Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45c2e527-9738-4594-aadb-f5b7380f4d86.roa
File:                     45c2e527-9738-4594-aadb-f5b7380f4d86.roa (raw, json)
Hash identifier:          rwOUHldNbGn1K3oeecJ1atr/mI+LubnFfvyZLvheswo=
Subject key identifier:   5F:D8:23:62:FD:F2:70:13:A9:59:5D:C3:8F:0B:62:06:30:E9:DE:91
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7DF308E0F08F09CEABBA1CFC3F9F4560E286E10E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45c2e527-9738-4594-aadb-f5b7380f4d86.roa
Signing time:             Sat 08 Aug 2026 00:10:11 +0000
ROA not before:           Sat 08 Aug 2026 00:10:11 +0000
ROA not after:            Fri 06 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:f3:08:e0:f0:8f:09:ce:ab:ba:1c:fc:3f:9f:45:60:e2:86:e1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  8 00:10:11 2026 GMT
            Not After : Nov  6 23:59:59 2026 GMT
        Subject: serialNumber=5e192f23b40c6d4d3e0b470fd84d33475661d1445fff898b112b482c30c81fba, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:cc:84:a7:6a:6a:fb:7a:47:54:15:f3:8e:
                    14:87:1f:2e:e7:2d:fa:bc:02:4f:d1:27:34:72:75:
                    fc:34:2e:c0:ca:81:f8:85:32:3c:2a:8d:08:df:75:
                    fe:b5:bc:30:73:c7:57:40:e1:26:94:ef:1e:73:99:
                    cc:0d:00:a5:ac:15:b6:c6:3e:80:ec:47:9d:9d:5b:
                    ed:f3:33:1d:47:36:b3:be:75:dc:0d:0b:9e:32:ee:
                    80:d6:9e:43:23:bd:6a:6f:15:b2:e1:94:70:d1:6d:
                    a6:02:c7:dc:e6:f9:88:d6:a1:b4:88:7b:12:20:94:
                    9d:d3:e6:e9:67:c3:71:44:4e:63:2b:76:68:d6:78:
                    e2:dc:bd:76:84:ef:82:27:b8:ef:f3:ca:bd:d8:03:
                    00:7d:e5:63:00:34:85:c2:21:5e:0f:40:17:b5:6f:
                    d7:10:0b:3a:19:7f:24:17:85:d9:e0:7a:46:f9:98:
                    71:a1:2a:41:d2:f2:16:af:6d:68:fd:01:e5:a8:06:
                    19:2a:1d:7a:02:4a:4d:88:7f:6a:fe:fb:ec:8c:06:
                    46:b4:7b:ef:52:4d:15:2c:ca:e2:77:be:e7:c1:f7:
                    40:1a:9c:c9:87:da:d5:54:b7:99:36:09:22:1b:e4:
                    6d:d1:fe:f1:8a:e9:fc:60:6f:52:7d:7c:e9:3c:9e:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D8:23:62:FD:F2:70:13:A9:59:5D:C3:8F:0B:62:06:30:E9:DE:91
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45c2e527-9738-4594-aadb-f5b7380f4d86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:fb:70:1b:7f:8e:2c:f8:15:11:25:b7:b6:70:c9:e6:7d:f3:
         81:7d:b2:ef:89:c9:d2:45:ac:d2:ca:cb:2d:c5:a1:f1:39:c7:
         e9:44:9c:e9:e0:3b:bf:0a:3c:c8:e6:aa:07:72:8b:1c:2c:33:
         e2:0e:c4:6e:54:84:c0:9d:be:32:90:a8:8f:62:db:32:a3:1c:
         a4:4a:32:40:89:99:10:ed:b6:f8:b3:c7:3f:70:02:d5:36:82:
         33:a5:d1:97:d9:4c:59:3b:c3:2b:7e:fe:c5:bd:54:d3:de:4d:
         48:6b:52:d5:5d:e9:77:7d:2b:4a:7e:d6:61:22:03:66:12:76:
         eb:14:cb:e6:c6:de:b4:e6:a7:fc:3f:88:81:5a:81:ed:e4:b9:
         70:32:b4:cc:e2:a4:92:36:e6:51:9c:59:e1:46:bf:32:51:83:
         38:0d:c2:a2:e2:df:21:06:07:3e:e2:e1:96:54:ca:4e:af:f7:
         24:1b:d7:9e:cc:03:93:09:67:7a:5a:e7:15:26:76:82:86:36:
         4e:96:d9:0e:4d:b8:54:b1:1c:94:0c:fe:0f:bd:76:53:85:01:
         eb:61:80:63:ca:5b:45:b2:e5:53:bb:68:4d:59:88:42:24:e7:
         70:a2:c8:37:a1:b6:52:21:16:b6:63:05:a1:0e:51:91:28:a7:
         f3:4b:4b:9c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUffMI4PCPCc6ruhz8P59FYOKG4Q4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA4MDAxMDExWhcNMjYxMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZTE5MmYyM2I0MGM2ZDRkM2UwYjQ3MGZkODRkMzM0NzU2
NjFkMTQ0NWZmZjg5OGIxMTJiNDgyYzMwYzgxZmJhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRKsyEp2pq+3pHVBXzjhSHHy7nLfq8Ak/RJzRydfw0LsDK
gfiFMjwqjQjfdf61vDBzx1dA4SaU7x5zmcwNAKWsFbbGPoDsR52dW+3zMx1HNrO+
ddwNC54y7oDWnkMjvWpvFbLhlHDRbaYCx9zm+YjWobSIexIglJ3T5ulnw3FETmMr
dmjWeOLcvXaE74InuO/zyr3YAwB95WMANIXCIV4PQBe1b9cQCzoZfyQXhdngekb5
mHGhKkHS8havbWj9AeWoBhkqHXoCSk2If2r+++yMBka0e+9STRUsyuJ3vufB90Aa
nMmH2tVUt5k2CSIb5G3R/vGK6fxgb1J9fOk8nqylAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUX9gjYv3ycBOpWV3DjwtiBjDp3pEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ1YzJlNTI3LTk3MzgtNDU5NC1hYWRiLWY1YjczODBmNGQ4Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTZgwDQYJKoZIhvcNAQELBQADggEBAJX7cBt/jiz4FRElt7ZwyeZ984F9
su+JydJFrNLKyy3FofE5x+lEnOngO78KPMjmqgdyixwsM+IOxG5UhMCdvjKQqI9i
2zKjHKRKMkCJmRDttvizxz9wAtU2gjOl0ZfZTFk7wyt+/sW9VNPeTUhrUtVd6Xd9
K0p+1mEiA2YSdusUy+bG3rTmp/w/iIFage3kuXAytMzipJI25lGcWeFGvzJRgzgN
wqLi3yEGBz7i4ZZUyk6v9yQb157MA5MJZ3pa5xUmdoKGNk6W2Q5NuFSxHJQM/g+9
dlOFAethgGPKW0Wy5VO7aE1ZiEIk53CiyDehtlIhFrZjBaEOUZEop/NLS5w=
-----END CERTIFICATE-----
Generated at Thu Sep 17 21:52:43 2026 by rpki-client