Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaad6c7d-4b0b-4907-ac15-be008f56cea0.roa
File:                     eaad6c7d-4b0b-4907-ac15-be008f56cea0.roa (raw, json)
Hash identifier:          fbwGIzbKoQrUdDZEiyVL/AJA/iRQTduzda0jHN3+phU=
Subject key identifier:   FA:7B:DF:63:5E:CD:4E:D9:F2:A8:57:41:E8:24:CF:34:CE:8E:44:3C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       357B5FE5D3756AEE8A671421028AF7956F60C85C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaad6c7d-4b0b-4907-ac15-be008f56cea0.roa
Signing time:             Fri 01 May 2026 00:20:05 +0000
ROA not before:           Fri 01 May 2026 00:20:05 +0000
ROA not after:            Thu 30 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.77.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:7b:5f:e5:d3:75:6a:ee:8a:67:14:21:02:8a:f7:95:6f:60:c8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May  1 00:20:05 2026 GMT
            Not After : Jul 30 23:59:59 2026 GMT
        Subject: serialNumber=eee7fbe54596980a63e3685075c8b272f5a4d7f9409b3ff141ff59cc21bcb944, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:72:de:8e:8a:45:40:1e:8d:b3:6f:a2:4b:54:
                    6b:df:bc:42:f1:ca:fb:3c:ed:52:db:4e:c0:8a:5f:
                    5e:af:20:5c:92:e3:38:f2:20:f2:aa:5b:6f:2a:14:
                    e6:ab:31:fa:85:27:46:03:e9:57:42:a4:f4:05:48:
                    72:ea:40:c4:69:b5:8c:b1:53:84:a2:e3:21:54:da:
                    04:68:de:c3:82:62:3d:ba:aa:e4:3c:69:67:5f:fc:
                    c6:53:d4:8a:c7:ed:ac:34:98:76:97:b5:f5:7a:fc:
                    b2:a1:9c:1f:e6:30:07:8c:bf:bb:bc:64:a4:ee:82:
                    49:6e:8d:71:db:6b:b1:ef:20:9c:c6:11:a5:00:79:
                    bf:96:23:93:96:7c:36:9c:3f:41:7c:17:63:97:9c:
                    fc:b2:58:2e:53:6a:ab:59:99:fa:1b:41:da:43:7d:
                    79:9d:d3:8f:33:d2:2f:3e:74:01:71:e0:c1:39:00:
                    f6:d7:14:03:5d:ee:f9:ec:45:88:e9:c1:24:d9:54:
                    db:7c:e4:6e:b3:b2:f7:ea:c0:53:fc:df:7c:28:93:
                    90:d0:cd:db:2e:a1:5c:0b:91:6e:7c:1f:08:4f:ff:
                    93:42:4e:43:8c:bf:dd:e5:25:11:94:32:da:df:2b:
                    bb:7c:27:fc:42:18:98:d5:14:90:49:e4:72:7a:73:
                    54:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7B:DF:63:5E:CD:4E:D9:F2:A8:57:41:E8:24:CF:34:CE:8E:44:3C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaad6c7d-4b0b-4907-ac15-be008f56cea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.77.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:b3:27:25:de:e6:d1:4d:e0:90:9a:7c:2d:3a:19:fa:d8:f3:
         82:6e:89:91:03:51:c8:4b:41:65:36:a2:66:9e:d8:1f:6e:50:
         ee:09:c1:93:0b:d3:58:23:6c:76:c1:c1:d0:09:a4:20:f7:b8:
         b1:d8:2e:b2:70:2e:89:f2:1e:5a:c9:de:cb:98:1c:6b:d2:fc:
         5a:17:17:90:c4:cd:ea:1b:ef:1f:ad:09:a2:17:16:e7:12:b5:
         89:1d:67:89:4c:42:f2:d9:b8:d8:8b:eb:1d:6c:de:5a:03:2a:
         47:88:f5:b3:b2:87:74:6d:89:71:6d:71:58:7e:98:35:1d:bd:
         8d:0e:64:44:52:70:54:df:d2:7c:ed:39:8e:98:ce:b0:54:f1:
         89:23:56:05:ae:ec:62:7e:7f:fb:5e:c7:f3:b7:c7:f7:99:d5:
         8c:6c:52:b0:b6:ae:96:4a:e3:dd:a9:12:9b:46:24:ac:2c:b3:
         49:da:0a:d7:0c:12:7f:d3:ac:fa:b9:66:30:83:2d:1f:8a:bd:
         af:78:20:ad:05:58:02:d7:38:fa:ef:2a:e9:5e:85:bd:46:45:
         7b:72:d4:ef:59:70:04:80:e2:d2:10:e4:d7:02:96:4b:98:7f:
         a7:0a:eb:95:78:64:0e:dc:12:bb:18:8b:f3:b3:94:cd:06:96:
         74:6e:e5:ad
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNXtf5dN1au6KZxQhAor3lW9gyFwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDAyMDA1WhcNMjYwNzMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZWU3ZmJlNTQ1OTY5ODBhNjNlMzY4NTA3NWM4YjI3MmY1
YTRkN2Y5NDA5YjNmZjE0MWZmNTljYzIxYmNiOTQ0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJct6OikVAHo2zb6JLVGvfvELxyvs87VLbTsCKX16vIFyS
4zjyIPKqW28qFOarMfqFJ0YD6VdCpPQFSHLqQMRptYyxU4Si4yFU2gRo3sOCYj26
quQ8aWdf/MZT1IrH7aw0mHaXtfV6/LKhnB/mMAeMv7u8ZKTugklujXHba7HvIJzG
EaUAeb+WI5OWfDacP0F8F2OXnPyyWC5TaqtZmfobQdpDfXmd048z0i8+dAFx4ME5
APbXFANd7vnsRYjpwSTZVNt85G6zsvfqwFP833wok5DQzdsuoVwLkW58HwhP/5NC
TkOMv93lJRGUMtrfK7t8J/xCGJjVFJBJ5HJ6c1R5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+nvfY17NTtnyqFdB6CTPNM6ORDwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VhYWQ2YzdkLTRiMGItNDkwNy1hYzE1LWJlMDA4ZjU2Y2VhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTfEwDQYJKoZIhvcNAQELBQADggEBAL6zJyXe5tFN4JCafC06GfrY84Ju
iZEDUchLQWU2omae2B9uUO4JwZML01gjbHbBwdAJpCD3uLHYLrJwLonyHlrJ3suY
HGvS/FoXF5DEzeob7x+tCaIXFucStYkdZ4lMQvLZuNiL6x1s3loDKkeI9bOyh3Rt
iXFtcVh+mDUdvY0OZERScFTf0nztOY6YzrBU8YkjVgWu7GJ+f/tex/O3x/eZ1Yxs
UrC2rpZK492pEptGJKwss0naCtcMEn/TrPq5ZjCDLR+Kva94IK0FWALXOPrvKule
hb1GRXty1O9ZcASA4tIQ5NcClkuYf6cK65V4ZA7cErsYi/OzlM0GlnRu5a0=
-----END CERTIFICATE-----
Generated at Sun May 3 16:13:47 2026 by rpki-client