Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98059cbe-56d8-4a3d-a56f-38d0ffec1aa6.roa
File:                     98059cbe-56d8-4a3d-a56f-38d0ffec1aa6.roa (raw, json)
Hash identifier:          4tvpdxs70k/olJNH8EpdbN4KowNhmRqNURemcnVW3zM=
Subject key identifier:   9C:42:13:FA:E3:A3:FA:F7:E3:39:A5:97:8E:17:9B:7D:6B:A1:9B:86
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1977290E9F8711559978CCC7C447CD23D3A0D786
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98059cbe-56d8-4a3d-a56f-38d0ffec1aa6.roa
Signing time:             Thu 23 Jul 2026 00:20:43 +0000
ROA not before:           Thu 23 Jul 2026 00:20:43 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.83.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:77:29:0e:9f:87:11:55:99:78:cc:c7:c4:47:cd:23:d3:a0:d7:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 23 00:20:43 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=2ceb56c1e9e6904ae42679825ef43a874e38a68f82ef0fc94cd2250a4f7e23e6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:89:27:52:66:22:38:ea:f3:01:e4:85:35:
                    cf:f6:7b:63:3c:a5:b2:d1:b0:d1:b4:d5:dd:ba:2b:
                    45:a3:87:6d:ca:9a:61:02:a6:a8:c7:46:35:72:24:
                    96:d6:a6:1f:9d:e0:d3:fa:b4:ab:91:f1:04:c9:7c:
                    74:3f:79:66:0c:29:c5:ab:36:81:42:c3:7d:7d:d5:
                    e0:af:22:3f:55:09:ce:72:17:ed:80:67:63:4a:31:
                    15:43:17:f6:66:95:cb:ee:4d:d1:ce:57:2f:dd:39:
                    a0:8c:77:7a:ab:88:bf:9e:c1:96:73:47:1a:9b:9a:
                    fa:7d:97:9a:dc:7d:6d:b4:11:d8:fd:44:38:41:ae:
                    8b:c7:14:63:cc:d6:90:26:be:da:60:63:22:4d:d1:
                    aa:9d:33:d0:23:36:50:76:e0:b0:a7:c9:44:a0:54:
                    e6:c7:e7:b2:ae:9a:42:1a:b5:70:b1:16:f1:23:9c:
                    87:d4:7f:9b:51:1d:77:7f:07:3d:ac:e5:ae:35:43:
                    7d:83:4f:a8:f6:6c:cf:20:5c:a5:6c:89:f0:3d:56:
                    0f:2f:6b:63:53:2f:73:23:6a:de:a6:6e:69:7a:f6:
                    72:ac:12:6b:ba:ff:45:26:27:89:75:82:cf:39:25:
                    eb:9e:a3:2d:61:65:83:08:04:5a:d7:4c:1b:4a:46:
                    35:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:42:13:FA:E3:A3:FA:F7:E3:39:A5:97:8E:17:9B:7D:6B:A1:9B:86
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98059cbe-56d8-4a3d-a56f-38d0ffec1aa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:f9:e9:a0:3e:1c:77:2d:6a:07:6b:fd:9b:eb:ca:08:74:b7:
         cf:79:5d:cf:a6:07:ba:38:84:9c:d8:03:8c:a2:79:7d:9e:6c:
         b2:80:22:be:d7:69:a2:98:54:08:b6:ce:f3:b4:67:75:63:21:
         12:3a:bd:b2:8d:a5:a8:2c:97:6c:a3:d2:9a:af:32:1d:51:cf:
         cf:4f:50:a8:16:53:e4:af:87:08:41:b3:e3:31:7d:39:9e:26:
         ea:60:43:73:e8:ad:43:65:0d:12:90:f0:84:89:50:18:51:89:
         07:e5:b2:37:b4:7f:fe:40:82:60:36:96:96:f2:39:ee:90:79:
         d3:9e:12:04:36:6c:bb:d4:a5:5c:36:fc:b8:e5:a4:9d:2f:22:
         a1:a6:f8:de:e3:d2:1a:5a:7b:4a:7a:49:79:20:19:1f:f8:50:
         99:dd:ef:4c:9b:9b:57:2f:4b:00:17:ba:c6:21:8d:56:67:54:
         0a:2d:61:54:c2:f8:86:ed:84:6f:0d:dd:9f:b0:c3:12:73:2b:
         54:22:1d:63:28:93:92:96:b4:c5:fb:fd:20:bd:95:5c:0f:4f:
         1c:8a:14:ee:39:24:70:91:04:f4:78:ff:af:dd:dd:d5:b1:9e:
         8b:87:b6:c9:e2:13:c5:95:0b:c9:5f:bb:51:a8:bf:c3:a1:47:
         bb:df:5b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:31:50 2026 by rpki-client