Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/090ccde2-3ba3-40ff-bd07-ae6f716f0e23.roa
File:                     090ccde2-3ba3-40ff-bd07-ae6f716f0e23.roa (raw, json)
Hash identifier:          VBaHSfH8+akSHQu9fLIyaWa17nR0ekNaQZ4xiNZ/Nm4=
Subject key identifier:   88:14:14:52:83:8C:68:6D:79:F3:37:B9:4E:9E:6D:11:78:9E:89:B3
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       57ED2F6AEAD3192C3397524C9041A01EE73D1461
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/090ccde2-3ba3-40ff-bd07-ae6f716f0e23.roa
Signing time:             Sun 01 Mar 2026 00:11:24 +0000
ROA not before:           Sun 01 Mar 2026 00:11:24 +0000
ROA not after:            Sat 30 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.54.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ed:2f:6a:ea:d3:19:2c:33:97:52:4c:90:41:a0:1e:e7:3d:14:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar  1 00:11:24 2026 GMT
            Not After : May 30 23:59:59 2026 GMT
        Subject: serialNumber=1ce395d8fe51f1e7912257f935f999eaea92b7b03e4aa71aae9b64004ba59897, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:62:70:45:fb:6c:c7:bf:7c:24:49:a0:06:
                    7f:b0:39:cf:29:cb:9e:02:01:c0:c3:61:cd:eb:b5:
                    c0:8d:ae:c5:f6:af:8e:93:98:92:32:d4:27:17:ec:
                    0e:83:01:56:fe:1d:e8:49:5b:b8:c7:84:3b:cc:d3:
                    0e:6f:70:eb:c0:ac:7d:6e:f5:c1:31:65:26:42:8a:
                    7b:1b:54:ac:85:55:62:d7:c1:34:b6:17:d7:44:c9:
                    d4:a5:42:8e:5b:d0:1d:60:50:4b:0d:6d:4a:21:7d:
                    6c:e3:16:d0:37:11:07:24:f8:57:64:ae:83:f2:5a:
                    44:1c:b3:1b:fa:61:a7:bf:c7:cf:c1:89:b2:c2:19:
                    bf:d4:7f:a1:e3:d5:98:b8:c5:ba:c1:73:8b:d9:24:
                    14:c9:a0:da:f5:c2:1e:1d:23:ba:de:e4:93:88:00:
                    ef:9c:05:04:bc:d6:bb:dc:34:76:a0:e5:8d:fb:75:
                    03:d0:c2:be:5f:e8:2d:b5:a0:3e:77:57:e4:35:bf:
                    33:bc:e0:33:ae:00:07:f4:17:2b:ff:8b:cc:6f:2f:
                    d2:f2:c6:f8:9e:3f:fe:f4:b1:9e:96:e3:2a:1b:8c:
                    74:2b:3a:ed:ba:95:ec:e4:15:3e:b3:f8:ba:f2:0b:
                    f5:9b:b2:e6:75:62:05:4b:9f:03:81:9c:99:de:32:
                    e5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:14:14:52:83:8C:68:6D:79:F3:37:B9:4E:9E:6D:11:78:9E:89:B3
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/090ccde2-3ba3-40ff-bd07-ae6f716f0e23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:26:59:8f:a6:0b:62:86:5d:da:ed:ea:80:9a:49:f2:1e:4e:
         3e:58:f0:4f:7a:65:1b:cf:8e:0b:98:62:dd:be:40:89:69:99:
         eb:5f:7f:08:5b:f8:4d:76:b6:ff:85:c9:29:d8:f4:85:6c:af:
         82:08:73:ce:86:88:84:f3:b6:34:49:30:b4:cd:62:8f:3c:f8:
         73:02:65:0f:aa:c1:56:42:2d:97:57:4e:3b:47:fa:9c:22:9a:
         d7:9e:1e:f4:a8:00:dc:21:5a:e0:24:01:52:29:aa:ac:ee:c0:
         97:09:5c:7c:6e:4f:02:24:9c:3f:83:e8:69:90:2a:a0:4b:c7:
         13:32:0c:01:66:5c:d6:70:51:24:ca:2d:10:5e:3c:a3:a0:08:
         1c:7e:4a:3c:b7:4e:66:36:97:3a:f1:09:70:62:f1:89:b2:a5:
         c1:f9:74:e4:ee:9b:c5:d3:c3:ef:8d:c2:50:83:c3:14:fd:c6:
         18:72:aa:f5:60:e2:7b:57:d0:10:ff:f4:f8:48:a4:e3:41:08:
         a3:5f:2e:e9:d7:b2:6a:87:e3:a7:31:99:0f:56:24:6a:7a:ec:
         19:92:fc:f7:2d:9b:d2:b8:49:54:af:be:78:0c:b1:46:7e:38:
         32:bd:24:a1:17:3d:4d:9d:fe:6d:7f:19:1c:8d:c7:f0:72:2b:
         fe:80:a4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:44 2026 by rpki-client