Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e99801eb-2ad6-48ea-8827-0f2ada07b0b2.roa
File:                     e99801eb-2ad6-48ea-8827-0f2ada07b0b2.roa (raw, json)
Hash identifier:          3iVb4SkfeSZqGF69TOZ8FGc+eSaCvDDkNHo+ZvQWBdA=
Subject key identifier:   39:AD:67:4F:64:60:4D:FD:3F:76:85:02:CC:A2:3B:32:FD:DA:B4:EE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3B3572ED3BF3D30EFAAF5A27ABE24D6B60DA2115
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e99801eb-2ad6-48ea-8827-0f2ada07b0b2.roa
Signing time:             Wed 20 May 2026 00:21:53 +0000
ROA not before:           Wed 20 May 2026 00:21:53 +0000
ROA not after:            Tue 18 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.41.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:35:72:ed:3b:f3:d3:0e:fa:af:5a:27:ab:e2:4d:6b:60:da:21:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 20 00:21:53 2026 GMT
            Not After : Aug 18 23:59:59 2026 GMT
        Subject: serialNumber=1162817085e3cda4daae53ad6bc0b93e99c7f72b7d9f37e6be07956e26c12f89, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:fe:cf:46:3c:e4:95:a7:02:94:d5:39:50:
                    13:aa:40:6b:97:3d:66:66:18:a2:5e:5e:b9:b0:bd:
                    b7:1c:a8:58:01:ef:58:c3:4e:7e:ea:dc:a1:95:e1:
                    12:fc:4d:d5:dd:c0:98:82:2a:e0:53:cc:75:21:30:
                    ea:d6:00:5e:52:b9:8c:96:b6:85:d7:a3:a7:34:b1:
                    e3:8a:30:16:36:11:26:ce:b7:dd:7c:40:08:a5:ea:
                    74:8d:61:b6:b8:3d:81:ab:e6:aa:1e:a7:4d:dd:1b:
                    45:4d:7f:8b:a1:2b:63:3c:e4:c3:7f:80:5b:90:ac:
                    c1:64:fa:59:f2:d8:19:84:a6:ad:17:18:37:c1:2e:
                    c9:93:83:4d:17:58:7e:e2:b7:9f:3d:67:e3:7c:42:
                    da:6a:0a:9c:85:3b:c1:3e:88:bc:d1:e4:55:62:58:
                    13:19:48:93:7a:9d:c8:1b:ff:69:d3:55:39:11:0c:
                    db:0c:60:7a:76:c0:73:04:93:47:ee:74:68:a8:37:
                    40:d1:06:e8:a6:70:09:c1:f2:fb:e1:9c:61:a4:bb:
                    b0:5f:4f:53:fd:82:a9:c4:c4:01:d7:22:ab:d9:c8:
                    c2:7e:0c:e2:be:a5:50:c9:38:00:36:34:d9:8d:2e:
                    b0:73:56:f6:45:a4:c0:a1:ef:ec:9d:41:ce:d5:01:
                    6f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:AD:67:4F:64:60:4D:FD:3F:76:85:02:CC:A2:3B:32:FD:DA:B4:EE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e99801eb-2ad6-48ea-8827-0f2ada07b0b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.41.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3c:e3:28:f1:d6:95:d4:91:13:5a:2e:4a:7b:cd:1e:61:8e:6c:
         98:6e:74:20:9e:e8:2c:48:d3:b5:e5:ee:1f:be:58:58:0a:a6:
         b2:f7:92:c3:15:32:2e:b0:af:ba:75:92:5a:44:d5:be:1c:ea:
         50:6e:26:f3:53:65:79:c5:a5:7c:57:1f:2c:b1:69:71:71:7d:
         c0:03:8b:fa:05:32:0d:a5:9c:d9:7f:8e:97:7d:aa:74:b7:34:
         5b:b5:d1:d2:08:0b:26:29:ad:f0:27:71:90:ba:3e:75:7f:f8:
         fb:0c:c1:ad:6f:b9:6e:03:2a:a7:44:69:0d:9b:c4:6f:03:8e:
         16:96:a2:c2:90:88:79:4b:94:6c:ef:67:46:eb:2c:f9:a1:ff:
         c6:1c:cc:d3:d5:78:97:4c:0a:f7:49:75:c7:c5:3c:5d:e8:55:
         50:34:e9:6e:87:03:3d:5a:d0:a6:d6:cf:6d:9a:1c:4f:24:fd:
         69:34:de:77:41:4b:6d:4e:fa:d7:de:19:8f:15:ca:a1:0b:00:
         39:b2:5d:b5:63:a7:63:a2:c2:34:71:26:e1:d7:fc:9f:d0:67:
         38:e5:79:26:7a:c2:21:71:0f:78:b4:50:f2:87:6d:6f:74:11:
         8a:d3:e1:10:85:80:24:b5:96:3e:af:02:29:08:be:4c:7a:ed:
         bb:8e:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:51 2026 by rpki-client