Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ee3f969-775f-4571-b834-3ffb3e1dd5f9.roa
File:                     5ee3f969-775f-4571-b834-3ffb3e1dd5f9.roa (raw, json)
Hash identifier:          2RgHoegg/IeW331zsqP8KhtGa7lBgH21PRm16Vc/YMo=
Subject key identifier:   5A:85:A3:62:82:45:E8:4C:D7:59:56:9D:0F:54:A9:8E:DE:96:48:F6
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       49C935EA2F0BC7A54773542A77C22D31067B8936
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ee3f969-775f-4571-b834-3ffb3e1dd5f9.roa
Signing time:             Tue 13 Oct 2026 00:10:36 +0000
ROA not before:           Tue 13 Oct 2026 00:10:36 +0000
ROA not after:            Mon 11 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        99.151.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c9:35:ea:2f:0b:c7:a5:47:73:54:2a:77:c2:2d:31:06:7b:89:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 13 00:10:36 2026 GMT
            Not After : Jan 11 23:59:59 2027 GMT
        Subject: serialNumber=2ddccf40e8479fd167176fdc97e78bdc898c5a7c4a357a66e6067b802e4af8b1, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:fe:d7:88:62:3b:26:e9:09:ea:f7:0d:c2:
                    fe:1d:c0:f5:4d:c9:c5:49:22:cf:c9:cc:8d:f5:a5:
                    c4:be:b5:f3:b8:7e:23:1b:d3:33:1b:6a:74:2b:74:
                    8a:d0:15:fc:38:06:09:79:84:f1:0b:71:df:2d:4d:
                    eb:34:63:3a:e8:39:65:6e:51:77:b7:0e:75:55:8b:
                    e8:14:4b:0f:30:ab:e5:8d:6a:5f:af:be:d1:b9:8e:
                    0b:db:e8:d5:b6:4c:f1:55:41:56:3f:88:27:42:87:
                    3a:43:8a:31:60:49:be:61:e5:d4:fc:85:d7:11:35:
                    1f:35:1c:cb:5a:b8:73:76:ac:37:75:94:c3:0d:b2:
                    85:ad:0d:a1:45:fd:7f:8d:06:1d:89:07:6d:04:c9:
                    98:e5:9c:36:2e:4c:b5:4c:d8:56:4d:d8:dc:8c:7c:
                    aa:f9:39:67:41:40:17:7b:24:2c:c2:9b:0b:ba:e6:
                    c0:ef:91:63:68:e3:46:14:2e:da:de:86:d8:e3:e9:
                    da:e3:7f:93:fa:31:14:f9:77:4c:14:ce:e8:ef:62:
                    c4:2f:6f:fb:f6:75:30:b5:e2:26:a3:3e:20:5e:4e:
                    55:ba:b1:07:1e:b1:2e:40:10:2a:66:2b:6e:8b:0b:
                    54:a2:c8:af:1a:6b:3e:c9:94:1c:8d:54:78:5b:df:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:85:A3:62:82:45:E8:4C:D7:59:56:9D:0F:54:A9:8E:DE:96:48:F6
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ee3f969-775f-4571-b834-3ffb3e1dd5f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.151.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:6b:da:2a:fc:35:e1:7c:3a:9b:09:0b:bb:26:87:ed:af:b1:
         ff:77:cd:2d:a2:e9:f2:a2:3c:4b:d9:ea:15:74:19:7e:0f:8b:
         68:eb:6b:82:fc:7a:4f:15:72:de:49:cb:fa:2f:6a:92:b1:41:
         93:0e:8c:27:ee:6c:19:b7:ed:93:b3:14:73:48:e0:6e:e9:46:
         03:49:4a:9d:0f:df:10:8e:fe:1c:cb:43:ae:6a:0e:2f:d1:23:
         51:60:36:70:37:4f:4b:2a:d8:d6:50:dd:b3:65:d8:be:3e:0f:
         ee:3d:f8:24:76:73:55:e5:9e:0b:2f:8e:61:2a:d4:ae:e7:8d:
         db:a5:eb:d4:08:b5:93:b9:ba:57:1b:fd:e6:aa:d9:b8:6d:19:
         4a:bf:58:5b:ea:11:90:15:21:32:70:b9:d1:dd:3a:b1:cb:50:
         bb:1d:9b:6c:e9:2c:07:3e:67:a1:a8:0c:3c:9a:69:e2:55:7b:
         89:d5:a7:ec:c3:de:5e:04:dc:e2:a7:a6:e5:c3:79:d1:b9:f6:
         bd:70:ff:2a:3f:ea:6e:65:3e:86:4b:ae:c0:f7:ee:ac:1d:a8:
         d5:92:de:12:76:ed:97:b0:45:30:49:49:c0:31:af:e8:15:8a:
         fa:fe:1f:75:43:76:9d:51:9e:2b:f6:75:0e:cb:c7:3c:95:c6:
         99:54:2f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:40:04 2026 by rpki-client