Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ed85cc4-b369-4ea0-911d-dc6ad653b1dd.roa
File:                     2ed85cc4-b369-4ea0-911d-dc6ad653b1dd.roa (raw, json)
Hash identifier:          UxC6qkUk1CC+g3rKVrbUKd++bGBbLW/aaOhw0ffsjY0=
Subject key identifier:   6A:3E:E9:5C:ED:41:31:82:FE:F6:57:E7:ED:0C:8F:5C:C0:78:82:D0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DFCE0D7BB7AD5D4F09BCDB9E7503CFA8BAAA854
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ed85cc4-b369-4ea0-911d-dc6ad653b1dd.roa
Signing time:             Thu 06 Aug 2026 00:00:38 +0000
ROA not before:           Thu 06 Aug 2026 00:00:38 +0000
ROA not after:            Wed 04 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.83.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fc:e0:d7:bb:7a:d5:d4:f0:9b:cd:b9:e7:50:3c:fa:8b:aa:a8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  6 00:00:38 2026 GMT
            Not After : Nov  4 23:59:59 2026 GMT
        Subject: serialNumber=36746b2f67847dcd105f88eafffa8cd433cc1e391b2cb4afd52424a774c2c123, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:6c:fc:b5:33:2f:56:09:8a:d2:71:26:93:
                    ce:da:46:19:32:bd:6b:44:c3:31:53:b5:58:c7:38:
                    86:d2:08:49:52:65:d0:1c:0a:0e:12:82:4b:f5:e4:
                    4f:9b:0c:5e:e4:3d:ad:56:30:d4:22:da:01:ef:52:
                    01:2b:dc:13:7c:ba:c0:fd:ae:88:35:db:07:24:d0:
                    c7:63:dc:fd:10:26:b3:fa:cf:d1:4a:6a:a2:ec:84:
                    81:62:f7:7c:cd:c4:1c:05:33:c4:b3:a4:d8:a6:bc:
                    c0:39:ba:92:d3:b4:83:8e:88:02:76:02:d9:e9:8c:
                    77:4a:d4:c9:23:04:17:90:fc:9b:6d:b6:e8:d5:42:
                    e4:bf:75:9e:5d:45:ad:f6:ea:98:91:4c:85:3a:d3:
                    3b:26:a5:b9:e1:9c:35:e7:9e:6b:81:11:56:44:40:
                    69:3e:05:dc:68:60:e3:dd:1e:1b:63:5e:35:d3:49:
                    65:e6:b4:51:49:4c:b2:96:e8:4f:22:d4:57:dd:ed:
                    91:ea:38:b9:b8:0d:cd:dd:6a:24:47:63:80:b8:42:
                    0c:51:56:f9:ba:c2:69:af:91:da:3c:bc:79:56:23:
                    2c:60:b0:c7:8a:5f:a3:3d:25:c2:4a:ff:93:fd:5d:
                    92:dd:18:20:2e:2e:c7:de:35:8b:8c:3f:f1:e9:c5:
                    00:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3E:E9:5C:ED:41:31:82:FE:F6:57:E7:ED:0C:8F:5C:C0:78:82:D0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ed85cc4-b369-4ea0-911d-dc6ad653b1dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:f0:a8:90:72:a4:d7:cb:6f:5f:a4:a8:fa:41:3f:f0:05:79:
         3f:68:c9:de:98:51:f3:89:e9:33:43:eb:b3:ee:03:41:87:70:
         b5:10:db:5f:a9:e1:1a:9f:11:28:a3:43:2a:fd:4d:2b:2c:68:
         57:ca:7d:d3:d9:3b:80:7d:59:98:b1:ba:fc:bd:16:c2:58:e6:
         59:14:10:2c:79:56:34:8c:69:29:bc:fc:15:79:9e:12:42:1b:
         74:ff:bf:4a:b2:41:19:72:a9:d8:59:0c:07:8e:03:c4:17:ec:
         d1:f8:a1:a2:50:b7:83:4d:83:73:26:cc:66:98:a0:bd:2f:e9:
         a6:74:05:e6:21:08:28:0a:3e:21:7a:bc:d5:e8:81:31:01:c9:
         25:cf:82:e3:2b:ba:27:41:b3:09:d4:4d:c9:2a:49:b5:b3:08:
         2c:82:53:10:ca:a1:b7:7e:78:95:79:df:60:51:d3:c6:ca:2d:
         93:fd:e8:ef:34:04:22:44:8e:0f:87:cb:c7:9b:ec:8d:4a:50:
         37:8f:c5:77:4b:45:2c:13:8e:2d:d3:7f:9d:62:8e:86:17:9a:
         a4:1e:97:68:33:e1:64:42:af:5a:a5:f9:75:b9:3e:6c:8e:86:
         7f:5e:73:5c:56:10:c7:52:7a:2d:b0:c4:12:3b:0f:42:27:01:
         63:0a:b2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:15:15 2026 by rpki-client