Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb2a41c7-41cd-4f96-89c0-a4b23e2dc22a.roa
File:                     eb2a41c7-41cd-4f96-89c0-a4b23e2dc22a.roa (raw, json)
Hash identifier:          AGSyo8q7j5oImOb4E5TJ6XXNihshkMWegVQjrDo5Vbc=
Subject key identifier:   25:1D:E8:97:5A:CD:A9:AA:3E:C0:85:EB:4D:5C:55:96:79:98:87:22
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       5D02D8A464DAEE1EA8451C6F3DB861235C7C67A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb2a41c7-41cd-4f96-89c0-a4b23e2dc22a.roa
Signing time:             Sun 01 Mar 2026 00:20:39 +0000
ROA not before:           Sun 01 Mar 2026 00:20:39 +0000
ROA not after:            Sat 30 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.54.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:02:d8:a4:64:da:ee:1e:a8:45:1c:6f:3d:b8:61:23:5c:7c:67:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Mar  1 00:20:39 2026 GMT
            Not After : May 30 23:59:59 2026 GMT
        Subject: serialNumber=f9e701c2c329675fceb977ec4ecd28df113b22a774d20e2943b300070b00e39c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:a5:fc:ad:b9:2e:69:b4:e3:35:17:df:2b:
                    d1:e4:f4:3c:99:54:d7:69:94:b4:76:4d:d0:46:60:
                    03:99:19:b0:96:ae:a1:4e:34:47:cb:5f:83:7b:ab:
                    28:61:0e:91:3a:0a:bd:60:6a:3c:68:34:e5:84:f0:
                    45:38:91:1c:6b:b6:c7:f5:e9:00:cb:c1:c5:6b:05:
                    70:a6:46:99:e1:86:3d:66:eb:06:0b:7a:5b:fa:ee:
                    41:6f:32:27:e8:a3:44:9b:a2:68:1f:10:45:c4:e5:
                    f0:e6:d0:a1:80:c5:20:c0:6d:8b:eb:b6:a6:ad:f0:
                    60:8c:7f:15:81:05:6d:3a:47:77:d2:c4:cc:8e:57:
                    3a:a8:7c:14:49:96:18:a2:66:90:7e:b7:f8:91:33:
                    78:e8:cc:a0:3b:91:cf:67:b3:0e:c9:1c:13:a0:1d:
                    27:a0:3d:9e:df:c7:35:50:ee:a2:c9:f4:de:e9:7f:
                    0a:ce:06:cd:13:fa:cd:c3:61:50:de:39:38:64:f2:
                    43:c7:d7:ab:71:db:71:3f:68:3f:26:6e:72:f8:e6:
                    f0:b4:5c:ab:e6:eb:8f:c2:6b:3a:4f:24:f0:9a:aa:
                    f5:3c:bc:91:4c:33:9e:21:53:bd:a5:0b:92:1c:31:
                    41:71:21:d6:03:b5:1c:95:3c:fa:ed:7c:db:d8:fb:
                    12:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1D:E8:97:5A:CD:A9:AA:3E:C0:85:EB:4D:5C:55:96:79:98:87:22
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb2a41c7-41cd-4f96-89c0-a4b23e2dc22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:fb:1d:4f:e4:f9:83:51:f4:ea:31:14:4f:8c:3e:3c:ee:68:
         5b:07:c1:50:7f:5e:f9:cd:6c:38:4f:c0:d3:4e:42:14:8e:9f:
         e4:f7:f5:2a:88:97:56:4b:5a:60:aa:ea:ff:11:49:ba:ff:0e:
         47:7b:15:9b:21:73:cb:dc:30:20:48:6a:cb:47:74:ef:4e:03:
         8c:bc:d9:cd:b1:b2:ff:f8:21:e5:8f:c8:14:67:6a:9f:fb:39:
         5f:75:6d:e1:57:ca:8d:df:64:f2:85:62:f9:43:6e:50:4a:99:
         5d:00:87:56:7f:b5:0a:38:88:09:37:ca:d9:2c:08:da:96:71:
         71:a9:9f:7f:a3:00:4d:9f:ea:ef:c2:94:54:52:00:63:87:45:
         96:81:4d:f7:c2:e6:6e:76:2d:6a:96:c7:8a:14:e1:67:cf:40:
         27:56:8c:fd:35:29:f2:cf:48:2b:4e:52:00:ee:7a:b6:05:57:
         68:b1:35:cc:e8:d7:8f:1d:de:d0:a3:f4:ff:fd:5f:9d:7a:8e:
         43:f6:51:ea:52:9f:a1:01:94:87:78:65:fd:6f:38:42:2b:82:
         37:ba:ce:f3:a4:5c:d0:48:7a:64:1e:87:02:e3:c2:83:6d:f8:
         78:fa:b3:e7:ed:ef:df:cb:24:ad:41:5f:b9:00:a6:2f:74:c2:
         7a:48:63:ac
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXQLYpGTa7h6oRRxvPbhhI1x8Z6YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzAxMDAyMDM5WhcNMjYwNTMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmOWU3MDFjMmMzMjk2NzVmY2ViOTc3ZWM0ZWNkMjhkZjEx
M2IyMmE3NzRkMjBlMjk0M2IzMDAwNzBiMDBlMzljMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyRKX8rbkuabTjNRffK9Hk9DyZVNdplLR2TdBGYAOZGbCW
rqFONEfLX4N7qyhhDpE6Cr1gajxoNOWE8EU4kRxrtsf16QDLwcVrBXCmRpnhhj1m
6wYLelv67kFvMifoo0SbomgfEEXE5fDm0KGAxSDAbYvrtqat8GCMfxWBBW06R3fS
xMyOVzqofBRJlhiiZpB+t/iRM3jozKA7kc9nsw7JHBOgHSegPZ7fxzVQ7qLJ9N7p
fwrOBs0T+s3DYVDeOThk8kPH16tx23E/aD8mbnL45vC0XKvm64/CazpPJPCaqvU8
vJFMM54hU72lC5IcMUFxIdYDtRyVPPrtfNvY+xI5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJR3ol1rNqao+wIXrTVxVlnmYhyIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ViMmE0MWM3LTQxY2QtNGY5Ni04OWMwLWE0YjIzZTJkYzIyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjNjswDQYJKoZIhvcNAQELBQADggEBAHL7HU/k+YNR9OoxFE+MPjzuaFsH
wVB/XvnNbDhPwNNOQhSOn+T39SqIl1ZLWmCq6v8RSbr/Dkd7FZshc8vcMCBIastH
dO9OA4y82c2xsv/4IeWPyBRnap/7OV91beFXyo3fZPKFYvlDblBKmV0Ah1Z/tQo4
iAk3ytksCNqWcXGpn3+jAE2f6u/ClFRSAGOHRZaBTffC5m52LWqWx4oU4WfPQCdW
jP01KfLPSCtOUgDuerYFV2ixNczo148d3tCj9P/9X516jkP2UepSn6EBlId4Zf1v
OEIrgje6zvOkXNBIemQehwLjwoNt+Hj6s+ft79/LJK1BX7kApi90wnpIY6w=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:11:10 2026 by rpki-client