Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82472b31-7e77-4ac9-b2af-3bfa80b720a7.roa
File:                     82472b31-7e77-4ac9-b2af-3bfa80b720a7.roa (raw, json)
Hash identifier:          SinmDe3ORt0PZOAQF1Niq9I+lcT3LSJIoELApdbHJ3E=
Subject key identifier:   3B:06:57:F0:1B:2D:52:00:C5:C6:91:4F:51:E5:2D:AC:05:6F:8C:53
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       66F232092F2FE11A8DA6994061FAE6EF6DF0E001
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82472b31-7e77-4ac9-b2af-3bfa80b720a7.roa
Signing time:             Tue 13 Oct 2026 00:10:08 +0000
ROA not before:           Tue 13 Oct 2026 00:10:08 +0000
ROA not after:            Mon 11 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        99.150.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f2:32:09:2f:2f:e1:1a:8d:a6:99:40:61:fa:e6:ef:6d:f0:e0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 13 00:10:08 2026 GMT
            Not After : Jan 11 23:59:59 2027 GMT
        Subject: serialNumber=4757730939ff52733dfabfbed69bc27c1c18025052f74b1734fa7ab6cc84f141, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:4a:2c:2f:c4:97:20:93:4d:87:d9:3b:98:
                    f5:3a:cd:7e:ae:17:82:7f:fa:8f:6d:36:e7:ac:14:
                    aa:c8:ba:e6:e2:47:ce:ca:33:47:1e:d6:03:08:81:
                    9a:c7:d6:69:f2:4e:f6:92:8d:12:fc:b3:b7:50:c8:
                    61:9c:cb:3c:1f:b2:ed:d4:cf:8b:b7:73:42:98:3c:
                    de:f8:06:5d:36:69:74:88:66:b3:d9:3a:17:d7:0b:
                    87:99:2d:dd:2b:2c:fc:ac:b0:80:dc:59:67:e8:c8:
                    34:49:44:3e:45:d8:b6:35:29:31:8c:41:f9:6f:03:
                    e7:99:de:a4:17:9e:99:3b:2d:f3:24:da:53:24:d0:
                    8b:fb:c5:8d:32:a4:ae:a7:ee:b6:bd:e0:dd:e4:4a:
                    92:9f:c8:13:08:5f:84:ad:cf:f0:1e:44:d3:01:79:
                    88:82:5f:99:81:c5:b4:44:e2:62:3a:91:9f:fd:1e:
                    06:1a:82:bb:55:6f:b6:48:b0:6f:7f:52:b6:91:58:
                    2b:5c:bf:ff:db:09:90:c8:31:a7:0b:55:68:9c:6b:
                    4b:1f:65:eb:eb:d2:13:68:00:1d:7e:5c:8c:03:96:
                    10:64:28:41:1b:80:77:1c:77:28:97:99:33:1b:5f:
                    5e:04:18:e3:74:9b:9b:07:a7:81:d3:56:5d:8a:32:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:06:57:F0:1B:2D:52:00:C5:C6:91:4F:51:E5:2D:AC:05:6F:8C:53
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82472b31-7e77-4ac9-b2af-3bfa80b720a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:96:79:06:ac:77:4a:23:d8:37:53:3f:2f:5d:c4:ab:d3:72:
         5c:a1:c0:cb:ec:d2:dc:1a:08:06:a1:b6:fb:03:49:1c:0e:4c:
         d2:1d:d5:34:1c:f8:d0:16:d4:04:69:dc:b6:66:80:f1:7e:19:
         26:d9:aa:81:55:05:02:43:43:e8:3f:54:07:76:24:0a:f3:38:
         9f:c5:66:81:10:2e:0b:71:57:d5:21:76:41:12:9f:69:76:1a:
         96:b0:75:69:29:c9:1c:42:93:d6:d0:e6:f4:48:01:cd:65:73:
         07:47:1c:a1:40:b3:1e:68:3d:08:79:6d:23:9d:b0:f8:62:02:
         5f:2c:54:54:a4:0a:c8:b7:37:9a:ee:41:f9:fd:9a:2d:2c:69:
         63:a4:90:42:15:88:b2:3f:62:54:1a:ae:33:a3:35:5d:bf:44:
         6a:8b:62:3c:50:96:6c:7b:3a:5f:cf:aa:d0:fc:38:32:e7:3a:
         6d:7a:65:1f:c5:94:8c:1d:35:1f:8f:c4:10:85:b7:74:f5:dc:
         1e:54:82:af:b1:cb:f9:7c:53:9a:93:91:c5:27:a1:11:cc:e4:
         32:5e:2e:90:6c:48:2b:32:f6:23:d0:00:68:fc:9d:97:52:40:
         64:36:70:48:30:28:1d:0b:b1:b0:38:2a:3e:b3:3f:06:9b:d2:
         ce:f7:a2:a5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZvIyCS8v4RqNpplAYfrm723w4AEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEzMDAxMDA4WhcNMjcwMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NzU3NzMwOTM5ZmY1MjczM2RmYWJmYmVkNjliYzI3YzFj
MTgwMjUwNTJmNzRiMTczNGZhN2FiNmNjODRmMTQxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnhUosL8SXIJNNh9k7mPU6zX6uF4J/+o9tNuesFKrIuubi
R87KM0ce1gMIgZrH1mnyTvaSjRL8s7dQyGGcyzwfsu3Uz4u3c0KYPN74Bl02aXSI
ZrPZOhfXC4eZLd0rLPyssIDcWWfoyDRJRD5F2LY1KTGMQflvA+eZ3qQXnpk7LfMk
2lMk0Iv7xY0ypK6n7ra94N3kSpKfyBMIX4Stz/AeRNMBeYiCX5mBxbRE4mI6kZ/9
HgYagrtVb7ZIsG9/UraRWCtcv//bCZDIMacLVWica0sfZevr0hNoAB1+XIwDlhBk
KEEbgHccdyiXmTMbX14EGON0m5sHp4HTVl2KMmPrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOwZX8BstUgDFxpFPUeUtrAVvjFMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgyNDcyYjMxLTdlNzctNGFjOS1iMmFmLTNiZmE4MGI3MjBhNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJjlggwDQYJKoZIhvcNAQELBQADggEBAGWWeQasd0oj2DdTPy9dxKvTclyh
wMvs0twaCAahtvsDSRwOTNId1TQc+NAW1ARp3LZmgPF+GSbZqoFVBQJDQ+g/VAd2
JArzOJ/FZoEQLgtxV9UhdkESn2l2GpawdWkpyRxCk9bQ5vRIAc1lcwdHHKFAsx5o
PQh5bSOdsPhiAl8sVFSkCsi3N5ruQfn9mi0saWOkkEIViLI/YlQarjOjNV2/RGqL
YjxQlmx7Ol/PqtD8ODLnOm16ZR/FlIwdNR+PxBCFt3T13B5Ugq+xy/l8U5qTkcUn
oRHM5DJeLpBsSCsy9iPQAGj8nZdSQGQ2cEgwKB0LsbA4Kj6zPwab0s73oqU=
-----END CERTIFICATE-----
Generated at Mon Nov 2 16:44:52 2026 by rpki-client