Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69c5765e-9e8e-44a6-be4d-76b3616ef390.roa
File:                     69c5765e-9e8e-44a6-be4d-76b3616ef390.roa (raw, json)
Hash identifier:          7blY8ySQiCgEijyuBGpotbRcFhFXlgFnna2WrWygKzc=
Subject key identifier:   54:D0:87:B6:D5:17:C4:E5:4C:0F:53:A8:67:95:B4:5C:77:B0:98:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       67118F351500445DB7D8D7D099CC40D6E28AD5D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69c5765e-9e8e-44a6-be4d-76b3616ef390.roa
Signing time:             Mon 26 Oct 2026 00:30:13 +0000
ROA not before:           Mon 26 Oct 2026 00:30:13 +0000
ROA not after:            Sun 24 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        99.79.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:11:8f:35:15:00:44:5d:b7:d8:d7:d0:99:cc:40:d6:e2:8a:d5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 26 00:30:13 2026 GMT
            Not After : Jan 24 23:59:59 2027 GMT
        Subject: serialNumber=5110f906efad5e2ce3021ffb0b494721622723fb39a1dcba33ce62ee0ae3cf30, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:1c:df:b4:76:bd:e8:1d:02:3e:dc:4a:ad:
                    bb:c1:73:85:9d:fe:7f:6e:b3:84:82:93:38:1c:e4:
                    bf:c5:d6:97:ae:4e:a3:dd:c9:38:fc:7d:8b:3e:48:
                    fc:e4:20:60:30:63:09:7c:1a:37:f6:90:3f:e8:b1:
                    7d:92:33:56:90:0b:7b:c2:57:5f:ae:dd:d8:2f:62:
                    86:53:30:42:e0:0e:d8:6a:5e:c4:d6:d7:2b:86:7e:
                    b8:2f:0f:00:83:63:0c:96:13:cd:a9:0b:61:f9:1c:
                    ed:41:90:e8:60:cb:63:83:c6:98:5f:82:66:a0:ae:
                    32:1c:35:33:ea:f4:90:8d:c6:56:d4:ee:40:ab:d0:
                    b5:a8:46:81:45:2a:ae:ea:58:17:8b:46:70:fd:58:
                    66:f3:84:6e:19:3b:32:5d:51:7b:3e:6c:1c:5f:c2:
                    2e:8a:d3:51:15:71:92:e0:77:bd:3e:0f:a5:84:f9:
                    bb:ef:bc:31:4c:c9:99:d5:17:4a:89:43:32:78:ba:
                    30:c2:4f:9c:6c:2b:67:58:6b:0a:53:30:52:06:19:
                    2a:ec:59:6a:51:73:dc:08:c8:87:c1:19:ab:51:78:
                    41:05:ff:e8:db:7e:fb:a9:96:1c:7d:eb:5f:cb:1b:
                    03:7b:9c:a0:83:3b:8f:6d:26:e6:15:b2:1f:5d:cb:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D0:87:B6:D5:17:C4:E5:4C:0F:53:A8:67:95:B4:5C:77:B0:98:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69c5765e-9e8e-44a6-be4d-76b3616ef390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.79.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:36:79:93:24:23:48:0b:56:85:ce:4e:fd:1a:58:3b:49:80:
         32:54:44:9c:63:75:fd:cc:1e:90:83:4d:04:7a:74:62:c2:48:
         5b:ea:bc:09:8c:5d:9c:e4:b1:ef:6b:33:a0:2f:57:37:46:92:
         fd:a1:a2:03:b5:f4:97:1f:ca:9a:ac:03:11:81:98:15:d6:02:
         a9:1c:0f:ca:58:55:79:66:40:72:2b:d7:60:d1:9e:4a:aa:04:
         5d:8f:8e:3a:83:17:08:ae:62:f4:06:bd:8f:e2:e4:ef:1f:8c:
         fc:ff:20:c1:2d:fd:14:d6:f6:01:da:3a:dd:49:43:32:db:56:
         ae:5f:8a:a2:1f:ee:55:7b:ea:3d:91:0c:29:46:75:5a:d8:06:
         cd:14:76:44:30:24:28:f5:82:5b:f0:25:c9:17:05:3d:b8:93:
         c8:85:2c:7b:7b:ae:56:30:8a:fa:a1:69:64:e9:9b:78:19:a2:
         5c:8a:04:ad:d5:c2:91:5e:48:74:26:47:ea:90:96:74:ab:44:
         a6:05:97:0e:8e:c2:6a:70:e8:de:07:e4:df:38:46:6e:9d:fc:
         cd:33:ad:7f:92:16:97:97:0f:64:cd:4c:a7:bd:20:64:68:70:
         70:56:47:0e:3e:16:86:8b:81:20:ec:54:19:46:d0:e0:f5:f5:
         26:9a:ef:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 02:47:32 2026 by rpki-client