Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/06068fda-8886-4835-9c88-81ea15fda48e.roa
File:                     06068fda-8886-4835-9c88-81ea15fda48e.roa (raw, json)
Hash identifier:          YTeE2SWM24calBSZY9zpO9lXPQ4MfyggnBVJ55IEa3g=
Subject key identifier:   56:75:21:3C:BB:81:9A:48:94:4D:A3:4E:9C:20:E7:4B:EF:6F:66:2C
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       64FA02CA8C82006F63E2F8DE0B027A3F1990E986
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/06068fda-8886-4835-9c88-81ea15fda48e.roa
Signing time:             Fri 07 Aug 2026 04:00:08 +0000
ROA not before:           Fri 07 Aug 2026 04:00:08 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     801
IP address blocks:        35.96.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fa:02:ca:8c:82:00:6f:63:e2:f8:de:0b:02:7a:3f:19:90:e9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug  7 04:00:08 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=9b808443265a1b4c043c90e70524f5449bc37f19436511c0d313e5d3c720e505, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:48:00:a4:3d:65:b7:45:2f:c6:89:7c:dd:
                    90:f6:38:68:a3:d2:09:90:0b:2d:af:9f:67:95:7a:
                    b4:54:af:9a:60:48:19:b7:27:0c:2e:20:5a:c7:4b:
                    6a:a5:ca:46:23:7c:af:71:b4:2e:41:a0:65:86:da:
                    ee:06:6e:d7:ed:8e:40:b1:c3:d4:c3:f9:3f:76:b3:
                    8c:5a:94:ab:08:b0:d1:c8:f1:3e:53:5d:bd:85:6f:
                    83:37:7d:4a:0e:e5:c5:05:29:af:81:61:5f:72:8f:
                    2a:56:29:2b:e1:61:8a:45:c6:8c:e7:b6:d8:08:c9:
                    e5:e0:f8:8c:3f:46:18:6c:d7:06:44:2c:9b:07:63:
                    59:7d:e4:98:4f:72:6a:12:38:93:73:8a:5e:31:f8:
                    7b:2b:87:68:ee:05:f2:ea:8f:a2:32:1f:d6:a0:f0:
                    b5:9f:ba:dc:9a:b9:4f:f4:44:af:0d:bc:af:77:25:
                    7c:8f:a8:43:29:ac:2d:99:b3:c1:13:c4:4d:03:ac:
                    6f:43:83:39:66:94:dc:62:59:c1:08:d1:47:cc:41:
                    af:b2:fb:1d:d0:73:83:8e:19:79:bf:df:c3:0e:57:
                    b9:10:5d:08:bd:96:be:2a:70:ab:b4:78:9b:0c:31:
                    ad:d3:78:f4:da:fc:e6:ba:e1:d7:77:83:7b:36:13:
                    19:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:75:21:3C:BB:81:9A:48:94:4D:A3:4E:9C:20:E7:4B:EF:6F:66:2C
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/06068fda-8886-4835-9c88-81ea15fda48e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:c8:59:ed:3f:07:c1:22:26:0d:09:f7:b2:fa:cd:dd:77:c0:
         23:ec:23:6a:b5:39:32:a9:ef:03:5e:d3:04:7c:52:2e:ed:8b:
         ac:f8:47:b9:50:9c:50:91:89:9b:c5:41:31:b8:c2:4f:ef:22:
         02:60:a4:c1:70:ff:c4:ff:08:ac:c5:c0:51:5b:18:59:18:0f:
         d6:dd:ad:1a:88:db:dd:62:56:7d:87:1e:69:70:08:49:0d:83:
         88:22:91:d2:80:40:c0:0d:66:8b:77:62:76:56:90:97:af:4c:
         96:88:34:ea:6d:a3:92:bd:c4:63:f2:93:a3:b2:30:7b:37:2e:
         2c:45:99:a4:82:9a:5b:bf:90:cc:54:e1:41:02:df:eb:c0:30:
         30:ea:e2:13:33:a5:25:7b:5d:0b:7a:69:3c:2c:62:db:50:5f:
         a7:26:a3:fa:d4:b7:60:f2:38:26:d8:c1:45:36:5a:21:31:ca:
         ef:31:ec:d2:29:fc:a6:79:76:e6:dd:6e:19:40:22:2c:41:2b:
         c7:51:55:3d:07:46:ff:b4:73:55:a5:43:42:1b:ee:19:60:82:
         ce:0a:cf:8c:c2:01:4c:ed:e6:9c:b9:79:05:d5:d9:87:a4:e0:
         cc:9a:a9:ad:88:c9:56:d5:3a:25:95:34:2d:96:96:c5:03:2c:
         30:e9:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:42:34 2026 by rpki-client