Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9188fa7b-db94-4ddb-97de-5cb09ac9c624.roa
File:                     9188fa7b-db94-4ddb-97de-5cb09ac9c624.roa (raw, json)
Hash identifier:          JohyL03OnR3kSMfkNSMoF++GMbdo5Bs2VFk/EZOFj7U=
Subject key identifier:   57:38:7D:F3:C1:95:E6:5F:FE:CB:67:88:E6:92:06:55:BB:43:BA:55
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35576B60C31E10666A8A73BA2A0D5E1BB7BEEE10
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9188fa7b-db94-4ddb-97de-5cb09ac9c624.roa
Signing time:             Wed 06 May 2026 00:22:04 +0000
ROA not before:           Wed 06 May 2026 00:22:04 +0000
ROA not after:            Tue 04 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        99.151.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:57:6b:60:c3:1e:10:66:6a:8a:73:ba:2a:0d:5e:1b:b7:be:ee:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  6 00:22:04 2026 GMT
            Not After : Aug  4 23:59:59 2026 GMT
        Subject: serialNumber=557c0a3759d75bd77f9b1ddeb11c1e4000cc691f9bab10a9e81f7786c9981a7a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:0c:60:42:83:74:64:dc:39:5e:57:e8:48:
                    f6:08:e2:8f:2f:73:13:fe:aa:ce:ee:9b:33:3b:83:
                    66:5a:1c:79:38:58:f0:f9:6f:79:91:95:02:2d:4d:
                    97:f3:3f:90:67:ee:7b:55:82:91:49:dd:e5:b7:db:
                    84:63:9a:c3:e5:ad:fc:0c:b9:c7:ca:61:31:dd:0d:
                    79:f4:6a:8f:bd:21:20:c5:d4:f8:f0:32:07:71:25:
                    74:34:04:29:39:68:ff:fe:38:29:91:bf:fe:5e:1b:
                    ab:12:07:2d:49:a8:e3:21:5e:4b:99:01:fa:b7:49:
                    79:aa:21:f7:51:af:5a:92:2b:07:48:ce:e2:36:ed:
                    86:10:7f:cb:27:68:07:d4:ea:29:b6:38:ca:48:18:
                    b5:aa:72:3d:97:d0:a1:e0:b2:84:a9:8d:68:65:bb:
                    00:b8:e6:a7:a1:ba:4c:ae:8f:0e:11:19:0c:62:06:
                    94:3c:d5:f3:8c:5d:1d:74:4e:b9:5b:6b:c2:47:88:
                    6a:3e:dd:7e:a5:94:71:2f:b5:86:6c:87:4e:73:37:
                    22:e5:6f:82:9a:54:e1:12:06:db:be:5a:22:df:57:
                    c9:8d:6f:94:6d:b8:d3:6c:b9:8c:51:4e:b3:34:91:
                    29:0d:ac:fc:74:56:c7:b1:70:e7:44:51:f1:d2:1e:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:38:7D:F3:C1:95:E6:5F:FE:CB:67:88:E6:92:06:55:BB:43:BA:55
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9188fa7b-db94-4ddb-97de-5cb09ac9c624.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:80:e4:16:0d:b3:e2:cb:e0:88:f5:c7:d8:d2:ac:59:ee:49:
         2e:a2:da:13:5d:f3:d9:86:11:4f:5e:c9:78:8e:7e:4a:2b:d2:
         f1:c6:cb:4b:fd:dc:da:f6:c2:79:e9:fe:fd:c3:ed:b0:10:1d:
         c0:bf:2d:52:44:64:80:d6:36:2c:69:81:e9:64:89:3f:d7:51:
         fc:82:a3:ae:13:65:b5:36:84:3d:5a:1f:2b:8d:dd:2e:a7:28:
         67:c2:4b:19:97:b2:7e:94:15:89:e1:5c:2f:e3:8c:ba:20:59:
         bf:16:45:2e:3f:9f:01:24:7e:38:c8:9d:79:c7:8d:76:ab:4f:
         d6:d2:66:36:68:f2:17:bd:d5:de:d1:c0:82:00:08:24:7c:28:
         2a:62:e7:ed:f8:7f:07:26:f2:68:d0:3b:0e:d6:4f:64:42:42:
         75:98:39:82:49:6c:fb:13:d0:9f:96:de:31:4e:6c:d3:ac:b8:
         c5:aa:37:6e:da:d1:7a:4b:17:85:c1:d5:b8:6c:35:61:17:73:
         31:65:de:40:3e:eb:de:7b:d9:c8:57:94:72:3b:dc:37:df:54:
         8f:de:8a:cc:8d:4d:a0:69:92:a9:75:97:e3:33:ae:34:08:8d:
         b3:c2:90:81:d1:e7:3d:b0:d7:6a:1a:fe:08:16:ab:f9:ee:76:
         20:a8:a8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:22:02 2026 by rpki-client