Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f5245f4-4d87-41a1-ab55-898a8997c2d8.roa
File:                     5f5245f4-4d87-41a1-ab55-898a8997c2d8.roa (raw, json)
Hash identifier:          HhW2X3YmdagLk8KPNfUjfhFaCBPD9Uvo38BN0dCcw/I=
Subject key identifier:   23:B9:AC:C3:74:59:E5:65:9F:C7:A4:D6:9C:3A:99:05:5D:EB:8A:E5
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       754E6D606FC76461EC7477D4132C1AADAFAF8620
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f5245f4-4d87-41a1-ab55-898a8997c2d8.roa
Signing time:             Fri 31 Jul 2026 01:50:07 +0000
ROA not before:           Fri 31 Jul 2026 01:50:07 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4e:6d:60:6f:c7:64:61:ec:74:77:d4:13:2c:1a:ad:af:af:86:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jul 31 01:50:07 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=b39b9b40c7ded7a38b4883c4b868b7b9ecaa62b3f067807352ccd202bcb9a7d8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:45:36:5b:e2:af:3c:f5:89:0f:17:ee:79:d3:
                    ae:9d:07:62:d2:d8:b1:0b:3a:82:7e:d0:be:11:43:
                    fd:69:e0:86:d1:db:72:da:a6:d9:43:41:59:9d:e3:
                    29:68:17:b7:fa:f7:88:a3:32:ac:33:62:7d:4e:a4:
                    ea:8a:71:1f:ca:fc:bd:dc:c7:40:22:16:f7:41:5c:
                    1b:37:c6:58:cf:c5:27:0d:0e:f0:c2:c1:cc:8a:2a:
                    38:d4:ab:4f:f0:c0:f2:50:68:07:45:1c:9e:04:61:
                    73:d7:43:a4:3c:b5:9b:ee:54:c8:20:ed:e3:89:81:
                    76:c9:13:3e:13:92:9a:e4:c7:d9:b6:bc:a2:1a:8a:
                    f5:f7:6e:18:34:df:71:ee:64:94:8d:d7:08:6c:2e:
                    1f:8d:97:c0:8c:e4:2a:2b:3b:09:2c:24:f6:4d:de:
                    03:47:48:3b:72:54:cd:d8:10:eb:3f:09:65:85:92:
                    82:3f:0c:a9:28:cc:ca:f6:d7:64:72:3d:b6:70:e0:
                    b8:1e:b7:4e:4f:98:32:f5:e6:eb:29:92:c4:64:34:
                    fe:3f:82:ac:21:77:8e:ed:f0:d1:63:6a:b8:d7:1e:
                    09:2c:d4:6c:6e:49:0c:a3:21:86:69:85:42:8e:15:
                    a9:32:7b:ea:bc:5d:04:b7:74:f6:77:3b:09:c2:3a:
                    24:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B9:AC:C3:74:59:E5:65:9F:C7:A4:D6:9C:3A:99:05:5D:EB:8A:E5
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f5245f4-4d87-41a1-ab55-898a8997c2d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f6:ad:fd:10:39:d5:79:aa:cc:ca:8e:68:70:dd:bc:25:ad:
         93:db:fe:28:b6:96:31:61:26:52:51:d8:3b:93:49:0d:27:65:
         ab:12:07:1c:b6:7b:66:33:f5:f0:ce:61:ca:1c:5c:85:88:c8:
         d1:db:9f:63:8f:aa:f1:5e:21:de:a1:d4:83:35:b4:f4:3e:ef:
         b2:16:90:81:50:ae:cd:ee:88:13:55:41:fe:f0:de:94:db:73:
         54:6a:df:31:18:9d:05:ad:75:4d:db:31:6d:10:66:8a:a9:8e:
         0e:21:fd:de:63:1e:0e:ca:1a:22:39:4f:04:81:7b:43:32:df:
         dc:35:fc:63:69:f9:ce:73:53:bb:bc:f6:ed:5b:9d:ef:2f:ba:
         76:4c:ae:33:aa:40:5e:1d:df:e5:1b:6b:a8:d0:00:4c:1d:e5:
         b7:95:05:14:5f:6b:72:61:4b:ea:d2:d8:96:d7:54:ae:0f:6b:
         94:29:9c:0a:cd:24:42:40:3e:ce:0a:aa:d4:47:0f:b1:cf:f8:
         cc:a3:b9:d7:b7:e2:eb:3b:c5:2e:aa:52:1a:fa:ee:f0:f4:7d:
         34:ee:33:92:6f:54:ef:aa:9e:79:17:59:a7:c6:2e:1f:2d:e6:
         7f:25:3b:8a:44:5f:b2:f6:74:22:3c:33:14:1e:84:e8:cc:25:
         e8:6c:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:15:49 2026 by rpki-client