Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a575592a-4f8e-4da1-aed9-48fad479afb1.roa
File:                     a575592a-4f8e-4da1-aed9-48fad479afb1.roa (raw, json)
Hash identifier:          V5FeFpU1wKQK2x5PBxS8yJu0j4M/C76qGe7tz38wbwo=
Subject key identifier:   F1:73:1E:E1:19:C8:A9:67:89:BF:A1:F5:63:2D:30:7B:09:6A:EA:79
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       595BA83F8544ED80414C0D897217DEA8F8B87E49
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a575592a-4f8e-4da1-aed9-48fad479afb1.roa
Signing time:             Mon 20 Jul 2026 00:20:07 +0000
ROA not before:           Mon 20 Jul 2026 00:20:07 +0000
ROA not after:            Sun 18 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5b:a8:3f:85:44:ed:80:41:4c:0d:89:72:17:de:a8:f8:b8:7e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 20 00:20:07 2026 GMT
            Not After : Oct 18 23:59:59 2026 GMT
        Subject: serialNumber=b1a646312843253884208640404ed9d48b317a89a144fa402d92fd2a98e8d210, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:ac:33:e6:58:db:7b:69:f2:19:23:52:01:
                    60:25:43:b7:39:3a:77:c9:b8:47:20:00:60:6b:9d:
                    4b:96:3b:04:1f:1b:55:a0:cb:54:9b:6f:6e:5f:55:
                    44:b8:a7:94:6b:1f:cc:be:91:22:da:fc:64:54:29:
                    8b:7d:13:0f:62:53:e8:07:e6:ad:2e:9e:94:90:bd:
                    99:fa:0c:0a:29:5d:96:19:7e:ac:ef:1a:31:33:97:
                    22:87:70:0f:55:10:06:cb:f0:97:a8:44:94:17:92:
                    8b:4e:20:60:91:d0:11:d2:41:2b:d2:c4:2e:68:86:
                    25:4c:87:27:7c:15:2c:ab:6c:14:60:95:10:b9:06:
                    79:04:67:d3:c5:fa:95:b7:72:80:5a:11:8e:ca:5e:
                    c2:2c:3a:f5:c4:1f:3b:99:56:91:be:e2:81:42:90:
                    f6:a6:6a:89:f2:98:cd:11:3e:23:20:86:1a:90:95:
                    7b:fd:ea:6b:c8:68:f1:5b:78:04:1f:c0:9f:07:3c:
                    9f:ed:35:55:16:0f:96:03:33:bf:c9:f2:53:0c:c7:
                    32:4d:da:3c:3f:8c:1f:f2:6e:98:a8:3b:30:9b:e0:
                    f3:14:bb:49:15:18:21:0f:d1:3e:cb:ae:92:e6:3d:
                    7c:9d:32:b8:2e:a1:76:75:62:48:47:2c:89:44:70:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:73:1E:E1:19:C8:A9:67:89:BF:A1:F5:63:2D:30:7B:09:6A:EA:79
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a575592a-4f8e-4da1-aed9-48fad479afb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:5d:b4:29:61:83:0c:73:dc:10:0a:c6:3b:19:81:52:5b:40:
         9f:a9:84:24:7e:95:5c:fb:53:6c:5b:a3:53:e4:29:d3:9a:61:
         7f:bd:2b:57:fe:67:bf:b1:2b:ef:77:9c:68:40:d2:be:0c:f2:
         20:db:8a:d5:2a:08:89:05:86:f3:3c:af:1a:6e:d0:16:1b:7c:
         cf:9b:70:10:f1:24:66:40:6d:57:46:7d:ab:96:bf:2f:6e:f8:
         c9:fe:32:c6:ca:8b:f3:74:c9:75:96:51:66:8e:3f:45:f8:88:
         44:36:1c:57:90:1e:f2:5e:cb:a3:b3:bb:50:f7:16:d6:1b:cd:
         47:c5:e3:1a:b9:b4:9d:bb:17:bd:a7:ca:d2:36:e3:6c:71:79:
         f2:28:58:a0:64:d8:6d:4c:25:e2:f1:a8:e3:d3:e5:de:d1:3f:
         57:34:05:1d:da:8f:ef:2f:f6:33:36:9d:c5:7f:d9:c6:3b:c4:
         ca:dc:bf:9c:e1:11:30:7b:7d:46:3a:a3:bd:8f:4f:89:ae:85:
         47:b2:86:7a:34:05:d6:ec:0a:87:81:3a:a3:81:65:de:d5:11:
         b6:6c:ae:56:ec:c1:0c:e8:26:95:93:12:cf:ad:16:ab:51:a6:
         e8:80:c6:0a:46:c8:a4:20:1e:0d:f0:40:2e:dc:1a:5e:a1:83:
         b9:f9:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:21 2026 by rpki-client