Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
File:                     0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa (raw, json)
Hash identifier:          KKdNuj8HmreHbu1wkGNBU/VxoGgnF8HEQPk5DCcUsYY=
Subject key identifier:   B2:07:BC:8C:1E:76:53:E3:BB:E8:C5:88:D6:3C:49:C8:99:4E:32:66
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       11624DDF0AD2FC357069691D7DEAE2B612665AC2
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
Signing time:             Fri 07 Aug 2026 04:00:21 +0000
ROA not before:           Fri 07 Aug 2026 04:00:21 +0000
ROA not after:            Thu 05 Nov 2026 23:59:59 +0000
asID:                     801
IP address blocks:        35.96.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:62:4d:df:0a:d2:fc:35:70:69:69:1d:7d:ea:e2:b6:12:66:5a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug  7 04:00:21 2026 GMT
            Not After : Nov  5 23:59:59 2026 GMT
        Subject: serialNumber=30db378e4a99dda84dc7c2d2de249db916c479df4947dfc344ad8c768950c565, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b3:c4:a7:84:8d:07:cc:73:3b:34:00:23:ba:
                    e7:db:38:01:17:aa:35:10:37:b1:65:cb:85:8c:59:
                    bb:81:1b:c5:75:e8:f6:49:3f:b7:04:d1:6b:ad:f6:
                    f7:3b:52:25:27:26:c0:ef:9c:60:d5:5b:f9:99:f5:
                    b3:0f:57:9b:2e:33:7c:92:b4:f4:0e:85:84:9f:22:
                    c3:1f:b7:97:5e:ae:37:bd:1e:51:1d:57:9d:d1:e2:
                    12:65:bc:43:8e:8b:e3:53:4e:ff:4a:fb:82:9a:f8:
                    d7:31:da:de:c5:3a:4a:ed:f5:5a:f6:13:b8:e2:d3:
                    f2:c4:20:18:45:15:bc:6c:ca:ee:d1:16:b9:98:f5:
                    53:95:1b:ea:b4:c0:a7:b1:c0:e5:3b:37:fa:72:e9:
                    c6:98:45:61:7f:73:90:5e:e2:b8:4b:b3:b0:75:12:
                    06:5b:c5:98:6a:25:e4:e3:21:f0:e5:24:02:54:ec:
                    33:23:31:e8:f9:14:68:e1:c1:b5:8e:8d:f4:1d:16:
                    46:5d:9f:fd:3b:60:41:f1:0a:0f:b5:b1:dc:9e:b8:
                    0b:c9:5e:ab:b0:58:6d:8e:c2:fa:61:32:50:38:f4:
                    21:84:98:74:57:3f:be:f8:a2:e1:e4:45:ff:0b:2a:
                    61:81:f5:25:74:0b:76:a9:99:71:09:6e:2d:3a:7b:
                    03:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:07:BC:8C:1E:76:53:E3:BB:E8:C5:88:D6:3C:49:C8:99:4E:32:66
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:fa:ee:a6:e6:fc:0d:2b:57:b4:7e:d3:61:c1:43:4c:2e:24:
         92:5c:ef:8b:98:56:9e:ae:6b:df:9c:1b:f2:91:cf:27:fa:5c:
         8f:58:25:a3:72:99:b4:2a:11:45:29:cf:0c:d8:48:0e:86:69:
         70:5b:a2:9d:99:65:17:76:04:58:f5:4d:c5:1e:06:4d:0c:d1:
         fb:e8:75:ea:06:70:95:44:8e:3c:5b:4a:49:e5:bd:e3:ef:fe:
         7f:fc:b6:2d:52:97:63:d3:b8:48:c6:d3:20:a6:74:e8:2f:0f:
         3b:da:58:67:63:20:23:8b:65:4a:79:7a:bd:68:47:29:55:7c:
         b4:cd:b4:4a:61:f7:24:ee:34:32:79:09:f6:a9:29:74:1c:16:
         16:a2:a9:0b:a4:30:53:19:d0:8b:be:a3:ab:dd:f9:91:6e:e5:
         7b:f3:3a:3e:f4:ff:42:65:4d:71:7a:1d:f1:b0:5c:a2:e3:6e:
         8f:79:62:31:48:37:05:f4:04:28:9e:48:dd:a1:71:74:af:cc:
         b7:91:2f:14:27:e7:b7:5e:8e:3c:25:ff:75:e9:58:e0:45:97:
         08:93:7f:84:40:19:a8:14:51:88:00:11:f9:f8:67:ce:fc:2a:
         15:5a:81:e9:23:39:97:8a:7c:f4:d6:f0:80:01:83:8b:b7:e8:
         01:6a:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:20 2026 by rpki-client