Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4efb7b2b-9fd8-4a35-bc23-8d203a768712.roa
File:                     4efb7b2b-9fd8-4a35-bc23-8d203a768712.roa (raw, json)
Hash identifier:          erQeC/lqoV/1HRoOEbK4b+0EhLhfzZ+MHxNfqYud7vA=
Subject key identifier:   73:78:77:E3:2E:A3:F2:B5:A0:16:DE:89:B1:82:C6:31:BC:2F:49:8C
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       530F6564AF9BDEA66D0C695188BA59DF91C02E3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4efb7b2b-9fd8-4a35-bc23-8d203a768712.roa
Signing time:             Tue 16 Jun 2026 21:32:23 +0000
ROA not before:           Tue 16 Jun 2026 21:32:23 +0000
ROA not after:            Mon 14 Sep 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.54.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0f:65:64:af:9b:de:a6:6d:0c:69:51:88:ba:59:df:91:c0:2e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jun 16 21:32:23 2026 GMT
            Not After : Sep 14 23:59:59 2026 GMT
        Subject: serialNumber=dd819ec5e64a871ec75d78ddc66e6d33b40f99562716af904958de49c8e172b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:be:c7:90:24:32:1c:11:b0:cf:5d:bc:96:
                    ad:32:01:ac:bd:34:41:31:90:76:6e:31:82:9e:6e:
                    76:8e:c4:85:99:45:5f:53:e2:a4:42:fd:bb:7a:34:
                    52:5e:6e:a4:56:6f:05:12:2b:db:47:39:79:5c:dc:
                    b4:3f:c3:f6:64:1d:c7:0c:c4:c4:db:0c:65:77:ce:
                    3f:93:5f:91:a6:17:a8:c6:2f:70:91:ab:84:71:a7:
                    46:ed:dd:65:d2:cb:01:14:15:9a:93:ea:9f:be:63:
                    a9:55:67:d4:81:31:92:cd:e0:40:09:25:5b:8c:d4:
                    57:ed:0b:43:61:ef:5e:5a:c6:76:b3:96:d2:7a:f8:
                    4c:27:88:ea:bc:28:54:12:40:b6:75:d7:b7:8d:75:
                    c9:1b:4e:5e:38:ae:93:77:86:07:40:e3:a9:83:6e:
                    f1:24:e1:c9:51:11:da:be:89:09:e4:13:8f:61:56:
                    1f:e7:d7:68:ba:48:47:37:87:48:4e:07:52:06:ca:
                    3a:42:aa:3d:a7:f4:1b:2b:52:0c:7f:d8:90:e3:fd:
                    ed:9f:b4:53:d5:ef:75:28:8a:ee:0a:d1:e4:14:3e:
                    da:30:fe:01:69:e1:99:8e:f6:99:37:21:77:6d:53:
                    7e:f7:63:9a:12:4c:a1:36:e8:a4:5c:b5:81:6d:9d:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:78:77:E3:2E:A3:F2:B5:A0:16:DE:89:B1:82:C6:31:BC:2F:49:8C
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4efb7b2b-9fd8-4a35-bc23-8d203a768712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a7:0d:88:d9:85:82:9e:bf:2c:56:1a:dd:af:c0:ec:e1:45:1e:
         da:b1:81:65:e9:d0:f4:f5:9a:aa:c8:21:c9:57:7d:48:4c:f6:
         03:17:a9:56:5d:b4:3b:59:01:98:03:c0:b7:0e:4b:3d:f9:78:
         33:c8:ab:9d:c4:81:68:6c:28:cc:b2:60:34:83:e3:94:25:bf:
         e8:38:00:15:37:48:52:52:5a:ea:e2:c3:f6:2a:bb:0b:5a:67:
         10:53:0c:12:68:bc:22:5a:58:8b:4c:65:ae:92:f8:e5:f2:c7:
         23:3c:19:13:bf:c9:c6:95:03:0b:f9:6d:d9:60:2d:b3:9b:96:
         ae:57:72:4e:b0:4a:13:35:8f:c6:8c:59:9a:8e:4d:58:f5:ab:
         cb:76:ee:8e:28:39:8e:d9:80:0d:de:be:1e:3d:b6:7b:d9:a9:
         e2:fd:e8:d5:0a:e2:36:23:9d:b0:6f:0e:a9:16:9d:80:58:8d:
         f6:14:df:2d:b5:f6:43:ef:44:6f:5b:3a:cb:08:af:5f:38:62:
         42:06:a8:80:c7:54:9b:4d:e1:76:26:80:c1:cf:68:c2:e6:2b:
         7f:84:c6:42:3c:7f:55:d0:e9:5f:c8:78:e3:ff:a2:7d:35:8e:
         57:28:6c:00:0f:a6:a6:b6:d8:2e:b7:e4:fc:d2:a8:56:65:68:
         4b:bc:42:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 03:53:08 2026 by rpki-client