Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2914dc25-96c6-4f4a-ad6c-4f3c87da0df1.roa
File:                     2914dc25-96c6-4f4a-ad6c-4f3c87da0df1.roa (raw, json)
Hash identifier:          fVC1CGFhZ3RaITUCMFCfhdcufnsNbvafYYf/pyshu7Q=
Subject key identifier:   05:F5:4F:83:D1:65:01:EA:B3:DF:BD:6C:E5:28:0A:5B:DD:5F:F0:E5
Certificate issuer:       /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial:       108834F4CB0001082FA303B0D6BCAEBC2BE6571F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2914dc25-96c6-4f4a-ad6c-4f3c87da0df1.roa
Signing time:             Fri 07 Aug 2026 02:41:00 +0000
ROA not before:           Fri 07 Aug 2026 02:41:00 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.159.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:88:34:f4:cb:00:01:08:2f:a3:03:b0:d6:bc:ae:bc:2b:e6:57:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
        Validity
            Not Before: Aug  7 02:41:00 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=0a2ee626d13d2a063975493bc28b17ba16ae56abdca2275f44c082cd5dd1467d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:92:be:27:61:cd:1d:65:b6:68:1c:10:a5:
                    bb:b0:58:7d:c9:45:0a:bb:dc:0b:fb:48:7c:cb:50:
                    00:e8:38:d3:3c:c2:65:ca:30:c9:a3:50:3f:7a:4f:
                    c9:77:ed:7f:25:be:7b:b4:8c:e9:6e:c9:2d:3c:c8:
                    89:c2:20:6c:48:4c:35:49:87:08:ba:a4:16:69:1e:
                    ae:bc:59:b9:08:9c:78:1b:00:7e:8d:99:d8:3f:d4:
                    3d:bc:39:8e:3d:e6:c5:ec:b1:36:b6:6f:aa:da:45:
                    76:b0:56:8c:a8:d2:6b:10:a5:af:95:a0:7e:6d:73:
                    d3:f5:8c:21:08:4a:e9:d6:38:31:d9:30:bd:76:ca:
                    46:aa:d3:b8:7b:53:2e:89:bc:14:29:b6:64:69:46:
                    e3:09:a1:c3:49:2e:53:6f:d0:e6:60:3c:f9:e0:e1:
                    8f:1e:88:00:8f:9f:73:26:9f:43:6a:5d:4f:cb:81:
                    b7:3a:65:e1:c5:59:b8:7e:ec:4f:d2:80:7f:2b:e6:
                    b0:ab:66:5d:b9:26:04:b3:bd:78:0f:8b:40:d6:ae:
                    f2:b0:16:e3:f0:fe:d1:0d:df:9c:fe:b9:74:6d:de:
                    30:30:cc:f4:a6:10:d6:ed:45:67:40:28:09:9f:80:
                    5a:85:6e:2c:6a:59:b8:43:cd:bb:a5:9b:b3:ff:db:
                    d2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F5:4F:83:D1:65:01:EA:B3:DF:BD:6C:E5:28:0A:5B:DD:5F:F0:E5
            X509v3 Authority Key Identifier:
                keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2914dc25-96c6-4f4a-ad6c-4f3c87da0df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.159.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:3d:c5:5a:ba:a9:81:72:da:cd:8a:8a:68:c1:2a:0e:66:33:
         b6:94:78:df:dd:95:3a:20:bd:e5:0f:5b:6c:9b:dd:58:a7:76:
         6f:68:c9:19:f1:c3:ca:56:b4:15:81:cc:ed:8f:30:d7:69:e9:
         f3:49:e0:2c:0c:9f:64:f7:de:bc:4f:0b:6d:ed:2e:4d:c3:a6:
         e1:7e:13:07:b8:8e:99:a8:6c:52:10:61:45:94:25:3d:fd:08:
         f7:e8:a5:3f:8e:58:89:ea:c5:cf:0a:bb:6e:73:d4:be:29:48:
         d4:ea:37:c7:77:2f:c0:73:45:ca:d5:9e:5a:68:8f:b5:f6:10:
         d3:a2:0d:a3:ab:8a:76:b3:c9:38:9f:ab:c9:51:b5:80:15:e9:
         14:ba:86:19:ee:e0:0c:fb:6f:ba:5a:c2:a5:62:8e:8c:fc:d2:
         51:6c:22:1b:f1:66:f4:9a:06:6c:81:38:96:23:1e:5e:65:90:
         cc:f6:66:2e:f0:ca:e5:07:97:43:fc:c1:52:17:c4:6c:30:88:
         89:d1:f5:12:98:1d:a1:7c:c3:7d:27:b7:a6:b6:2b:26:cf:d7:
         8e:6c:f8:ff:66:cd:3b:04:63:dd:92:12:0b:47:7f:f6:88:95:
         41:29:23:5a:2e:3e:97:36:8b:13:29:89:5d:ac:82:68:0f:05:
         59:1f:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:42:49 2026 by rpki-client