Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750c6639-e3eb-480d-90fc-80f03249cf86.roa
File:                     750c6639-e3eb-480d-90fc-80f03249cf86.roa (raw, json)
Hash identifier:          nTG3ZEf+Z0DqbU/nZjga3OyWcdXB8yhLOaemrmZuI5A=
Subject key identifier:   38:2C:8C:DF:2A:1C:35:CB:F7:CC:25:9C:66:9B:7C:9C:D0:AF:48:56
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       587C7A7286CF34C170FC7174D8D20BFC5B771FCC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750c6639-e3eb-480d-90fc-80f03249cf86.roa
Signing time:             Thu 08 Oct 2026 00:05:56 +0000
ROA not before:           Thu 08 Oct 2026 00:05:56 +0000
ROA not after:            Wed 06 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        99.83.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7c:7a:72:86:cf:34:c1:70:fc:71:74:d8:d2:0b:fc:5b:77:1f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  8 00:05:56 2026 GMT
            Not After : Jan  6 23:59:59 2027 GMT
        Subject: serialNumber=1ef50e7a72a830037910a55fa280d6b45eab03f36358ce55e0a2b215d027ce79, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:6f:ee:f2:20:fe:7d:09:fd:00:9f:bf:25:
                    03:31:22:fd:72:84:28:35:87:aa:cf:4c:d3:82:be:
                    3c:f8:2b:26:65:95:18:90:e1:48:a1:71:d6:58:5e:
                    8c:5d:fd:08:72:75:ee:d7:ab:97:3b:35:ea:4a:63:
                    c0:98:11:b2:7c:39:40:6c:d2:8b:8e:82:e9:f2:80:
                    92:bb:84:b1:f8:2a:e2:07:71:20:8c:f2:ea:d4:8b:
                    56:82:ec:0c:94:de:c9:2e:b5:5a:24:02:37:59:f2:
                    02:9b:56:de:eb:9f:24:57:75:73:e8:a1:7d:5d:64:
                    f3:ce:03:3a:bf:b3:7e:8b:2a:cf:23:d3:53:f3:f5:
                    2f:e2:9d:7d:97:45:07:2f:48:12:7b:8a:2a:eb:5b:
                    c4:5e:cd:59:ad:25:39:41:b6:86:36:e3:2f:8d:d7:
                    d2:9f:f8:39:e0:8f:85:7d:63:62:8c:8e:dc:2f:6c:
                    22:b8:bb:2f:9a:55:3e:fd:a3:bf:a0:e3:01:ff:e8:
                    22:26:61:62:99:2f:e7:ca:db:4f:14:c4:28:52:bd:
                    83:53:99:f6:4b:b4:38:4e:fd:f5:00:26:33:b3:c4:
                    0c:8d:57:d9:1d:67:05:6d:cd:02:20:4c:fe:91:71:
                    f2:6a:6b:66:14:c7:88:ed:74:92:dd:f2:e2:f9:3c:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2C:8C:DF:2A:1C:35:CB:F7:CC:25:9C:66:9B:7C:9C:D0:AF:48:56
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/750c6639-e3eb-480d-90fc-80f03249cf86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.83.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:89:cf:4f:8b:bc:a5:70:81:c1:cc:68:7b:c7:53:05:76:35:
         0d:9a:a6:c1:d6:73:d8:3f:09:23:f9:0a:97:a5:b1:39:63:27:
         84:88:47:64:e6:21:33:15:cb:f3:55:8f:f8:3c:e3:71:20:7a:
         27:0f:ea:06:67:66:bd:74:0d:9b:f2:84:10:87:7b:85:b2:e0:
         d7:fb:0a:fb:7b:a3:e9:11:97:2e:96:af:c5:24:84:37:53:c4:
         da:45:16:b0:1e:b7:fd:5c:38:b9:3e:1b:25:62:12:df:6d:d3:
         9a:74:b0:61:96:a9:8f:8a:c3:4b:6a:bf:27:fa:8b:e3:1d:f5:
         ef:28:6f:2c:de:cf:46:9c:31:7c:ad:13:25:a6:f3:8d:33:3c:
         f7:88:4f:d4:ac:1b:15:46:5d:ae:82:33:4d:72:6c:02:59:35:
         ee:0d:bf:e6:32:f1:d0:13:5e:47:dd:2d:60:ad:c3:87:a4:f1:
         2d:00:57:dc:0c:62:be:27:47:cb:c6:e7:d5:67:c8:6c:b0:12:
         73:fd:94:05:62:e2:25:c8:8a:53:35:16:45:fc:64:53:15:1c:
         b3:ba:c4:76:5e:3e:9f:ab:16:da:56:35:6e:f6:37:f5:c1:a9:
         49:ed:26:fa:c4:9c:6c:35:48:2f:e0:a9:af:ad:7b:50:09:ee:
         5f:48:ee:d9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWHx6cobPNMFw/HF02NIL/Ft3H8wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA4MDAwNTU2WhcNMjcwMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AxZWY1MGU3YTcyYTgzMDAzNzkxMGE1NWZhMjgwZDZiNDVl
YWIwM2YzNjM1OGNlNTVlMGEyYjIxNWQwMjdjZTc5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCorG/u8iD+fQn9AJ+/JQMxIv1yhCg1h6rPTNOCvjz4KyZl
lRiQ4UihcdZYXoxd/Qhyde7Xq5c7NepKY8CYEbJ8OUBs0ouOgunygJK7hLH4KuIH
cSCM8urUi1aC7AyU3skutVokAjdZ8gKbVt7rnyRXdXPooX1dZPPOAzq/s36LKs8j
01Pz9S/inX2XRQcvSBJ7iirrW8RezVmtJTlBtoY24y+N19Kf+Dngj4V9Y2KMjtwv
bCK4uy+aVT79o7+g4wH/6CImYWKZL+fK208UxChSvYNTmfZLtDhO/fUAJjOzxAyN
V9kdZwVtzQIgTP6RcfJqa2YUx4jtdJLd8uL5PO93AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOCyM3yocNcv3zCWcZpt8nNCvSFYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc1MGM2NjM5LWUzZWItNDgwZC05MGZjLTgwZjAzMjQ5Y2Y4Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjU2UwDQYJKoZIhvcNAQELBQADggEBABiJz0+LvKVwgcHMaHvHUwV2NQ2a
psHWc9g/CSP5CpelsTljJ4SIR2TmITMVy/NVj/g843EgeicP6gZnZr10DZvyhBCH
e4Wy4Nf7Cvt7o+kRly6Wr8UkhDdTxNpFFrAet/1cOLk+GyViEt9t05p0sGGWqY+K
w0tqvyf6i+Md9e8obyzez0acMXytEyWm840zPPeIT9SsGxVGXa6CM01ybAJZNe4N
v+Yy8dATXkfdLWCtw4ek8S0AV9wMYr4nR8vG59VnyGywEnP9lAVi4iXIilM1FkX8
ZFMVHLO6xHZePp+rFtpWNW72N/XBqUntJvrEnGw1SC/gqa+te1AJ7l9I7tk=
-----END CERTIFICATE-----
Generated at Wed Nov 4 12:33:58 2026 by rpki-client