Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c26a8b2-a90f-480e-a02b-fcac6ceb7973.roa
File:                     4c26a8b2-a90f-480e-a02b-fcac6ceb7973.roa (raw, json)
Hash identifier:          2IM3r79EGLly6M68qGAORNAKUXjJf8JzxK676Pg9Mc0=
Subject key identifier:   1A:C9:AF:E4:2F:B8:6A:EB:BA:AC:07:DA:DF:36:8A:55:A4:FB:88:BB
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       687E50BC66522D0132B0E7A29CA4C596AC790488
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c26a8b2-a90f-480e-a02b-fcac6ceb7973.roa
Signing time:             Sun 11 Oct 2026 01:07:51 +0000
ROA not before:           Sun 11 Oct 2026 01:07:51 +0000
ROA not after:            Sat 09 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        99.82.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:7e:50:bc:66:52:2d:01:32:b0:e7:a2:9c:a4:c5:96:ac:79:04:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 11 01:07:51 2026 GMT
            Not After : Jan  9 23:59:59 2027 GMT
        Subject: serialNumber=b1b930f7a7935e691b998642ab015b86d97a377f0739c494bb7ee22432a60690, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:09:aa:a3:65:c9:3a:29:27:4e:b9:3c:7a:
                    dc:48:65:f6:30:b6:8f:4b:ea:9c:a4:28:62:70:77:
                    e9:a7:06:49:e9:13:62:be:2f:cb:78:e9:f4:05:68:
                    d9:29:71:3b:6f:2a:33:bf:cc:a3:d7:f6:b6:0b:08:
                    c8:65:88:7b:7e:ec:1b:26:d1:e0:84:7c:9d:05:bd:
                    51:92:04:e4:21:02:a3:fb:66:26:f5:46:5f:71:35:
                    4a:51:7b:bc:64:b1:f8:e8:92:2c:e0:3d:fb:ec:2c:
                    d8:a7:5b:28:62:9d:9f:8e:c7:a2:04:60:46:57:77:
                    ad:81:3c:fc:3a:bb:a6:9b:90:6e:83:1e:70:c3:2a:
                    89:09:1b:cc:11:9a:6f:bb:c2:4e:a9:48:7a:14:cc:
                    9d:78:79:62:9c:4d:32:b5:4a:b1:93:2c:08:9f:f0:
                    99:21:67:0d:ca:a7:3b:4b:7c:0d:2c:ed:c3:b8:ae:
                    55:38:c4:29:2c:e3:87:98:14:55:b8:5f:0b:f2:44:
                    12:9e:e8:eb:94:f9:49:24:5c:bd:c7:f1:c2:b4:be:
                    b5:a9:86:13:87:a0:f0:be:9b:b3:b8:1f:5c:09:62:
                    89:88:09:2b:1a:c7:ae:cb:f6:12:b5:86:9a:2d:8a:
                    77:85:4e:81:33:af:eb:f1:f6:fe:e3:b8:2b:45:39:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C9:AF:E4:2F:B8:6A:EB:BA:AC:07:DA:DF:36:8A:55:A4:FB:88:BB
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c26a8b2-a90f-480e-a02b-fcac6ceb7973.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.82.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:86:4b:9a:e5:38:9f:a8:d6:63:cc:f4:fd:8c:14:00:60:d2:
         f9:55:c2:f8:90:70:89:f1:1a:b0:0e:fb:1f:3c:24:8b:21:7e:
         3c:12:ad:81:67:d1:77:da:5a:0d:a5:23:b7:54:67:74:1f:f7:
         4b:f5:33:8f:0c:8e:5d:27:df:70:a4:28:d6:81:b5:2f:e6:e9:
         db:e1:51:6a:1e:4f:c1:f5:a5:a9:2d:02:40:53:a6:77:cf:c4:
         fb:1d:c9:50:b9:35:5e:ea:f0:33:d4:19:60:b7:51:8b:a7:7e:
         bd:4a:ca:46:ac:e4:74:e3:de:c5:84:04:ad:a0:04:1c:bc:e2:
         ec:e2:fa:bd:ec:eb:bd:90:31:be:23:c9:da:7d:0d:48:52:fd:
         b7:70:9d:db:70:a0:83:99:a6:02:98:ba:11:f4:45:17:e9:e0:
         a2:96:82:08:80:9e:d0:e0:bd:69:69:ce:56:d0:df:ef:63:da:
         58:f3:6a:18:f5:fd:3b:93:ab:0a:d8:72:b0:3f:43:1c:a1:9d:
         87:a4:6e:fb:43:a6:e0:87:68:8c:a1:f4:13:2c:9b:15:62:ec:
         b0:13:c9:1a:cb:33:07:ce:3d:63:98:1f:df:e1:5f:94:f1:a6:
         95:15:cd:47:2f:12:ef:40:ea:fe:f8:07:75:92:ea:6a:00:b6:
         e4:85:8c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:31:03 2026 by rpki-client