Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b2d563-9558-42a3-af91-c49abf2fc92c.roa
File:                     00b2d563-9558-42a3-af91-c49abf2fc92c.roa (raw, json)
Hash identifier:          Z07ba2md7fa9A0GE6ZZBq1mbbvb8ZxCHyWCxlxrCH/o=
Subject key identifier:   E3:8C:71:8A:76:8E:E1:BE:D9:72:9B:AA:6A:1E:63:25:B3:AC:CD:BC
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       79EB9E8018801CCFD64BE4693A95C9D1BC91A6FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b2d563-9558-42a3-af91-c49abf2fc92c.roa
Signing time:             Thu 16 Jul 2026 00:20:34 +0000
ROA not before:           Thu 16 Jul 2026 00:20:34 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        67.35.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:eb:9e:80:18:80:1c:cf:d6:4b:e4:69:3a:95:c9:d1:bc:91:a6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 16 00:20:34 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=b003e7a57d5c9ebb6d9f620847e842b8bdbafc560e315560ecd1a4b80ef36580, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:50:bd:55:50:37:1f:9f:f9:be:73:00:40:ce:
                    33:c1:d5:e5:22:c1:44:aa:b5:54:4c:cd:a3:5c:54:
                    0a:6a:5e:1c:cd:af:ae:83:9c:19:b2:04:39:3c:87:
                    92:8b:3e:9a:e0:96:aa:22:82:75:44:57:53:af:12:
                    2c:2a:cb:2a:13:97:c6:45:51:d3:80:43:d0:60:63:
                    2b:7f:4b:ea:70:c9:d8:89:bb:a9:ab:56:f9:f4:1e:
                    4e:ff:13:b3:96:7c:dc:32:f7:4a:80:0e:37:c7:aa:
                    d3:54:d5:92:80:64:81:3d:37:04:f4:34:a8:d3:43:
                    ef:ea:88:34:e5:74:71:df:bf:d9:75:ad:33:aa:dc:
                    fd:44:49:c8:44:27:17:2f:12:2c:58:8d:8e:61:e8:
                    66:11:1c:4f:8c:44:83:8f:1d:34:0c:aa:09:d8:1c:
                    7a:20:eb:57:48:22:19:d7:bc:5c:93:e4:48:79:29:
                    3e:b8:b4:99:bd:67:0c:1f:09:fd:6b:63:5e:fe:63:
                    87:b5:04:92:96:34:bd:b1:c6:0f:1b:95:92:db:f7:
                    71:72:c0:32:dc:33:ea:f0:5a:87:a5:06:f6:16:11:
                    c0:f7:79:5f:7e:d0:30:ef:a1:4e:cd:bb:6d:5b:b4:
                    9e:b1:ba:2f:bb:b5:19:73:27:27:eb:2c:e4:14:63:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8C:71:8A:76:8E:E1:BE:D9:72:9B:AA:6A:1E:63:25:B3:AC:CD:BC
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b2d563-9558-42a3-af91-c49abf2fc92c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.35.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7d:bd:72:b1:32:43:1f:54:43:db:8b:0e:a4:be:a3:55:a8:d9:
         20:88:fd:f5:0e:9a:09:cf:79:df:a4:ac:07:b9:4f:ac:b7:91:
         b7:33:67:44:08:7b:59:f0:f0:c8:83:bf:ee:40:38:7b:3c:71:
         61:ca:4f:0a:8c:d6:b4:89:a2:cf:9b:a2:77:09:6f:a8:bf:5c:
         fe:31:74:14:76:61:7a:ef:08:d9:67:b9:f6:7c:fc:0e:db:0b:
         b1:a3:93:bd:99:40:ac:7a:8c:b4:d7:14:62:2b:fb:3c:59:00:
         74:79:22:89:c2:58:d5:0c:b4:89:ad:05:be:ac:ae:29:57:0b:
         b2:99:19:df:d0:af:a0:bc:65:13:12:bd:58:7d:2c:28:29:ff:
         f0:e2:94:2d:a4:a5:d1:40:22:01:86:2f:9a:a0:57:88:0c:70:
         69:c5:d4:6d:28:6b:30:ee:df:d9:59:39:47:8f:11:2d:dc:28:
         8d:21:1b:41:d0:6f:03:04:54:dd:45:0a:3f:96:5b:b7:d5:9f:
         77:bb:01:f9:59:4a:65:b0:64:7d:c6:0c:15:92:bd:84:7b:63:
         4d:f2:39:00:78:07:7c:d2:d9:1b:38:aa:72:e5:97:7b:54:82:
         5f:aa:ee:f0:32:0d:2f:65:82:66:81:f7:f8:59:64:61:4c:45:
         3e:93:33:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:04 2026 by rpki-client