Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa
File:                     119dc5d3-828f-4fcb-ac13-56c9facae99f.roa (raw, json)
Hash identifier:          dSTYemXlKgHyqE6csd6HdWqQUPayfl2VvAPj7jKenJ8=
Subject key identifier:   EB:25:35:C5:D7:F3:B4:91:53:C8:AD:A6:85:E8:AF:E4:E6:89:BB:FE
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       6151E391B40BEF16FA1FA5002A89AD1445382576
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa
Signing time:             Tue 13 Oct 2026 00:10:05 +0000
ROA not before:           Tue 13 Oct 2026 00:10:05 +0000
ROA not after:            Mon 11 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        35.50.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:51:e3:91:b4:0b:ef:16:fa:1f:a5:00:2a:89:ad:14:45:38:25:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 13 00:10:05 2026 GMT
            Not After : Jan 11 23:59:59 2027 GMT
        Subject: serialNumber=c61d9d3d106d7f5697ed56808c13ca878945ce0e5783d9ba5c0d5180f0df7f18, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:60:f5:fc:0e:d4:48:04:c9:ce:46:28:0d:
                    1d:fe:0d:a2:ea:fd:d8:1a:f5:b8:d7:2d:88:b5:6d:
                    25:eb:ed:b1:7c:be:68:60:43:59:35:96:ac:25:11:
                    f3:4f:ab:b7:27:6f:f2:f2:0e:19:31:f5:dc:88:36:
                    dd:9f:08:b9:90:72:37:f7:9d:78:f0:a9:0d:41:8f:
                    b0:65:a3:4a:e0:2c:53:a4:5e:a0:17:21:02:c9:50:
                    fe:37:f7:b8:1e:ca:93:91:ee:42:99:df:bf:39:42:
                    87:76:0c:bb:72:b6:2f:55:f9:8a:0d:38:70:71:f6:
                    1b:3c:a4:9e:a5:eb:4b:83:48:75:78:70:2b:44:af:
                    f5:6a:4f:ce:49:60:38:7a:7e:03:11:4e:a7:c5:9a:
                    0a:51:e0:14:cf:a4:d4:b7:84:7f:67:4f:59:b7:0a:
                    b5:46:dc:de:f2:61:25:ed:a3:90:b8:f4:f1:c8:6e:
                    6a:8c:37:c5:50:df:ca:35:1e:88:43:fd:c0:8f:42:
                    49:e1:26:73:b3:02:69:34:be:da:8c:84:85:87:a3:
                    00:e1:47:7f:cd:31:03:e0:02:bc:7a:42:49:87:76:
                    ca:cb:29:dc:dd:91:09:30:c2:7d:8b:e6:ba:c7:1d:
                    dc:9a:5a:b4:26:24:e6:e3:4a:c2:39:84:37:bc:1b:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:25:35:C5:D7:F3:B4:91:53:C8:AD:A6:85:E8:AF:E4:E6:89:BB:FE
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/119dc5d3-828f-4fcb-ac13-56c9facae99f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.50.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:5e:0d:5d:e1:fe:ff:ef:10:61:be:65:fa:6e:8a:d7:88:
         7a:f3:7d:5d:39:15:76:19:d4:04:d5:d5:2f:b4:d2:2a:72:78:
         7f:ea:a3:12:e5:06:bc:77:a9:8d:16:6b:83:84:62:9a:f5:c0:
         13:34:e2:20:a3:1c:2c:63:c8:5a:1d:99:86:a3:11:6b:29:30:
         e9:90:e9:ce:2e:e5:27:bb:ea:09:8a:34:4f:47:ae:33:80:af:
         1b:af:95:b4:d3:10:8b:ad:49:81:f6:ed:3e:0b:4e:50:22:53:
         3d:94:4f:a1:48:dc:5e:50:f4:71:e4:3d:16:fd:21:3a:f9:fb:
         d8:60:95:2d:d2:8c:1d:0a:d5:59:e2:f3:24:0b:93:fa:52:54:
         13:7e:9d:08:73:44:13:09:48:99:34:c5:e9:b6:5c:34:54:df:
         21:5e:b5:3d:28:c3:90:73:b4:2b:de:64:47:68:cd:09:6b:dc:
         68:05:6e:67:a6:26:55:fc:fa:62:22:3d:41:d4:6c:29:83:76:
         31:78:51:a5:20:dd:cf:82:93:85:d5:1c:81:f7:ca:86:9a:5a:
         fe:a6:5a:df:27:2c:13:41:81:a6:e2:84:a3:60:e7:79:d0:4c:
         b1:44:7b:6d:29:42:32:c8:8a:d2:f6:c6:80:6b:f0:1c:1d:3e:
         d6:90:84:43
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYVHjkbQL7xb6H6UAKomtFEU4JXYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDEzMDAxMDA1WhcNMjcwMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNjFkOWQzZDEwNmQ3ZjU2OTdlZDU2ODA4YzEzY2E4Nzg5
NDVjZTBlNTc4M2Q5YmE1YzBkNTE4MGYwZGY3ZjE4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjqWD1/A7USATJzkYoDR3+DaLq/dga9bjXLYi1bSXr7bF8
vmhgQ1k1lqwlEfNPq7cnb/LyDhkx9dyINt2fCLmQcjf3nXjwqQ1Bj7Blo0rgLFOk
XqAXIQLJUP4397geypOR7kKZ3785Qod2DLtyti9V+YoNOHBx9hs8pJ6l60uDSHV4
cCtEr/VqT85JYDh6fgMRTqfFmgpR4BTPpNS3hH9nT1m3CrVG3N7yYSXto5C49PHI
bmqMN8VQ38o1HohD/cCPQknhJnOzAmk0vtqMhIWHowDhR3/NMQPgArx6QkmHdsrL
KdzdkQkwwn2L5rrHHdyaWrQmJObjSsI5hDe8G7O/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6yU1xdfztJFTyK2mheiv5OaJu/4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzExOWRjNWQzLTgyOGYtNGZjYi1hYzEzLTU2YzlmYWNhZTk5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcjMoAwDQYJKoZIhvcNAQELBQADggEBAJj0Xg1d4f7/7xBhvmX6borXiHrz
fV05FXYZ1ATV1S+00ipyeH/qoxLlBrx3qY0Wa4OEYpr1wBM04iCjHCxjyFodmYaj
EWspMOmQ6c4u5Se76gmKNE9HrjOArxuvlbTTEIutSYH27T4LTlAiUz2UT6FI3F5Q
9HHkPRb9ITr5+9hglS3SjB0K1Vni8yQLk/pSVBN+nQhzRBMJSJk0xem2XDRU3yFe
tT0ow5BztCveZEdozQlr3GgFbmemJlX8+mIiPUHUbCmDdjF4UaUg3c+Ck4XVHIH3
yoaaWv6mWt8nLBNBgabihKNg53nQTLFEe20pQjLIitL2xoBr8BwdPtaQhEM=
-----END CERTIFICATE-----
Generated at Tue Nov 3 17:08:35 2026 by rpki-client