Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a012c8-f13b-4d84-8fb0-ec582723cddf.roa
File:                     41a012c8-f13b-4d84-8fb0-ec582723cddf.roa (raw, json)
Hash identifier:          wbYTYoB1hs0RPwzRDYvjI0zArxJgjgCMoKks8PYzJhc=
Subject key identifier:   1D:7B:15:48:06:11:CA:E0:2F:EC:92:CF:61:FE:93:7F:A7:DB:43:D8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2755BBA1D703E9ABE5EA3D0D1523CE1E15FD3B8D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a012c8-f13b-4d84-8fb0-ec582723cddf.roa
Signing time:             Fri 01 May 2026 00:00:11 +0000
ROA not before:           Fri 01 May 2026 00:00:11 +0000
ROA not after:            Thu 30 Jul 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        99.77.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:55:bb:a1:d7:03:e9:ab:e5:ea:3d:0d:15:23:ce:1e:15:fd:3b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  1 00:00:11 2026 GMT
            Not After : Jul 30 23:59:59 2026 GMT
        Subject: serialNumber=49de3e88019c56fd6aadff86fd6b309daca107e4cd60423c424b58d4d475d8ae, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:5b:41:5c:a5:fb:f0:5f:3e:0a:37:8a:de:
                    e4:54:71:9b:d2:2e:7e:7f:cf:a1:fd:7f:aa:67:e7:
                    c0:63:4b:9e:6d:43:8f:d0:82:ca:19:73:ec:cf:71:
                    6a:ad:06:94:ea:39:8e:74:2b:36:91:e2:83:ea:94:
                    80:ab:89:1a:fd:23:84:43:28:2d:45:29:c8:78:43:
                    2a:68:96:90:35:8b:88:af:44:86:e0:74:6e:c3:93:
                    9d:a5:68:d9:ec:fe:3a:e3:d6:54:86:82:3a:30:99:
                    82:34:66:4b:a2:49:43:cc:40:ec:2d:a6:41:54:82:
                    09:b3:5e:9c:53:ea:2a:8c:d5:9a:6c:6c:79:9d:1e:
                    f3:81:f1:7f:b3:b9:fc:76:f9:6a:4a:0d:56:8a:0b:
                    6d:6e:6f:70:9d:b8:c1:c9:90:39:3c:70:67:4e:f3:
                    f8:c0:77:fd:00:e8:49:10:b3:50:32:ea:21:07:b9:
                    b6:7e:d7:56:7f:70:bf:2d:b8:90:b6:37:2c:95:5d:
                    31:a8:24:fb:04:c7:12:8d:d9:7d:37:ae:2d:ee:1e:
                    f8:19:bc:97:bf:c5:7b:40:e3:92:3b:ed:1b:b7:72:
                    f4:5c:6e:a5:32:a1:78:ba:e3:43:3a:d3:8d:4f:27:
                    13:5e:15:e1:22:11:92:c0:88:be:b1:f9:02:65:3c:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7B:15:48:06:11:CA:E0:2F:EC:92:CF:61:FE:93:7F:A7:DB:43:D8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41a012c8-f13b-4d84-8fb0-ec582723cddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:e4:46:64:2a:39:d3:a0:56:a8:64:3d:c0:b2:50:92:a3:49:
         6f:8d:8c:21:f7:d8:9e:14:4f:5b:9c:51:da:d1:c2:53:92:94:
         b1:eb:ce:98:2e:ae:6a:36:f5:bd:9e:b7:f7:47:f5:ec:db:c0:
         26:6b:67:49:59:91:13:a0:43:d7:08:3b:18:41:99:b3:7c:9a:
         cc:8b:e8:5a:27:60:53:74:e6:96:ec:eb:8e:5d:9a:28:8a:a6:
         2f:3e:7e:a8:2f:d9:fa:88:82:4a:42:c3:af:a4:5e:02:86:02:
         26:8c:0b:1a:be:99:a9:7c:f0:6c:d9:7c:b3:f2:09:ee:ed:02:
         8f:af:c1:3b:5e:ee:9c:7d:5b:5d:b7:c4:71:dc:2d:40:a7:b7:
         b2:f4:99:34:42:9b:e0:83:58:6a:b1:67:42:e5:64:5c:c8:9d:
         49:a0:bc:c3:71:5d:0a:c9:8b:08:c0:d9:df:9f:27:10:a2:e5:
         98:87:13:67:91:68:bf:f8:3d:7a:77:94:b5:26:86:e5:b7:c2:
         69:7a:e6:82:76:db:eb:0d:78:54:d6:b2:69:a8:9d:dc:13:e5:
         8f:60:2e:e8:8c:d1:18:3f:a7:ef:d5:98:82:4b:05:be:00:47:
         5b:65:2a:b7:f2:51:f8:e4:77:dc:ce:3f:e9:2e:14:95:aa:d4:
         5a:48:cc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:39:32 2026 by rpki-client