Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6554cd-810f-493f-bc11-5ac0cedcef7b.roa
File:                     1c6554cd-810f-493f-bc11-5ac0cedcef7b.roa (raw, json)
Hash identifier:          7htHkQGdz5zTamLWZnVByh2TT3V0/wzv/xQXdrlkbwM=
Subject key identifier:   C7:C8:3E:8B:17:86:B0:E6:3F:77:DA:9B:C3:B9:DB:AB:CF:0F:DC:FF
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5F9BEF5E9D42D627F89E6058A78F23BA97866AF1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6554cd-810f-493f-bc11-5ac0cedcef7b.roa
Signing time:             Thu 08 Oct 2026 00:40:42 +0000
ROA not before:           Thu 08 Oct 2026 00:40:42 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9b:ef:5e:9d:42:d6:27:f8:9e:60:58:a7:8f:23:ba:97:86:6a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:40:42 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=73570f4605b4f6755c85df3b38a57bbde2b8a6d5931dad376f7cbe0d59f3134e, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:09:a7:c4:b9:53:ef:1c:05:e1:ea:ee:10:65:
                    37:d5:ec:cf:ee:29:01:05:9b:60:26:74:7c:9e:fc:
                    14:62:d4:b9:2e:ee:bc:10:2e:3a:27:4d:a6:d7:bc:
                    2a:e8:3e:b4:c8:27:b0:94:e4:a4:a7:6e:04:51:d7:
                    e7:37:0b:c3:33:c2:66:e3:e5:7b:98:74:d5:68:80:
                    6c:6c:ec:8e:1e:0e:06:35:f2:50:a1:81:90:60:b5:
                    c8:d5:9b:37:16:d8:fb:39:01:e3:97:66:c6:99:71:
                    95:42:80:ed:86:1e:a8:d3:4f:7a:64:5e:d3:8e:55:
                    b9:6f:00:38:ce:b3:32:79:37:62:2a:54:4d:42:81:
                    6c:57:62:df:33:3b:f6:74:f4:f0:e2:66:af:33:ff:
                    4b:04:fb:b5:29:72:8c:4b:a5:dd:46:4d:d9:44:d9:
                    0c:97:f7:e8:28:15:c3:e1:d7:94:39:c0:8c:d0:c2:
                    07:a4:7e:75:aa:fe:65:58:87:77:25:a7:87:13:49:
                    ac:67:3a:61:6a:de:a0:07:13:f6:45:a3:e8:fb:a8:
                    5c:4e:49:e4:c7:82:dc:92:f6:d3:af:f2:7e:e7:1d:
                    49:fa:fa:aa:a7:18:dd:c8:03:a6:e4:d1:76:a7:36:
                    e5:82:63:eb:3b:e6:f5:92:19:f9:7b:07:bf:99:73:
                    23:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C8:3E:8B:17:86:B0:E6:3F:77:DA:9B:C3:B9:DB:AB:CF:0F:DC:FF
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6554cd-810f-493f-bc11-5ac0cedcef7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ed:bf:27:96:ee:fd:15:f3:a3:9f:cd:51:ad:08:9c:e6:e3:
         01:11:6e:63:45:23:65:5c:a8:ea:bb:d8:4d:b1:33:62:e2:2c:
         a3:ee:80:72:77:cc:8c:2e:1d:8a:99:7b:3b:8d:9f:d7:50:0e:
         97:4e:c2:a7:42:aa:36:44:d2:dd:32:66:13:de:a8:77:d6:d8:
         5c:81:85:46:6c:31:80:53:e8:2a:c3:58:f4:14:08:a5:7a:4b:
         9a:90:bb:9a:ee:cd:38:aa:79:f3:f0:3d:70:24:f6:fc:89:7d:
         7e:83:0a:08:d8:5a:c8:54:42:a4:73:06:9c:68:35:df:5f:27:
         98:1a:17:4d:95:87:34:93:23:19:ca:99:15:91:ee:5e:d9:21:
         9f:59:6b:33:95:63:ff:80:9c:0a:54:6b:5d:fc:80:ff:3c:b5:
         9b:b7:50:fe:b7:57:18:eb:30:65:44:11:b1:7b:09:78:73:58:
         ac:b4:37:3d:73:36:1a:c6:cd:d0:11:12:0f:c4:b3:ca:22:87:
         be:a4:e7:e9:05:ce:1f:b6:ed:56:d2:f6:2f:33:d4:df:69:1a:
         7d:49:e9:60:7c:73:f2:ea:5d:00:0c:88:8c:4c:94:b2:a5:e3:
         10:40:5a:2b:d2:45:2b:19:f9:91:5d:dd:a3:88:89:77:92:ce:
         a7:57:55:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:05 2026 by rpki-client