Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3080108a-6812-4377-814d-205d77172c1f.roa
File:                     3080108a-6812-4377-814d-205d77172c1f.roa (raw, json)
Hash identifier:          YFZoV6pEl7eYP+P0UBePcCtCYIBWe/Dx6dnds8Mpf4Q=
Subject key identifier:   99:B1:0B:02:14:85:61:D1:99:B1:45:83:CE:03:35:53:01:10:E1:DB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2F4030700641EC2EED9AAC39CDEE95DF45CA3453
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3080108a-6812-4377-814d-205d77172c1f.roa
Signing time:             Sat 08 Aug 2026 00:10:04 +0000
ROA not before:           Sat 08 Aug 2026 00:10:04 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:40:30:70:06:41:ec:2e:ed:9a:ac:39:cd:ee:95:df:45:ca:34:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:10:04 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=0b5ba3f25c054a205ec937977d68d8c2f6ca3a18f41ec9b1f050803955662651, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f4:0f:29:53:77:af:50:09:33:2a:3f:ae:11:
                    03:e2:dd:d2:00:39:fd:7a:e6:44:13:13:ee:81:d2:
                    b2:1a:08:6f:3b:d5:2a:ea:9e:6c:2f:a8:53:d0:d4:
                    c1:b2:a1:9d:53:8b:a9:0b:84:7c:d2:67:e6:21:ad:
                    53:12:6b:a0:96:10:5d:cc:d0:55:f3:0d:2a:dc:15:
                    a1:ed:64:43:36:d7:28:fe:db:51:29:9c:41:fd:3d:
                    49:8d:78:96:96:92:c4:f7:93:aa:8b:fc:44:48:5c:
                    0e:57:57:18:20:79:fa:11:f9:ec:9d:d2:a3:75:64:
                    f1:75:8a:9b:12:fa:50:68:4a:18:28:a7:52:ce:02:
                    72:98:cd:6d:b7:27:2e:c2:81:22:72:cf:c5:f4:ab:
                    af:d7:ee:16:64:f3:9c:04:95:e6:52:64:18:c2:a8:
                    bf:4e:f4:f5:62:9f:55:b3:a8:97:8c:20:e5:c4:7e:
                    d4:62:a8:a0:b1:c6:d4:53:57:bc:2d:10:4c:db:26:
                    3b:e4:12:5d:cd:51:36:95:08:ca:c1:cd:9c:c4:ba:
                    af:dc:31:cb:55:84:16:9d:08:e7:0c:41:61:0e:38:
                    f8:50:ac:aa:68:f5:c0:fb:ba:17:30:ae:f8:70:41:
                    3a:57:02:70:b2:ee:d6:09:59:69:59:9c:7f:59:b6:
                    a7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B1:0B:02:14:85:61:D1:99:B1:45:83:CE:03:35:53:01:10:E1:DB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3080108a-6812-4377-814d-205d77172c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:bd:46:59:e7:84:8d:99:4a:06:a6:f4:9b:84:fd:fc:4e:7f:
         da:62:01:0c:b2:68:b2:53:e8:4c:0d:87:0f:0a:71:7f:ff:e6:
         8c:54:61:61:fa:58:c5:f6:85:d9:b3:3a:a1:f1:ae:9c:55:42:
         fb:ff:9b:c7:2d:84:55:a6:ec:cd:c8:a8:91:50:e0:b5:f8:e1:
         64:69:23:43:09:41:8b:9f:27:d2:e6:77:d0:43:3d:12:25:60:
         72:14:20:1d:00:d9:36:2a:b9:63:6d:30:61:99:04:c5:10:cb:
         f5:5b:86:9e:6f:aa:31:2b:1e:8c:77:d3:9f:3b:42:99:c5:46:
         76:91:c2:5f:a2:bc:76:d4:11:c1:a1:7a:c4:b1:ac:ce:b1:44:
         05:af:1c:37:ba:c8:9a:9d:ab:49:87:0d:83:75:dd:7b:3f:f9:
         f6:dc:5f:a4:6d:bb:12:84:e8:85:a6:68:e6:f1:46:fc:e6:41:
         a2:25:c7:2f:61:06:16:09:88:6e:27:d6:be:d5:71:b9:70:a0:
         45:94:19:1c:55:75:30:e5:dc:9c:05:11:2d:fa:00:1c:7d:d1:
         36:de:ca:53:43:c1:3a:f1:5e:11:35:3a:2d:9e:7c:81:ff:29:
         58:5b:70:45:79:b4:f4:3e:b7:2d:b6:00:0f:4a:6b:91:d4:90:
         2a:e7:21:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 14:58:36 2026 by rpki-client