Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87a9816-c748-4bfb-9e42-8d7c00a32f35.roa
File:                     f87a9816-c748-4bfb-9e42-8d7c00a32f35.roa (raw, json)
Hash identifier:          K/aw9n53O3D7IWGiGqgayfLdRqX0d3s5tO0mGMQ6EmU=
Subject key identifier:   78:61:F6:10:75:68:11:27:04:F6:C0:D5:5C:E8:D8:7B:52:32:14:0C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79FC8AFE9945D985D46A4B1E7290202D311495C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87a9816-c748-4bfb-9e42-8d7c00a32f35.roa
Signing time:             Thu 26 Feb 2026 00:40:52 +0000
ROA not before:           Thu 26 Feb 2026 00:40:52 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.34.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fc:8a:fe:99:45:d9:85:d4:6a:4b:1e:72:90:20:2d:31:14:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 26 00:40:52 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=bb835d33c9861d7a939a58afd1b2b62cfa03805a833c0b17f301a2c0f4617a37, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:67:64:71:18:10:89:4f:5b:30:97:da:aa:
                    f5:88:77:0c:2c:78:ad:77:29:24:f7:cb:ce:56:4b:
                    97:7b:3d:40:a8:c5:3e:27:cd:f6:74:bf:62:a2:94:
                    07:2e:d2:fe:04:97:5a:ce:86:c4:ce:49:58:93:e1:
                    d2:e5:0c:17:22:bc:96:4f:cf:20:7c:81:92:17:94:
                    95:a0:8f:6a:1d:88:fc:a7:8e:4d:9a:09:28:70:a9:
                    fb:70:fb:f6:c4:aa:3f:1a:57:10:be:2a:17:c7:5a:
                    6e:74:d8:e1:05:d1:58:61:bb:c2:6b:7a:7d:4d:9d:
                    51:7d:15:bf:b4:7a:3b:2d:85:c8:bc:81:b7:da:7b:
                    c6:9f:2b:c6:9e:ef:61:50:13:ef:ec:5c:dd:ab:3b:
                    03:52:7c:29:41:da:f5:19:cf:47:f4:25:4c:d9:2d:
                    97:e2:39:1c:60:3a:c8:a3:70:e9:66:d1:ce:4f:a3:
                    58:67:07:ce:e5:f9:6f:b1:f9:33:65:75:8c:09:5f:
                    e5:1d:f8:10:d2:75:ea:49:04:92:fd:5b:fc:eb:96:
                    5c:e4:b9:7f:54:46:c5:83:de:cf:4d:cb:25:80:2e:
                    e2:a4:89:14:01:61:75:e1:ee:5d:b7:ff:45:48:2b:
                    fc:c3:0d:a0:a2:35:1d:a8:04:ab:4d:e4:cb:67:11:
                    6d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:61:F6:10:75:68:11:27:04:F6:C0:D5:5C:E8:D8:7B:52:32:14:0C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87a9816-c748-4bfb-9e42-8d7c00a32f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.34.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1f:61:dd:ce:ed:82:13:88:e1:e7:ab:36:35:ce:21:41:af:64:
         52:8c:3c:a1:fc:7d:8d:cc:ed:bf:b2:7a:ce:0e:03:3c:a6:84:
         2e:c9:37:67:2c:8a:dc:4c:ea:10:e9:ab:9a:95:6a:9e:6c:73:
         b7:c7:02:06:1b:8d:a9:ba:aa:b3:4f:4a:4b:d2:90:84:3e:6b:
         82:ed:0f:98:74:28:99:59:27:49:18:74:3f:c4:1c:bc:dd:ea:
         33:f9:f8:1e:bb:f2:cc:56:a2:a3:e0:ab:47:a1:aa:b0:b5:55:
         d4:7a:50:98:fc:0b:85:0e:8b:e5:c7:b7:0b:8d:41:78:5a:2e:
         2e:f4:bf:1d:ca:cc:02:13:51:c7:67:a1:a7:c3:89:b3:ef:1b:
         5f:0d:c0:36:9b:e5:e4:c6:cb:d0:1b:ab:22:8b:78:13:df:e2:
         09:43:06:61:84:49:94:b7:81:7b:a7:01:10:76:9c:7e:7d:84:
         51:08:5e:9b:54:34:41:6e:b9:29:44:71:15:fa:1c:77:fd:c0:
         40:a6:5c:bf:9b:bf:94:70:cf:73:58:85:87:85:82:6a:21:22:
         62:b7:00:22:fb:80:48:30:03:6c:5b:37:78:03:9c:38:32:9f:
         7b:88:01:ab:71:ad:91:05:59:9e:ab:f4:61:a0:c1:ff:0f:f8:
         8e:0b:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:25 2026 by rpki-client