Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56750682-3819-46fb-b454-938b85644074.roa
File:                     56750682-3819-46fb-b454-938b85644074.roa (raw, json)
Hash identifier:          RPTS+CVfb6pCGYYLqzA2u6F8pOGg/I7UxQF1WbXFcBg=
Subject key identifier:   AB:85:19:F4:75:79:97:72:FC:18:50:B0:E7:C9:1F:95:E5:1B:08:C1
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1FF56F3251D9D4BEDDD55B8ABC6088E6D2F42C7A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56750682-3819-46fb-b454-938b85644074.roa
Signing time:             Sun 18 Oct 2026 00:20:06 +0000
ROA not before:           Sun 18 Oct 2026 00:20:06 +0000
ROA not after:            Sat 16 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        35.55.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f5:6f:32:51:d9:d4:be:dd:d5:5b:8a:bc:60:88:e6:d2:f4:2c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 18 00:20:06 2026 GMT
            Not After : Jan 16 23:59:59 2027 GMT
        Subject: serialNumber=18395b6ea99b890be0c3679f9c4c56b3644e21474faa1ad09ba990afa896e3d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:17:03:62:83:a5:3d:1e:5f:1d:8b:bd:7a:
                    ce:51:03:af:8f:50:1d:ea:b3:52:ee:09:d8:40:98:
                    22:0e:6c:2e:97:be:94:d6:fe:eb:3b:50:e6:bf:e3:
                    da:af:51:3a:28:92:a1:bb:a1:44:ec:22:ca:9a:30:
                    8c:ec:68:6a:a8:a3:d1:b4:ea:38:57:17:82:79:af:
                    a4:df:04:0e:fc:00:18:b6:94:d0:1e:3a:90:07:04:
                    5b:b7:9c:8a:09:0a:22:2c:b2:82:f5:2a:e5:e7:df:
                    d7:73:fa:24:14:64:21:3c:d8:a3:e6:88:fc:1e:17:
                    78:bb:cb:48:3a:97:8c:68:68:80:ad:de:3e:55:1a:
                    28:12:34:93:e9:f2:aa:a2:83:2f:85:7e:66:3b:10:
                    31:1d:ce:74:66:0a:9a:80:c4:fb:c9:23:3f:b1:26:
                    ff:9c:d7:6e:1e:7f:92:ac:b7:02:56:66:bc:de:16:
                    8c:e7:9b:60:65:70:17:23:16:11:bf:f8:0c:c0:77:
                    aa:79:a5:74:dc:8c:d5:e5:54:52:53:90:fc:e3:0a:
                    60:72:51:9f:a9:cf:cf:c9:96:e3:fe:7a:12:70:2b:
                    f0:95:01:3b:e1:10:1d:3d:d9:08:ec:56:83:f7:ab:
                    9e:b5:f2:93:18:a5:f9:89:ec:53:56:04:1b:84:d1:
                    5e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:85:19:F4:75:79:97:72:FC:18:50:B0:E7:C9:1F:95:E5:1B:08:C1
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56750682-3819-46fb-b454-938b85644074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.55.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:1f:09:b7:9b:8c:fb:69:20:43:d3:b0:50:60:00:77:57:
         06:90:1b:78:95:64:90:7c:5c:69:9f:f0:64:31:9c:d6:3f:95:
         98:3d:73:83:b9:07:6e:7d:d7:d5:1d:18:f1:b2:12:e1:a0:02:
         94:f5:2a:65:b3:86:79:24:98:2a:3e:68:46:35:51:04:73:14:
         a7:b5:4b:f7:7e:82:70:27:65:96:93:00:4b:ca:cd:ee:b8:84:
         fa:0d:da:f5:e0:f9:5e:ff:09:35:9a:d1:a6:f2:4d:96:f1:e5:
         f1:69:ac:8e:70:d3:5f:54:a6:19:02:a8:f4:26:cf:b1:7c:79:
         a0:2a:5a:f4:72:11:94:3b:6b:1b:a7:ac:38:5f:38:87:44:e0:
         a5:7c:45:9e:01:e0:68:b3:b1:96:65:d5:69:02:90:c4:aa:1a:
         d8:04:b9:7d:b6:e8:8f:3f:54:49:88:54:6d:0c:07:a9:46:de:
         6a:5e:c7:1a:96:73:d7:4e:9f:e2:a2:32:2a:9d:a2:07:7a:63:
         b9:e0:15:94:e4:b4:23:fd:39:f0:01:6a:b0:b5:f4:3e:37:e3:
         74:e7:48:b2:ef:ea:10:39:04:cd:5e:4b:8b:52:7e:ac:d9:16:
         79:ba:1c:8c:00:ef:f9:45:16:1e:e0:e2:43:9b:12:2b:f5:2f:
         63:15:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 16:14:43 2026 by rpki-client