Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e392acd-3939-411f-89fc-7683b52e5911.roa
File:                     0e392acd-3939-411f-89fc-7683b52e5911.roa (raw, json)
Hash identifier:          zVZ++tpnssVEboYxqzSKgNhYgF8C4xbRDLal19L6Tes=
Subject key identifier:   F9:4E:C7:7C:AC:35:A2:1D:C2:7C:6A:C9:CD:6F:62:C4:F9:1C:D4:6D
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       6777593AD1901FD440E238029C8D0E58567110E8
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e392acd-3939-411f-89fc-7683b52e5911.roa
Signing time:             Fri 31 Jul 2026 01:50:10 +0000
ROA not before:           Fri 31 Jul 2026 01:50:10 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:77:59:3a:d1:90:1f:d4:40:e2:38:02:9c:8d:0e:58:56:71:10:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jul 31 01:50:10 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=9d186311ad66b17f87e3013513a2d1feeaf47aef99fc3c48aee138cb90ea676d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fd:81:9a:70:7c:f2:dc:bd:bd:45:e0:6d:cb:
                    b2:52:75:6e:db:af:0d:55:49:2d:a1:95:f3:9e:67:
                    f5:41:cf:25:98:b7:99:08:b5:34:88:b8:eb:2c:e7:
                    e7:8b:fa:70:b5:f0:e1:f6:55:d5:a3:dd:31:d1:2c:
                    1c:b4:91:be:86:95:53:41:3d:86:2e:e3:76:b3:12:
                    02:3a:30:88:0c:73:8c:3e:da:32:95:d6:fc:d7:98:
                    bc:62:26:a0:b9:a1:41:d4:89:b1:69:f4:40:b5:2b:
                    02:c2:b8:3e:36:38:93:4c:ef:24:5c:39:b0:2f:26:
                    33:a7:68:2d:60:16:5f:69:b1:a3:d9:c0:0a:fb:a1:
                    84:ed:a9:f7:ad:23:13:69:dd:92:44:3b:74:34:ac:
                    a4:2d:08:3d:95:44:a4:2a:59:54:67:18:e9:25:4d:
                    b4:40:f7:2a:64:46:38:ab:b2:b1:b4:9b:93:a8:9b:
                    b8:da:25:c5:64:c0:bc:8a:d1:03:6d:41:51:f6:25:
                    a1:1f:d8:5d:e8:51:33:8f:dd:81:24:aa:13:e5:f7:
                    9f:1a:eb:84:08:d5:d8:4b:b8:b3:83:43:87:97:26:
                    99:1b:de:b3:24:2e:14:0f:c2:37:50:93:c6:3a:b2:
                    55:6e:9c:61:3a:fd:93:95:b5:ca:76:ad:92:dd:40:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4E:C7:7C:AC:35:A2:1D:C2:7C:6A:C9:CD:6F:62:C4:F9:1C:D4:6D
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e392acd-3939-411f-89fc-7683b52e5911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:3c:8d:15:97:4b:48:96:ae:04:a0:e5:76:e5:f5:94:5b:ab:
         5a:2e:f3:14:90:f6:1b:c6:28:cc:98:7b:6e:a0:de:58:8c:29:
         7d:63:5f:9a:b9:0b:63:48:97:78:82:22:f5:3d:d3:f9:97:f0:
         cf:ba:5b:64:85:f2:75:bb:fe:0a:e5:fe:d1:05:59:01:b4:87:
         83:65:7e:01:96:c1:cd:ab:0a:0a:35:24:9a:2a:4f:8f:5f:a9:
         e2:2c:81:8f:f2:b2:59:db:32:d2:04:40:d2:dc:2d:5b:d3:15:
         29:1a:df:dd:63:8a:0a:56:af:b7:a8:ca:fc:06:ed:96:11:bc:
         89:81:95:97:ea:73:d2:ac:86:c2:c2:1f:6f:34:ba:36:bb:27:
         51:2c:66:a4:23:fb:38:7d:9d:b8:3e:91:a5:ec:fa:ed:4c:69:
         75:ad:3a:7a:3c:ba:6a:5d:6f:8e:bf:f0:ae:4c:b8:78:63:1f:
         47:dd:6d:e6:0d:95:0b:f7:7e:eb:74:77:6f:90:fb:58:ea:4a:
         b1:db:ad:e5:4e:7d:7b:5f:f9:2e:00:13:81:ba:61:28:c6:68:
         32:cb:db:bc:de:15:e5:47:7e:32:9f:e5:ea:c1:2a:76:54:3f:
         a0:65:29:b7:90:41:83:59:ef:fe:0b:96:b7:87:0b:fb:3c:99:
         5a:e5:fb:d6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZ3dZOtGQH9RA4jgCnI0OWFZxEOgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzMxMDE1MDEwWhcNMjYxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZDE4NjMxMWFkNjZiMTdmODdlMzAxMzUxM2EyZDFmZWVh
ZjQ3YWVmOTlmYzNjNDhhZWUxMzhjYjkwZWE2NzZkMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCM/YGacHzy3L29ReBty7JSdW7brw1VSS2hlfOeZ/VBzyWY
t5kItTSIuOss5+eL+nC18OH2VdWj3THRLBy0kb6GlVNBPYYu43azEgI6MIgMc4w+
2jKV1vzXmLxiJqC5oUHUibFp9EC1KwLCuD42OJNM7yRcObAvJjOnaC1gFl9psaPZ
wAr7oYTtqfetIxNp3ZJEO3Q0rKQtCD2VRKQqWVRnGOklTbRA9ypkRjirsrG0m5Oo
m7jaJcVkwLyK0QNtQVH2JaEf2F3oUTOP3YEkqhPl958a64QI1dhLuLODQ4eXJpkb
3rMkLhQPwjdQk8Y6slVunGE6/ZOVtcp2rZLdQCAHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+U7HfKw1oh3CfGrJzW9ixPkc1G0wHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzBlMzkyYWNkLTM5MzktNDExZi04OWZjLTc2ODNiNTJlNTkxMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYDMwDQYJKoZIhvcNAQELBQADggEBAEU8jRWXS0iWrgSg5Xbl9ZRbq1ou
8xSQ9hvGKMyYe26g3liMKX1jX5q5C2NIl3iCIvU90/mX8M+6W2SF8nW7/grl/tEF
WQG0h4NlfgGWwc2rCgo1JJoqT49fqeIsgY/yslnbMtIEQNLcLVvTFSka391jigpW
r7eoyvwG7ZYRvImBlZfqc9KshsLCH280uja7J1EsZqQj+zh9nbg+kaXs+u1MaXWt
Ono8umpdb46/8K5MuHhjH0fdbeYNlQv3fut0d2+Q+1jqSrHbreVOfXtf+S4AE4G6
YSjGaDLL27zeFeVHfjKf5erBKnZUP6BlKbeQQYNZ7/4LlreHC/s8mVrl+9Y=
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:16:00 2026 by rpki-client