Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa
File:                     51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa (raw, json)
Hash identifier:          wIVkmscrAdX989h1pvrVSSYsnBek1gX98DQKNOPbNYc=
Subject key identifier:   F9:FB:45:A5:67:E9:B2:B1:58:C7:52:AE:99:91:4D:4B:32:5E:C8:19
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       050409D3D1B8C1F1092176E2EC0DF30E2E2084F3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa
Signing time:             Tue 06 Oct 2026 00:21:03 +0000
ROA not before:           Tue 06 Oct 2026 00:21:03 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:04:09:d3:d1:b8:c1:f1:09:21:76:e2:ec:0d:f3:0e:2e:20:84:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 00:21:03 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=db9dddbfcc3d5721d922e5cefc7d385780c04f86a49ee60686ed95c870dd630a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c1:78:c8:ea:f9:98:e7:cf:90:69:69:93:07:
                    1d:89:ca:ff:7e:9e:82:8a:b1:49:29:aa:87:52:7c:
                    75:17:17:88:39:29:64:e9:84:8c:6a:fb:55:da:d1:
                    f8:89:89:91:1f:91:82:86:72:f4:cf:03:7d:6f:93:
                    20:02:4c:52:bc:35:b2:f0:8f:cf:d8:f1:0e:37:97:
                    44:ad:51:dd:27:2f:a0:19:fd:48:d5:64:48:13:2d:
                    54:6b:68:4e:68:45:d7:77:f2:ec:a9:2d:ff:2f:1b:
                    05:7e:2a:95:9a:62:a8:a4:62:b6:e9:20:2c:3c:90:
                    f7:cc:1e:76:e8:d0:cc:bc:a8:d7:5f:b6:89:24:6e:
                    3d:40:91:62:41:2d:dc:7f:83:3c:fc:c1:d2:ca:42:
                    b7:2c:a3:5a:f8:11:ad:7a:08:d1:08:32:9e:60:27:
                    44:11:ee:47:ca:75:1c:80:f6:42:85:69:64:42:6f:
                    eb:14:9d:7a:81:ce:52:11:eb:18:d7:b5:30:1b:a8:
                    76:4c:9c:2c:d9:c2:3c:d4:b1:1d:51:9f:be:67:9e:
                    aa:ab:6d:28:fa:43:26:c9:54:21:f9:3a:d6:be:75:
                    9e:2a:51:25:8a:15:76:99:d8:79:3a:5d:43:e8:42:
                    21:43:f9:f5:8f:d9:4c:61:b5:f0:66:ac:c4:4a:c3:
                    50:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FB:45:A5:67:E9:B2:B1:58:C7:52:AE:99:91:4D:4B:32:5E:C8:19
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a9:54:0e:7f:88:5c:34:4a:b8:c2:87:10:cb:3e:11:61:10:
         eb:4a:82:00:6c:42:4e:dd:fd:1d:cf:1d:a7:6e:ba:52:5f:74:
         09:e7:6d:57:22:4e:e7:e3:02:db:cb:b3:bb:e3:cf:d0:f1:a0:
         e9:3d:51:08:8f:30:70:7a:10:b4:af:c1:72:78:9c:fa:d9:93:
         b6:cc:62:78:f6:1a:a8:b1:e7:23:b2:6e:30:19:6f:0f:e8:fe:
         5a:84:dc:fc:78:84:fc:72:fe:d6:37:73:84:b6:a8:8a:f0:3c:
         33:c3:04:e9:8d:5d:90:8e:bc:ed:aa:90:18:0b:6f:f5:c0:cd:
         5f:d6:e5:d3:81:b1:85:91:f1:1a:0a:cd:c8:11:99:fa:f9:05:
         1d:e8:90:c6:e7:01:91:d7:b2:96:a8:02:12:80:cd:09:33:23:
         4c:cc:e0:bb:90:d2:55:c3:b8:ec:e8:17:2a:90:f4:5c:a2:41:
         8c:ba:45:f5:a1:ea:b0:0c:36:cc:bc:62:b1:9d:a0:92:2c:1a:
         5f:a0:69:28:4e:70:4c:b1:09:c1:1b:51:aa:b8:bd:d4:29:5b:
         9d:8f:db:f8:a3:76:1d:5d:0b:7c:65:fc:1f:33:05:16:75:fc:
         f6:8e:0a:56:25:84:e4:0b:89:9e:4f:20:a4:58:d9:2b:59:67:
         9d:17:94:fa
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBQQJ09G4wfEJIXbi7A3zDi4ghPMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAyMTAzWhcNMjcwMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYjlkZGRiZmNjM2Q1NzIxZDkyMmU1Y2VmYzdkMzg1Nzgw
YzA0Zjg2YTQ5ZWU2MDY4NmVkOTVjODcwZGQ2MzBhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCTwXjI6vmY58+QaWmTBx2Jyv9+noKKsUkpqodSfHUXF4g5
KWTphIxq+1Xa0fiJiZEfkYKGcvTPA31vkyACTFK8NbLwj8/Y8Q43l0StUd0nL6AZ
/UjVZEgTLVRraE5oRdd38uypLf8vGwV+KpWaYqikYrbpICw8kPfMHnbo0My8qNdf
tokkbj1AkWJBLdx/gzz8wdLKQrcso1r4Ea16CNEIMp5gJ0QR7kfKdRyA9kKFaWRC
b+sUnXqBzlIR6xjXtTAbqHZMnCzZwjzUsR1Rn75nnqqrbSj6QybJVCH5Ota+dZ4q
USWKFXaZ2Hk6XUPoQiFD+fWP2UxhtfBmrMRKw1CZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+ftFpWfpsrFYx1KumZFNSzJeyBkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUxZGE0ZGJjLTc4ZDgtNDZhZC04YmQzLTY5ZWRkYjNhOTZlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTfgwDQYJKoZIhvcNAQELBQADggEBAJapVA5/iFw0SrjChxDLPhFhEOtK
ggBsQk7d/R3PHaduulJfdAnnbVciTufjAtvLs7vjz9DxoOk9UQiPMHB6ELSvwXJ4
nPrZk7bMYnj2Gqix5yOybjAZbw/o/lqE3Px4hPxy/tY3c4S2qIrwPDPDBOmNXZCO
vO2qkBgLb/XAzV/W5dOBsYWR8RoKzcgRmfr5BR3okMbnAZHXspaoAhKAzQkzI0zM
4LuQ0lXDuOzoFyqQ9FyiQYy6RfWh6rAMNsy8YrGdoJIsGl+gaShOcEyxCcEbUaq4
vdQpW52P2/ijdh1dC3xl/B8zBRZ1/PaOClYlhOQLiZ5PIKRY2StZZ50XlPo=
-----END CERTIFICATE-----
Generated at Wed Nov 4 18:52:18 2026 by rpki-client