Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9606b06-33fb-450a-aeea-26f1a7ae7823.roa
File:                     f9606b06-33fb-450a-aeea-26f1a7ae7823.roa (raw, json)
Hash identifier:          Go0IaZz8U6On0+EGxZ/W5Xnk4q/euIjvxhwFLCEokFM=
Subject key identifier:   34:D4:26:6E:E6:B1:44:DB:CE:21:C4:11:67:FE:29:2D:F5:40:EC:1E
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       199629EEA0D3513D3F9CE5E83CE00A5E0A13F93E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9606b06-33fb-450a-aeea-26f1a7ae7823.roa
Signing time:             Fri 15 May 2026 00:31:12 +0000
ROA not before:           Fri 15 May 2026 00:31:12 +0000
ROA not after:            Thu 13 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.50.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:96:29:ee:a0:d3:51:3d:3f:9c:e5:e8:3c:e0:0a:5e:0a:13:f9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 15 00:31:12 2026 GMT
            Not After : Aug 13 23:59:59 2026 GMT
        Subject: serialNumber=ca9cbc8c78e715a72c0a36f16ab2ecc3d848f95cb9c748bc713b7337e7de8568, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:1d:61:74:d7:a1:29:da:4e:c2:59:a4:ef:
                    56:62:24:dd:d2:76:0a:1f:4c:08:d9:07:1e:08:5f:
                    d1:c5:85:9e:d3:12:ad:68:89:6a:d6:1f:aa:32:a8:
                    e7:88:3b:be:33:0a:41:88:cd:00:e2:72:fb:4c:de:
                    d7:b2:ff:59:13:3c:ee:55:78:b5:fe:89:4a:a0:e1:
                    eb:ea:60:d1:90:d7:27:48:f6:75:4f:00:aa:56:2f:
                    2d:f5:f8:f0:d7:59:87:7c:9a:d2:cb:30:5d:43:33:
                    a0:42:8e:ec:6a:18:e8:8b:14:68:aa:85:8a:6e:67:
                    f2:d5:e0:7b:92:92:24:11:86:33:ca:6b:c4:3e:3b:
                    83:12:f6:20:4e:79:a3:8b:57:1b:c5:12:eb:38:85:
                    a2:a6:ea:b0:aa:99:00:9a:6e:61:ac:b7:b1:97:2a:
                    0e:25:21:40:f2:01:e9:a6:2e:cd:e4:99:a6:c9:86:
                    40:fe:4e:1e:a0:c9:81:65:0d:dc:a2:c6:cc:98:d9:
                    c8:6e:38:e4:fb:e4:61:89:11:a1:1d:41:74:b4:63:
                    93:cb:9a:26:d7:d5:8e:6c:0c:b2:56:7b:a1:3e:98:
                    74:dd:3e:08:bb:65:21:6b:24:2b:ca:60:05:40:a8:
                    a6:5f:d8:7a:b5:b6:fc:f7:9b:f7:d3:9e:29:18:26:
                    38:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D4:26:6E:E6:B1:44:DB:CE:21:C4:11:67:FE:29:2D:F5:40:EC:1E
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9606b06-33fb-450a-aeea-26f1a7ae7823.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.50.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:67:a4:8a:ba:a6:6a:8f:6e:37:ec:e8:d8:7e:d6:c6:7c:aa:
         ae:fb:f5:3c:da:dc:eb:8f:b7:e0:6e:fe:46:63:72:55:98:f6:
         02:2f:63:25:d2:88:ab:96:12:a2:91:98:a7:c3:53:d3:3b:3e:
         00:fe:a0:e6:c3:31:de:c3:d3:9f:17:da:94:d2:71:1a:fa:01:
         96:88:42:c4:71:1d:85:e6:d8:b7:7d:75:4d:38:77:ea:3f:79:
         a4:86:12:12:bf:35:5d:6d:0f:94:cf:14:57:10:5d:d2:cf:40:
         62:9e:ea:ee:e6:9e:54:62:5f:b9:6b:3f:84:8f:cd:71:22:8b:
         6d:85:c8:6b:50:1e:b5:20:38:f7:11:a3:7e:b5:a4:3e:14:b5:
         3f:40:4a:31:d2:fe:02:57:69:72:6e:14:ae:b9:aa:31:71:e0:
         b0:36:ee:05:5d:f1:76:77:70:0b:7b:b5:34:2e:48:99:18:93:
         c4:12:94:60:10:10:85:48:b4:4c:6c:28:aa:85:6e:a7:00:35:
         85:c2:10:bb:7b:a6:25:51:ce:01:11:b4:17:34:fd:e1:91:85:
         bb:35:7c:80:1b:84:f9:a9:6a:1e:9f:dc:22:ba:cb:be:29:c6:
         06:07:d9:e0:89:e5:ef:77:2e:24:21:43:ad:4a:43:be:6b:4f:
         eb:eb:fe:be
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGZYp7qDTUT0/nOXoPOAKXgoT+T4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDAzMTEyWhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjYTljYmM4Yzc4ZTcxNWE3MmMwYTM2ZjE2YWIyZWNjM2Q4
NDhmOTVjYjljNzQ4YmM3MTNiNzMzN2U3ZGU4NTY4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVAx1hdNehKdpOwlmk71ZiJN3SdgofTAjZBx4IX9HFhZ7T
Eq1oiWrWH6oyqOeIO74zCkGIzQDicvtM3tey/1kTPO5VeLX+iUqg4evqYNGQ1ydI
9nVPAKpWLy31+PDXWYd8mtLLMF1DM6BCjuxqGOiLFGiqhYpuZ/LV4HuSkiQRhjPK
a8Q+O4MS9iBOeaOLVxvFEus4haKm6rCqmQCabmGst7GXKg4lIUDyAemmLs3kmabJ
hkD+Th6gyYFlDdyixsyY2chuOOT75GGJEaEdQXS0Y5PLmibX1Y5sDLJWe6E+mHTd
Pgi7ZSFrJCvKYAVAqKZf2Hq1tvz3m/fTnikYJjhLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNNQmbuaxRNvOIcQRZ/4pLfVA7B4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y5NjA2YjA2LTMzZmItNDUwYS1hZWVhLTI2ZjFhN2FlNzgyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjMo0wDQYJKoZIhvcNAQELBQADggEBADdnpIq6pmqPbjfs6Nh+1sZ8qq77
9Tza3OuPt+Bu/kZjclWY9gIvYyXSiKuWEqKRmKfDU9M7PgD+oObDMd7D058X2pTS
cRr6AZaIQsRxHYXm2Ld9dU04d+o/eaSGEhK/NV1tD5TPFFcQXdLPQGKe6u7mnlRi
X7lrP4SPzXEii22FyGtQHrUgOPcRo361pD4UtT9ASjHS/gJXaXJuFK65qjFx4LA2
7gVd8XZ3cAt7tTQuSJkYk8QSlGAQEIVItExsKKqFbqcANYXCELt7piVRzgERtBc0
/eGRhbs1fIAbhPmpah6f3CK6y74pxgYH2eCJ5e93LiQhQ61KQ75rT+vr/r4=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:08:55 2026 by rpki-client