Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/135b47fe-75b5-4d26-b776-f22b0a43f69f.roa
File:                     135b47fe-75b5-4d26-b776-f22b0a43f69f.roa (raw, json)
Hash identifier:          X0/nsOS76GO7hMTJ+yAZBsdjz6SQDfL1y7jTtbUb4Fw=
Subject key identifier:   05:34:55:51:B4:10:98:B2:09:31:1B:4A:B2:B9:43:BF:16:71:1D:7B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A937B08A6A6C87BA9BD13FFAA1C9D36E71F940A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/135b47fe-75b5-4d26-b776-f22b0a43f69f.roa
Signing time:             Fri 15 May 2026 00:20:11 +0000
ROA not before:           Fri 15 May 2026 00:20:11 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.50.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:93:7b:08:a6:a6:c8:7b:a9:bd:13:ff:aa:1c:9d:36:e7:1f:94:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 00:20:11 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=d8011bf6f38e810dd806a0efb661ead76cf8eb7ced86a20649c85ac5219d03f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3e:0a:21:fa:70:e6:5c:03:ba:b8:9a:13:97:
                    b8:db:4b:3c:3c:cf:42:04:a4:c6:2c:b8:ac:08:59:
                    d7:f2:ab:0f:68:10:71:75:0a:57:75:ed:45:9c:1f:
                    bc:75:d4:9d:5e:48:ed:b8:c1:ba:d3:43:a7:11:5f:
                    c0:58:f0:c5:3f:3d:67:17:c8:9d:c9:33:97:80:39:
                    b4:23:41:e2:a4:17:a3:fd:fd:26:f0:05:f7:91:6c:
                    60:a6:7a:f1:f3:54:50:54:aa:1f:c8:d7:50:42:aa:
                    6b:fe:c6:eb:70:09:72:15:6f:19:49:a9:fc:b9:3b:
                    eb:33:70:09:cb:d8:c8:d2:75:ad:e8:42:3a:ee:0f:
                    e2:24:30:e6:6c:17:86:38:15:eb:5d:ac:8f:2b:0b:
                    07:c1:59:6e:92:66:61:75:81:fe:c1:d9:14:6a:ae:
                    33:d4:e0:02:7f:f8:78:07:17:d4:1c:b3:d9:f7:e8:
                    a2:9b:21:8e:76:1b:4a:c5:3c:d3:df:a6:4c:4b:27:
                    b8:5b:b1:aa:6b:3a:8d:ab:ae:3c:35:8c:d1:ba:e9:
                    94:75:57:9c:10:f0:d4:09:99:e3:6c:a1:46:ea:6c:
                    76:0d:cd:70:08:b1:f7:e4:71:04:83:a1:32:68:c1:
                    34:57:c2:20:36:77:75:13:df:a0:96:91:a5:dd:d5:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:34:55:51:B4:10:98:B2:09:31:1B:4A:B2:B9:43:BF:16:71:1D:7B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/135b47fe-75b5-4d26-b776-f22b0a43f69f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.50.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:03:98:59:d8:31:96:d4:de:b8:13:c8:9a:5c:bd:6e:b1:a2:
         c8:75:bd:9d:31:75:4e:df:de:6d:04:b2:65:c4:57:05:01:94:
         1a:66:9c:73:d5:20:bd:80:b4:df:ee:ff:7d:2f:6b:45:7c:f7:
         31:f4:0c:d2:43:86:30:04:23:ef:d7:47:d5:51:c4:cc:9b:f5:
         9c:1b:63:11:7a:7c:6e:37:5e:b7:d7:cf:e4:48:99:00:8a:f4:
         67:0b:45:49:8c:8c:99:d5:1e:8b:5f:0d:06:65:98:6d:ee:38:
         ee:eb:fc:35:3e:d5:2b:29:40:c1:3b:01:5f:5a:98:fe:96:ca:
         7f:9a:c7:1e:5c:88:95:d6:fc:57:97:b7:d4:cc:a2:5e:f0:60:
         e9:aa:71:7f:12:d3:b1:ae:10:61:b9:0b:f4:a2:7e:cc:43:80:
         8e:69:aa:4c:1a:b9:97:14:66:95:9c:6b:1c:63:e8:22:fa:f4:
         78:c5:d2:2f:12:93:93:fc:7c:58:e5:af:d3:44:a4:f0:59:9b:
         8d:73:ce:4c:29:1d:ee:3e:ed:91:a9:69:d9:2e:7f:06:9a:15:
         b0:ea:3e:e8:f1:a2:64:c3:bc:f8:b3:a6:44:76:15:08:a4:33:
         95:64:06:d3:11:16:c7:40:76:10:09:49:39:32:d0:b7:9b:21:
         36:8a:80:c3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGpN7CKamyHupvRP/qhydNucflAowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDAyMDExWhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkODAxMWJmNmYzOGU4MTBkZDgwNmEwZWZiNjYxZWFkNzZj
ZjhlYjdjZWQ4NmEyMDY0OWM4NWFjNTIxOWQwM2Y4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/Pgoh+nDmXAO6uJoTl7jbSzw8z0IEpMYsuKwIWdfyqw9o
EHF1Cld17UWcH7x11J1eSO24wbrTQ6cRX8BY8MU/PWcXyJ3JM5eAObQjQeKkF6P9
/SbwBfeRbGCmevHzVFBUqh/I11BCqmv+xutwCXIVbxlJqfy5O+szcAnL2MjSda3o
QjruD+IkMOZsF4Y4FetdrI8rCwfBWW6SZmF1gf7B2RRqrjPU4AJ/+HgHF9Qcs9n3
6KKbIY52G0rFPNPfpkxLJ7hbsaprOo2rrjw1jNG66ZR1V5wQ8NQJmeNsoUbqbHYN
zXAIsffkcQSDoTJowTRXwiA2d3UT36CWkaXd1b2JAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUBTRVUbQQmLIJMRtKsrlDvxZxHXswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzEzNWI0N2ZlLTc1YjUtNGQyNi1iNzc2LWYyMmIwYTQzZjY5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjMokwDQYJKoZIhvcNAQELBQADggEBAHsDmFnYMZbU3rgTyJpcvW6xosh1
vZ0xdU7f3m0EsmXEVwUBlBpmnHPVIL2AtN/u/30va0V89zH0DNJDhjAEI+/XR9VR
xMyb9ZwbYxF6fG43XrfXz+RImQCK9GcLRUmMjJnVHotfDQZlmG3uOO7r/DU+1Ssp
QME7AV9amP6Wyn+axx5ciJXW/FeXt9TMol7wYOmqcX8S07GuEGG5C/SifsxDgI5p
qkwauZcUZpWcaxxj6CL69HjF0i8Sk5P8fFjlr9NEpPBZm41zzkwpHe4+7ZGpadku
fwaaFbDqPujxomTDvPizpkR2FQikM5VkBtMRFsdAdhAJSTky0LebITaKgMM=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:37:34 2026 by rpki-client