Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001e886e-4c42-418b-aa55-744e88958540.roa
File:                     001e886e-4c42-418b-aa55-744e88958540.roa (raw, json)
Hash identifier:          bkJUuaXbCfqsiOnYamt6/wT6thgYIdNOTYg8h552wfc=
Subject key identifier:   31:36:6B:67:EA:8D:FA:B8:7E:52:B9:22:AA:4D:EA:63:DF:18:48:16
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       4081D94DF2F810EA1155A2DB0EA0CF7242C4F2D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001e886e-4c42-418b-aa55-744e88958540.roa
Signing time:             Sat 24 Oct 2026 00:31:05 +0000
ROA not before:           Sat 24 Oct 2026 00:31:05 +0000
ROA not after:            Fri 22 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        35.39.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:81:d9:4d:f2:f8:10:ea:11:55:a2:db:0e:a0:cf:72:42:c4:f2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 24 00:31:05 2026 GMT
            Not After : Jan 22 23:59:59 2027 GMT
        Subject: serialNumber=71673ec1ec4c513c951e236e2e15c6a1885dd1303248ddfe14306c24905ca031, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:b8:d7:56:a7:65:3e:f0:2c:a3:ee:ab:fb:
                    1d:3a:44:26:a5:98:01:37:c0:ac:af:0d:04:19:ff:
                    fb:32:8c:1b:f2:64:e4:18:b4:ef:0b:4d:3a:78:86:
                    c7:65:62:6f:ca:c1:ca:9d:aa:03:e4:34:bb:b1:ed:
                    27:48:e8:7f:aa:73:4a:bc:14:57:89:15:f7:4e:46:
                    0a:82:04:91:50:c9:6c:45:23:3d:bc:ea:7f:ba:8e:
                    cf:83:ab:b5:0b:37:01:07:5d:4d:b0:cb:05:7d:63:
                    ac:e0:5d:47:45:9e:02:06:20:d4:a6:70:6f:3b:b4:
                    ed:59:70:63:77:49:07:0b:10:74:e3:58:39:95:f8:
                    d4:b0:0e:85:ac:f7:25:1a:8b:e3:63:62:2d:8c:c9:
                    87:ce:c5:af:19:9b:64:cf:55:1c:8e:f5:7e:ff:6e:
                    43:47:07:f8:42:72:13:38:4b:54:89:fb:b5:5c:c6:
                    e3:74:ce:91:7a:aa:0e:82:3b:84:b4:d8:fd:31:fa:
                    ae:ae:02:05:86:b5:e7:6d:15:ca:91:bb:ea:49:15:
                    90:2e:1c:50:95:7b:65:85:5b:a4:15:8a:59:60:af:
                    05:5c:5f:53:d8:23:c2:d0:45:35:23:0a:28:b3:49:
                    06:34:b1:e9:94:ed:2d:a7:38:1c:c6:7d:e5:39:c3:
                    cc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:36:6B:67:EA:8D:FA:B8:7E:52:B9:22:AA:4D:EA:63:DF:18:48:16
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001e886e-4c42-418b-aa55-744e88958540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.39.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:54:b5:36:29:25:44:e1:37:20:65:3f:43:fe:a2:8a:69:ce:
         df:d6:24:67:4a:a4:3f:b0:c0:17:be:74:50:58:a5:60:d4:30:
         ff:b2:f1:d9:7d:76:5a:05:82:ad:84:f4:ef:f3:c1:95:7f:23:
         cc:e6:c7:db:80:e2:da:7c:ff:6c:a2:32:72:81:51:42:77:a1:
         9d:86:53:27:37:46:cf:19:3e:9e:9b:47:e8:d7:3b:c9:f4:b5:
         bf:3b:3f:cf:43:a1:ef:56:90:c6:e6:34:da:85:16:f3:dd:6c:
         7a:d3:ab:d2:3a:16:4c:dc:ae:b6:50:dc:9e:63:da:f9:a3:c4:
         00:2d:dd:1c:47:91:23:c4:b4:30:08:8d:87:39:c8:02:19:f8:
         8a:03:67:82:78:61:b3:4a:d4:4d:24:b8:b5:b9:7f:5a:33:7e:
         e4:8e:e6:78:23:97:8c:e6:31:41:9f:7e:0d:bb:a8:08:e0:f4:
         56:20:9c:05:a4:1c:5b:56:42:bb:c5:72:ba:b6:8a:74:06:81:
         1c:bf:16:8d:5f:d6:d0:21:9a:36:86:68:ed:42:34:a6:c7:0d:
         40:18:46:cc:8f:46:8a:2a:f4:5a:43:60:c7:a1:83:45:a4:be:
         7c:22:cd:f2:b3:42:bf:81:3a:f3:ef:c6:05:bb:f0:2a:b0:fd:
         37:a9:88:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:45:26 2026 by rpki-client