Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3327cfae-d76e-433c-9489-6c1d618274a8.roa
File:                     3327cfae-d76e-433c-9489-6c1d618274a8.roa (raw, json)
Hash identifier:          MoZIzyBKyUsEKP9V39KZxST1/SzgXojg/BiXMJlJ5SE=
Subject key identifier:   6B:51:60:0D:1C:92:8C:8D:B2:A4:6D:7A:FD:57:8D:16:91:D1:5C:54
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6E8192F08A906DAFF28A581C43149641850F7C07
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3327cfae-d76e-433c-9489-6c1d618274a8.roa
Signing time:             Tue 13 Oct 2026 00:31:17 +0000
ROA not before:           Tue 13 Oct 2026 00:31:17 +0000
ROA not after:            Mon 11 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:81:92:f0:8a:90:6d:af:f2:8a:58:1c:43:14:96:41:85:0f:7c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 13 00:31:17 2026 GMT
            Not After : Jan 11 23:59:59 2027 GMT
        Subject: serialNumber=b65bf6e9f3e71a31d169ea1b305b52f64cadcef841b8ec94865d272fe65a2cf9, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:ee:5c:2f:b7:39:74:72:69:ff:60:34:12:
                    3b:d0:a3:6b:83:c2:45:80:1e:68:9a:b4:b4:2e:ef:
                    d4:92:5f:62:07:23:26:e7:2c:11:e3:92:1d:01:75:
                    62:ed:41:ff:2d:69:6b:c4:e6:63:75:c0:87:83:5e:
                    6e:8b:3e:5d:d2:23:7c:93:ae:89:73:a2:b4:9a:e3:
                    2e:c7:3e:79:39:d1:10:24:53:fd:d4:b3:5f:4c:c2:
                    c5:37:7a:5f:f3:bd:e3:63:da:96:3f:b7:ce:2f:88:
                    26:db:98:7e:0a:03:4c:6a:8d:bc:d6:bc:e9:52:fa:
                    e5:c6:a4:a4:8e:85:34:00:3e:70:cc:58:d8:7f:ae:
                    1d:d0:40:1b:c1:37:d0:89:97:59:72:61:19:a4:1e:
                    2e:96:64:c3:b2:6f:54:e8:54:86:ef:b8:4c:1e:5e:
                    5a:99:44:79:d4:f9:10:dc:3c:98:58:ae:e6:26:a5:
                    74:96:83:fd:43:bf:bd:ef:28:8e:4a:26:7e:0e:44:
                    b0:31:02:2b:a7:ec:ee:61:9d:1d:b4:1a:eb:7b:d0:
                    a9:b5:80:f9:89:40:35:7b:b5:26:d3:c5:26:36:71:
                    53:f5:06:f6:24:ec:86:5d:35:d4:55:7b:da:18:12:
                    6e:d2:ae:83:26:1c:74:ba:1d:2f:7e:6a:c4:b0:6e:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:51:60:0D:1C:92:8C:8D:B2:A4:6D:7A:FD:57:8D:16:91:D1:5C:54
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3327cfae-d76e-433c-9489-6c1d618274a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:4e:ab:e1:39:62:7c:bb:83:f3:b6:23:5d:45:9c:66:7f:a5:
         9c:0a:63:de:da:65:02:65:5b:a1:4d:22:c5:7a:54:40:76:8e:
         06:c4:8e:b8:5d:30:dd:58:e1:b8:b2:9e:92:94:76:f1:42:3b:
         11:a6:1d:33:11:9d:9e:c9:bd:ce:4b:5e:05:96:64:43:1a:a3:
         3b:e1:05:82:7e:e7:7d:ab:52:ef:a9:7b:e4:40:82:fe:90:21:
         b6:b1:19:6a:51:93:1a:93:3b:92:cc:61:10:96:2b:2c:30:e4:
         b6:3f:f4:07:18:04:34:76:ba:0b:98:ee:b5:88:59:f6:75:21:
         5a:cf:a5:1c:ec:ff:23:06:7c:aa:d1:31:9f:68:a2:c9:f5:c7:
         e6:0e:20:7c:60:58:db:91:cf:38:ad:1b:47:d1:e7:10:55:ee:
         7c:da:4d:41:e3:c8:f2:4e:34:8a:ab:46:04:21:34:b5:3b:53:
         99:dd:72:2c:52:03:50:92:cd:f9:c6:d6:56:e5:b3:e0:ff:54:
         36:19:40:89:71:1c:9a:df:c7:2c:8d:90:14:32:ad:b5:b1:6d:
         aa:84:fc:ca:57:95:27:bf:3b:ab:9e:f7:0d:5a:c3:0b:fb:8c:
         8f:cc:c4:01:76:f5:f4:6c:cb:60:4a:2c:14:bd:09:2e:7e:c7:
         3f:b7:ac:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:18:53 2026 by rpki-client