Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/183f5a7e-3865-4a07-aa58-c4ce18cbe539.roa
File:                     183f5a7e-3865-4a07-aa58-c4ce18cbe539.roa (raw, json)
Hash identifier:          0LMwNZIq87Ba01wQbDZ0BMAOUX6w69+QoPxc1LaqsR8=
Subject key identifier:   1E:54:97:52:F9:DA:D6:81:64:39:FB:24:16:0E:D4:49:29:87:39:98
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       4B68FD0EB7478849ADD03FAF49E537371286B4C0
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/183f5a7e-3865-4a07-aa58-c4ce18cbe539.roa
Signing time:             Fri 03 Apr 2026 23:06:53 +0000
ROA not before:           Fri 03 Apr 2026 23:06:53 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.98.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:68:fd:0e:b7:47:88:49:ad:d0:3f:af:49:e5:37:37:12:86:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Apr  3 23:06:53 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=e147764ffc7c550afa6e12c083ded8c66a9ec7f6d94b652274bf909fa3b25e39, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ea:dc:34:14:73:e2:c8:e4:82:da:e6:7a:69:
                    ca:9c:46:43:5b:e9:fd:47:de:e2:4a:42:fc:65:cf:
                    50:43:ad:25:c3:97:30:36:69:b7:35:75:8c:c9:8e:
                    ca:2f:a0:11:07:90:8a:c2:6b:a2:24:42:59:ef:3b:
                    88:76:59:e6:42:2c:25:39:11:b6:1e:0c:d7:98:17:
                    44:d9:65:05:5b:5f:75:dd:7d:85:05:16:3b:1f:67:
                    df:c3:66:3a:c3:0e:40:28:43:dc:21:0f:5b:1f:98:
                    be:83:c6:27:34:b8:50:61:81:60:bb:1f:5b:49:8c:
                    cd:20:22:6d:a6:36:44:d1:26:bf:60:88:e3:3b:4e:
                    70:22:8c:1b:94:3f:6f:c3:bc:b0:1e:7b:f3:d7:1f:
                    94:5c:6c:46:21:84:96:c7:bd:33:ab:c0:2b:e9:58:
                    9f:bf:03:26:1d:5d:92:38:93:d9:8d:32:e1:e0:1e:
                    dc:a2:dd:b4:92:5f:99:52:e3:18:6f:a6:02:ba:d1:
                    77:11:1c:d2:c5:36:66:49:7e:49:fa:fb:c8:7f:1f:
                    d2:92:3b:55:9e:0a:41:35:66:f8:01:8c:a0:dd:fe:
                    f0:8c:27:5a:0e:22:ad:3a:30:0c:35:fa:da:3c:71:
                    37:b1:66:a4:b5:cd:ce:71:4d:4d:3a:85:62:34:50:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:54:97:52:F9:DA:D6:81:64:39:FB:24:16:0E:D4:49:29:87:39:98
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/183f5a7e-3865-4a07-aa58-c4ce18cbe539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.98.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:46:16:20:2b:06:84:97:53:dc:0d:fe:0f:de:ed:df:2e:45:
         82:eb:f2:eb:76:2e:da:e8:83:c2:6a:9c:d7:52:2d:ea:c9:de:
         e8:95:30:ef:20:2d:59:97:f3:02:a5:59:72:6f:e3:b4:ee:57:
         37:d1:39:b8:76:4d:25:a4:a6:44:36:f9:ff:81:7c:20:0b:d0:
         c5:19:e0:e8:31:40:38:4f:fd:92:c7:66:01:78:7f:58:54:de:
         fb:da:ba:9d:1f:a1:ea:97:57:82:c5:f9:5a:55:ec:78:09:43:
         c6:54:2b:50:33:f1:c5:a4:4f:eb:4c:31:b3:61:1a:38:60:d7:
         85:f7:0f:84:8b:fa:17:98:81:85:1c:1b:a0:81:49:fb:5e:ec:
         ae:ee:82:c7:9b:09:73:3b:42:b1:44:07:0a:bd:b8:76:2f:82:
         db:c7:af:83:7e:d8:db:b8:09:03:ca:6d:b8:69:56:44:52:82:
         42:af:af:44:e2:a6:d4:2e:02:46:18:63:b0:6e:2b:fa:dc:bb:
         22:1e:af:73:fb:e2:2a:fd:03:f3:14:56:72:03:b4:a9:db:87:
         8c:d2:49:8b:b1:03:85:a8:a7:28:8a:62:66:76:19:9d:cf:8b:
         de:12:50:60:a5:97:ff:c2:83:6c:1d:19:7e:ea:93:b8:10:91:
         6b:76:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:05:58 2026 by rpki-client