Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/738f6bbb-116a-40cf-85ee-01c2bf067ba4.roa
File:                     738f6bbb-116a-40cf-85ee-01c2bf067ba4.roa (raw, json)
Hash identifier:          OFNYcr6yo1G8cFAaGRS46reOBClWH4ElsIVx8s7bfDw=
Subject key identifier:   BC:ED:C6:DA:65:0A:2B:52:1F:CB:F9:3D:96:85:AA:8A:39:E7:96:35
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       222DA44461FAAA1E5C8B9B222417896A1E38E992
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/738f6bbb-116a-40cf-85ee-01c2bf067ba4.roa
Signing time:             Tue 19 Aug 2025 16:40:49 +0000
ROA not before:           Tue 19 Aug 2025 16:40:49 +0000
ROA not after:            Tue 23 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:2d:a4:44:61:fa:aa:1e:5c:8b:9b:22:24:17:89:6a:1e:38:e9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug 19 16:40:49 2025 GMT
            Not After : Sep 23 23:59:59 2025 GMT
        Subject: serialNumber=e3c69b76241e313021b6195add00703823611c39c8b6d49712e83ea1691fc815, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:a4:62:0d:a8:a0:e2:12:4b:cf:2c:2b:f0:
                    a5:c8:63:c7:a7:81:81:b4:ea:cc:cc:c9:34:a1:f4:
                    8f:b8:7c:92:74:dc:d7:32:59:64:4f:d1:c1:20:e6:
                    f6:11:f3:32:2b:75:5a:b3:df:b9:c2:13:78:a6:d8:
                    0b:4d:0c:02:01:07:84:6c:e1:58:a6:a0:f9:8f:21:
                    16:d2:b7:ca:63:ce:71:97:0c:ce:cb:3f:60:3b:58:
                    52:65:e4:3c:a5:eb:9c:d3:fa:28:c6:85:0f:b3:a7:
                    b7:8b:d8:e1:99:f7:e3:6c:3a:46:36:21:31:0b:54:
                    4f:ca:99:27:62:bf:29:10:73:03:42:2a:18:67:68:
                    14:98:ed:e9:69:13:51:06:78:c2:51:07:80:e9:af:
                    5d:e5:04:2c:7d:7c:a4:55:f0:12:2a:a8:2e:83:e2:
                    e9:17:01:29:c6:8a:a5:82:5d:aa:2c:ec:98:f5:68:
                    c2:6d:6d:57:88:f3:91:40:c3:8b:69:61:f2:7c:7e:
                    62:a1:ec:5b:6e:3e:e5:5d:fa:f1:a4:c5:6d:07:82:
                    1b:e6:20:b9:0c:2e:e6:06:0a:d7:b6:7b:ed:93:1c:
                    b7:25:3b:d1:41:96:03:de:53:59:41:d6:46:7b:5a:
                    e9:d2:d8:71:f0:3b:42:96:23:b9:c1:b7:af:65:9f:
                    79:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:ED:C6:DA:65:0A:2B:52:1F:CB:F9:3D:96:85:AA:8A:39:E7:96:35
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/738f6bbb-116a-40cf-85ee-01c2bf067ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:08:01:d8:cd:76:8d:ab:ee:12:bb:96:52:ff:d4:6d:05:1c:
         0d:bb:17:27:c8:98:6c:f8:81:8c:bb:f8:eb:bd:7f:a3:5b:b4:
         17:10:55:4d:64:b4:2a:1a:e9:9f:89:07:a8:63:67:69:c4:19:
         0b:08:50:52:8b:e6:95:77:ea:3f:42:9e:2b:7d:93:86:fb:b6:
         1c:03:3c:18:e8:b2:62:0e:30:fe:83:01:da:96:fd:31:0d:f4:
         93:72:95:0c:54:24:63:05:0f:53:ec:ee:65:e2:ff:83:d0:7f:
         d6:33:11:21:76:c3:7b:2a:a0:5b:90:e1:59:35:ae:18:64:b5:
         21:66:a9:30:e7:bc:d8:c6:f9:ca:86:2e:91:b7:6d:a2:0a:fa:
         2e:cb:77:ff:8e:64:78:ec:1c:3c:fe:57:15:b9:cb:e1:f2:c1:
         cf:8d:96:19:4b:ee:50:cc:af:d4:c6:ce:53:bf:6b:7f:17:53:
         44:9f:70:67:0d:9d:d8:73:c4:c7:6f:34:1c:98:5d:eb:40:63:
         62:43:32:5f:ef:34:81:98:55:0d:0b:5e:f8:87:ea:e4:cd:58:
         4d:28:a5:19:d9:42:94:17:0d:9d:12:85:be:18:7d:86:a7:54:
         ec:d4:48:38:49:06:e4:7b:aa:1c:d2:54:cc:04:d2:78:2d:e4:
         e8:1c:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:16 2025 by rpki-client