Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5c5f6769-1bef-4cc6-bc36-e0bb2dde0785.roa
File:                     5c5f6769-1bef-4cc6-bc36-e0bb2dde0785.roa (raw, json)
Hash identifier:          wjdLjLL71U452OwzO7dspFJmCKkHPV8/r2pTGJo1I8Q=
Subject key identifier:   1E:97:7F:3A:B0:ED:C0:F5:E2:58:05:25:26:BF:AB:0D:17:7C:B0:D0
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       5F8CC53486ED6380F7FEBD62BFD62F9BAF4ECEFD
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5c5f6769-1bef-4cc6-bc36-e0bb2dde0785.roa
Signing time:             Wed 05 Aug 2026 01:50:22 +0000
ROA not before:           Wed 05 Aug 2026 01:50:22 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:8c:c5:34:86:ed:63:80:f7:fe:bd:62:bf:d6:2f:9b:af:4e:ce:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug  5 01:50:22 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=3cc4f8b550fe99c279d61b6806da66b83cd42be1e6961ac113bc67b39495a40f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:39:30:d3:cb:88:38:43:f6:1c:89:6b:a8:
                    d1:ba:0e:37:0a:21:e5:ee:6c:94:9c:45:d6:60:5b:
                    17:74:40:4b:eb:86:92:8f:69:78:56:2d:19:81:49:
                    6e:a7:c7:90:f1:08:c4:21:34:da:43:47:d2:23:cb:
                    26:bb:04:ab:82:5c:9f:4b:79:5e:15:1d:fb:40:f3:
                    65:15:9d:7d:a0:ee:7d:9c:dc:86:dc:ea:41:fb:41:
                    8b:6d:37:72:47:89:fe:55:e3:f0:01:a4:02:20:1f:
                    84:c3:36:d0:a5:b3:1a:ad:b4:bb:e2:89:fb:7c:dc:
                    5c:ef:3c:52:40:bb:dd:7b:59:1d:3d:30:fb:c4:b3:
                    34:56:e5:33:96:65:bd:d4:b6:49:ee:2d:0b:92:1e:
                    1e:25:c0:2f:36:3d:2f:40:5d:59:f5:da:e0:12:aa:
                    1c:e7:84:b2:16:18:fa:73:e3:c5:21:b0:e5:c8:5b:
                    1f:a4:b6:4a:40:be:c6:7b:72:37:ae:ab:05:5f:fa:
                    84:76:a8:78:51:b7:21:63:ee:df:b7:59:7f:05:98:
                    82:b7:01:d2:23:49:6b:cb:0d:52:b5:7a:99:73:04:
                    48:55:cc:a3:ee:4e:0e:96:20:48:c5:a4:eb:f8:28:
                    a7:06:6b:38:b0:ee:1d:5a:8d:21:06:98:f0:86:8d:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:97:7F:3A:B0:ED:C0:F5:E2:58:05:25:26:BF:AB:0D:17:7C:B0:D0
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5c5f6769-1bef-4cc6-bc36-e0bb2dde0785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:a6:c6:61:f7:75:70:92:32:4c:9a:c4:3b:2d:d1:4f:8f:c1:
         d3:5b:21:e5:26:e1:ce:b6:20:66:68:05:4e:0f:ad:e8:83:bd:
         30:d1:25:d9:43:de:5e:af:40:d3:8d:cb:63:d7:bd:73:7a:34:
         87:4b:28:1b:d5:d2:1a:b0:b9:6f:6b:ab:ff:19:2d:af:49:45:
         5a:a1:5f:02:f0:c9:b5:2c:33:08:e4:9b:7c:38:b9:ab:83:25:
         0a:7f:1b:ee:6b:e2:34:72:46:84:1b:f3:77:35:87:32:06:36:
         c2:18:1e:3e:a0:61:e2:be:78:b2:b4:5b:51:14:13:ed:ef:0b:
         b2:e3:46:fb:80:e1:c9:fa:63:77:9d:38:f7:09:5f:c2:ae:cc:
         b8:72:af:fb:df:4a:2b:48:15:1d:11:0c:c6:49:21:5e:5c:4e:
         2e:0b:67:2d:bf:36:94:38:1a:66:67:55:c7:d9:6e:a1:83:8b:
         59:1b:33:6a:c3:c5:e1:17:a1:d1:73:c7:a4:66:bc:cc:14:db:
         95:7d:c4:42:4f:f1:41:4a:77:8a:29:7f:34:f0:ce:42:0f:1a:
         05:94:81:83:94:59:6c:55:f8:17:eb:22:51:c8:0a:7a:f9:6a:
         f0:5b:8b:27:b6:10:aa:02:08:44:57:93:11:a7:7d:a8:16:1e:
         80:ed:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:35 2026 by rpki-client