                    68:0e:59:7e:b8:ca:88:e7:01:d7:85:fe:71:e6:c8:
                    ac:50:fe:b5:0f:17:96:3c:13:12:5f:20:06:25:2e:
                    db:dd:e5:0c:c8:cd:dc:49:18:a5:71:62:09:0f:7f:
                    f2:67:0f:12:3f:9d:e8:57:49:b5:5e:bd:35:fe:2b:
                    39:8d:1d:f6:aa:00:08:08:1f:28:7c:22:88:74:6e:
                    54:92:86:86:d5:3b:1e:46:48:72:12:9c:3c:07:db:
                    b9:07:de:85:37:30:27:17:f4:5b:b3:e0:fc:ca:db:
                    8a:d2:51:14:5b:60:75:00:7a:88:ee:a0:12:97:2e:
                    78:01:89:a8:35:92:c8:93:53:b4:d4:a9:70:1e:08:
                    d7:65:11:d7:e8:13:e0:37:5c:e7:8d:b8:30:34:9f:
                    11:f1:ce:6a:a9:00:e3:83:a4:31:a3:df:6d:90:43:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:51:0B:19:E7:90:19:E2:90:4F:2A:B4:03:E2:19:29:E8:24:6D:14
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82472b31-7e77-4ac9-b2af-3bfa80b720a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:31:36:f3:c2:7b:51:b3:a8:f1:65:33:0d:69:56:89:0f:cd:
         8d:09:16:0e:b9:bc:2d:8e:68:ae:62:b1:c6:fc:8a:c6:e1:85:
         d6:6d:c8:dc:2d:ef:de:83:9e:88:9e:b4:5a:ef:27:dd:64:38:
         96:f4:3d:09:0e:f2:ff:96:de:03:73:aa:6c:85:38:e8:23:94:
         59:47:be:3d:c1:95:21:4a:f4:2b:b6:3e:82:be:c2:e5:e7:5f:
         a0:16:16:c0:ee:f3:b9:03:ee:64:c2:15:2e:c2:ad:c8:e8:8e:
         a4:0c:4f:e6:15:1b:e3:14:50:ef:95:c7:65:ef:b6:61:5f:d8:
         dc:0f:fa:72:40:68:40:b9:f6:35:42:35:49:f5:b0:64:c6:1a:
         66:cd:ee:39:da:e1:63:43:2b:c3:d3:f0:d3:22:0e:08:fe:e7:
         c2:81:a1:9d:dc:d2:4d:ac:ed:83:2f:ff:d0:ce:e8:8f:33:e9:
         84:76:e5:07:25:07:96:1b:f0:e9:d9:d1:83:b9:d9:ca:61:5d:
         ea:16:36:3e:a5:64:2e:62:d0:9b:cf:79:3c:83:78:c8:2d:0c:
         b1:6d:e2:ef:77:03:38:f0:31:dd:ad:65:c6:0d:c2:e8:97:b6:
         77:fe:72:db:f5:7e:b6:cc:29:12:41:05:bd:e8:28:ae:94:ea:
         df:3f:2c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:16:35 2026 by rpki-client