Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be34e915-cdaa-4fdb-8b63-ccc9c1f6b154.roa
File:                     be34e915-cdaa-4fdb-8b63-ccc9c1f6b154.roa (raw, json)
Hash identifier:          8HwJVuPNojkTazxURjzgCOPpPpFFAzov0X4ZmBym9bE=
Subject key identifier:   C5:CC:61:1A:EE:09:00:B1:6D:84:1B:D1:B3:C7:E4:13:5E:19:DB:1B
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       30B57BD6A342C54247C699BCAECD6F6FA34B72AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be34e915-cdaa-4fdb-8b63-ccc9c1f6b154.roa
Signing time:             Sun 17 May 2026 00:30:12 +0000
ROA not before:           Sun 17 May 2026 00:30:12 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     398378
IP address blocks:        35.39.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b5:7b:d6:a3:42:c5:42:47:c6:99:bc:ae:cd:6f:6f:a3:4b:72:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 17 00:30:12 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=7d4eef5fd1687974e36ed72fb94a27048089c6c27a8fc0819d632cf47e0283a3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:43:53:04:58:2e:27:f9:1f:8f:46:83:e0:
                    0d:d2:d0:fc:38:1e:bb:f4:10:63:6a:8e:fa:84:7e:
                    9e:69:06:dd:78:c2:5a:7d:a9:3d:75:35:43:37:4f:
                    4d:ff:36:80:d2:2d:f1:69:3f:7f:b7:fb:a7:64:4c:
                    ce:3b:89:d0:49:5d:b7:5a:53:5b:94:e0:c7:0e:8e:
                    86:24:9b:c3:bf:ab:ef:b7:2e:fc:13:0f:67:0d:18:
                    7e:94:16:34:13:5b:c3:71:cc:a4:48:c3:bb:3d:7c:
                    24:a7:6a:ff:5d:3f:d2:06:f3:2d:28:3a:27:19:eb:
                    4e:6c:66:49:2d:fa:52:5c:aa:8e:47:bf:17:83:b9:
                    e4:9b:66:6b:02:c9:a3:53:8b:0a:9a:32:5d:25:cb:
                    96:9b:c4:ba:ab:d6:ee:88:d1:c9:9e:f0:db:18:8b:
                    06:c2:91:f6:d0:37:ab:ef:60:de:c3:ec:ef:bc:de:
                    5a:91:d3:27:96:31:00:35:01:c4:9b:57:b7:92:89:
                    77:3e:b6:c7:16:3e:8a:3a:e5:be:32:c6:7a:6f:8d:
                    b2:77:45:0c:e0:cf:e7:63:a6:17:d5:c6:2d:71:be:
                    ad:c4:1a:5a:93:02:de:9d:58:6c:98:be:9b:72:df:
                    76:f5:0c:f3:00:a1:fc:f1:66:0b:01:ad:da:36:47:
                    87:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CC:61:1A:EE:09:00:B1:6D:84:1B:D1:B3:C7:E4:13:5E:19:DB:1B
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be34e915-cdaa-4fdb-8b63-ccc9c1f6b154.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.39.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ca:dc:8a:c3:78:66:72:85:93:e7:15:07:75:91:77:34:28:94:
         d0:5d:3e:21:46:83:94:d2:ff:03:58:af:ed:38:6f:5f:2c:98:
         a8:bf:b7:ef:95:d1:89:a2:1a:f4:c3:bf:f0:1b:6d:9f:e1:08:
         9c:19:b7:b9:02:ac:a1:91:d1:b1:93:78:07:e5:77:fa:17:53:
         84:91:09:57:17:9c:d0:04:e7:74:9d:c0:5c:65:13:54:27:69:
         c0:e3:66:33:da:3f:94:53:60:dd:56:61:3a:4d:32:73:2d:36:
         36:32:1a:72:9a:30:d6:c1:4b:fa:90:7e:c2:e8:63:1c:45:b0:
         26:32:e8:09:21:d5:4d:b4:e5:3d:4a:fb:6b:38:d6:35:e8:ff:
         94:d1:b1:d5:15:73:2d:31:61:8d:ee:9b:e8:51:c2:f2:0a:41:
         4b:de:58:b2:dd:7b:af:bd:50:88:29:b3:fc:d0:f1:21:fb:34:
         d6:54:48:6a:1c:45:6c:67:6f:97:42:b9:86:30:67:49:e1:a0:
         7a:4d:47:4b:fe:24:12:24:b9:db:09:85:21:cf:d7:93:00:0c:
         5f:55:eb:92:ce:a1:2e:27:c5:f1:22:38:51:fe:1a:a6:91:c3:
         04:04:b7:5b:8c:ee:68:ff:b4:20:e9:06:e3:35:14:0c:d5:28:
         56:11:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:10:45 2026 by rpki-client