Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55231166-11e8-45d9-b23b-6e14c3cfbbed.roa
File:                     55231166-11e8-45d9-b23b-6e14c3cfbbed.roa (raw, json)
Hash identifier:          w6ZI77s6MkZNZILSwYogTGot2iHymo7BdRgDLLfpkGo=
Subject key identifier:   33:91:58:03:9E:F7:35:CA:E4:E1:B5:7E:9F:91:5E:56:77:FC:A0:F0
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FF407ABCABAC20D3EDBD0546A1434493A0EB1CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55231166-11e8-45d9-b23b-6e14c3cfbbed.roa
Signing time:             Fri 04 Sep 2026 00:00:50 +0000
ROA not before:           Fri 04 Sep 2026 00:00:50 +0000
ROA not after:            Thu 03 Dec 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.54.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f4:07:ab:ca:ba:c2:0d:3e:db:d0:54:6a:14:34:49:3a:0e:b1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Sep  4 00:00:50 2026 GMT
            Not After : Dec  3 23:59:59 2026 GMT
        Subject: serialNumber=1e3d5bbd8c1c9f11992c67b31adb3d106364e88c82741d0faa121947e113da85, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:51:1e:91:80:05:9b:69:a7:5d:77:a5:54:
                    dc:c7:c0:4e:96:aa:18:64:84:0c:87:dc:c7:11:b1:
                    5a:68:ef:a9:24:df:89:fc:5f:94:16:5d:b7:29:81:
                    fe:82:a5:13:b3:65:f2:d1:21:74:d0:8d:e6:25:0b:
                    38:d0:d6:55:16:de:99:4f:72:6c:e1:5e:ed:8c:71:
                    d1:6b:7f:bd:6d:41:07:41:a8:6d:b6:e4:f4:bf:d2:
                    ff:81:2a:b2:ea:fa:91:86:33:14:d2:10:35:4a:61:
                    b0:d2:0b:b2:16:9c:a7:87:b8:81:d8:7b:63:a3:c2:
                    35:ae:dc:5b:57:f0:01:fd:27:4a:ae:72:60:70:79:
                    a1:81:a5:c3:8e:29:02:88:cb:cc:00:64:54:e5:fb:
                    0b:19:fa:63:fd:ec:aa:ae:c1:3f:1d:ab:52:0e:f4:
                    97:2a:c9:d2:78:d5:68:e8:de:21:82:76:a2:74:f9:
                    9d:79:7b:64:68:e4:4b:82:b9:6c:62:f2:c2:d3:ab:
                    59:46:74:96:c5:3f:5f:fe:5c:76:1a:8b:4a:43:37:
                    70:e1:59:3f:a9:2a:2c:c9:3a:48:7c:0c:c9:59:03:
                    db:a4:61:2b:0d:8b:4b:68:83:f5:3e:09:16:e0:a3:
                    8c:9a:91:1d:80:4c:a5:44:83:65:68:02:d6:5b:f7:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:91:58:03:9E:F7:35:CA:E4:E1:B5:7E:9F:91:5E:56:77:FC:A0:F0
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/55231166-11e8-45d9-b23b-6e14c3cfbbed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.54.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         06:09:be:0c:58:71:5b:71:a4:5f:f1:9b:7a:72:47:4d:f9:64:
         ee:ba:b6:7b:42:22:46:f8:05:91:df:34:6d:ac:6d:30:e4:4f:
         47:49:fb:f9:63:49:f8:7f:4c:3d:a9:7a:e8:b6:7d:c8:98:20:
         27:f0:47:80:00:a8:92:ee:1f:54:23:7c:da:af:d0:26:4c:35:
         b8:1e:95:5b:a7:96:6b:55:74:75:9e:5c:9b:46:ae:aa:e7:ba:
         ae:cb:ae:73:a7:dc:e2:2f:3d:a7:9b:63:7b:0b:cc:7e:16:b9:
         79:b9:6f:eb:d4:47:0c:4c:eb:e3:7a:6c:ae:8d:eb:1e:85:cc:
         25:b8:1a:31:72:ce:a7:68:81:bf:07:db:a7:06:e4:25:88:da:
         1f:93:86:d8:7f:9b:dd:72:3c:93:d9:4d:a2:e3:02:a5:40:39:
         29:dd:da:7c:2f:b5:1f:1f:f7:52:e4:ac:c2:c9:fc:90:3b:80:
         aa:93:98:14:84:1c:e3:8b:55:6c:ab:64:b2:fb:e9:93:46:8c:
         82:cb:7b:96:9f:27:26:c0:1a:8a:06:f1:4f:62:c7:e1:88:25:
         cf:b2:df:b2:c9:e5:9e:68:f9:d2:84:8d:a9:87:4a:36:89:ab:
         71:3d:4d:a1:64:fc:11:83:8e:96:ef:08:23:2e:4e:ab:15:94:
         c2:3a:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:51:49 2026 by rpki-client