Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eca704bd-851e-4065-9f3a-d39c94232937.roa
File:                     eca704bd-851e-4065-9f3a-d39c94232937.roa (raw, json)
Hash identifier:          Xy2tW3yz9mSMpyWbp2M8gMGjOGnPVjdPzIn78VwNF1k=
Subject key identifier:   25:A7:35:F7:B5:FC:FB:DC:3E:C1:FE:A1:65:C2:24:20:71:C4:DC:35
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       17BECBBE7D088DB52064105F5DC458354A9BDBD6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eca704bd-851e-4065-9f3a-d39c94232937.roa
Signing time:             Sat 25 Jul 2026 00:40:11 +0000
ROA not before:           Sat 25 Jul 2026 00:40:11 +0000
ROA not after:            Fri 23 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        99.150.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:be:cb:be:7d:08:8d:b5:20:64:10:5f:5d:c4:58:35:4a:9b:db:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 25 00:40:11 2026 GMT
            Not After : Oct 23 23:59:59 2026 GMT
        Subject: serialNumber=6f3f1b0677e7a06cf6428764579d3b7ee1717df7a651c70af0822590c1f970bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3a:5a:60:9e:fc:d1:7c:78:f4:3b:a9:57:d7:
                    16:90:d2:e8:fb:c2:f2:08:49:23:14:9b:50:a9:81:
                    ff:8d:54:0c:1b:d7:c4:66:0f:70:54:6e:c9:cc:c7:
                    8d:c7:b3:ca:6b:bc:58:9f:97:c3:bc:82:27:ba:5d:
                    a4:ae:45:53:14:bf:a0:dc:6d:82:67:52:16:00:f9:
                    67:4c:e2:98:28:05:41:e1:98:93:00:98:5d:43:94:
                    e8:1a:35:bf:6a:55:83:a8:dc:f5:77:f0:f8:df:86:
                    36:be:38:58:34:23:9d:12:55:44:fe:de:9b:73:9f:
                    0c:42:66:e0:e1:2f:bd:8e:d0:f4:c9:5f:fb:c0:67:
                    a2:d1:98:0e:bb:be:d9:a4:f8:2f:be:8c:42:c6:e9:
                    38:a9:4f:cd:f4:6e:1d:f0:65:7d:55:70:22:cb:d7:
                    09:78:84:78:cc:88:85:8b:65:0e:5c:a1:fb:e6:6d:
                    06:1a:ae:84:ee:12:59:59:5a:0b:29:ed:e9:d9:21:
                    ed:6f:44:f3:fb:90:fc:43:23:b2:d7:61:bf:8f:66:
                    2d:92:e1:0d:59:02:99:ed:4f:8c:df:67:9b:3f:98:
                    26:06:eb:12:a4:88:ed:d3:57:b2:ac:60:64:9a:ee:
                    f4:f9:f0:c4:53:7d:b4:5f:6b:57:17:5c:a0:99:e0:
                    1c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A7:35:F7:B5:FC:FB:DC:3E:C1:FE:A1:65:C2:24:20:71:C4:DC:35
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eca704bd-851e-4065-9f3a-d39c94232937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.150.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:34:bc:84:8c:be:65:7f:62:a1:74:68:7f:e3:b2:53:bb:
         a7:42:50:9a:8d:1e:83:11:83:4e:5c:ac:6a:dc:1d:fa:6f:9c:
         50:2f:a4:6f:9f:d3:8e:cf:cd:c3:bb:f5:a9:d1:f8:e8:2c:08:
         7e:08:2c:c1:12:f5:29:60:43:fd:ce:d4:f7:d6:62:51:c7:f6:
         57:ba:60:b7:02:ec:1b:54:cc:bd:05:9d:04:e2:e4:c4:f6:ec:
         0b:ff:05:df:08:9e:aa:75:3d:bf:d0:c4:ee:0e:78:05:d8:06:
         dc:ee:62:aa:9d:47:89:45:41:3f:66:8c:ff:9f:21:b5:c6:fa:
         77:b8:cb:fb:c4:b5:63:e8:81:cd:0f:f4:7f:05:ba:e4:54:90:
         2a:21:5a:f7:bf:5b:d3:b0:19:c8:c6:6a:1f:e8:5e:74:93:bf:
         12:8e:97:c3:a7:b1:db:3b:a0:47:44:e5:bd:a8:5e:55:7b:e1:
         22:91:25:4b:d7:dc:ff:32:b2:50:ee:cc:3e:8b:bf:a2:4b:17:
         0d:2f:78:7c:0a:b0:9f:bf:d9:3a:ac:05:ce:26:9b:fa:d3:07:
         48:e9:fe:d2:06:79:39:f1:1c:2a:cb:10:c8:56:d1:f5:af:18:
         13:39:42:8f:53:e1:48:8d:8c:d1:3b:12:ff:5e:bd:dd:cc:76:
         10:14:d9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:23:25 2026 by rpki-client