Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e27e6217-4842-4b88-9d80-7bf4ac4b7ac9.roa
File:                     e27e6217-4842-4b88-9d80-7bf4ac4b7ac9.roa (raw, json)
Hash identifier:          1TOZ5zKrTzgVtq8mTAxNd6ZBnNhbYzvUi8eniiJG+xc=
Subject key identifier:   69:7B:7F:7B:63:44:DA:D9:64:04:76:B0:02:60:5D:0A:2B:2D:79:8F
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       0D56E06B08646B708FE7720FD0416DE91B7B880F
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e27e6217-4842-4b88-9d80-7bf4ac4b7ac9.roa
Signing time:             Mon 03 Aug 2026 00:10:06 +0000
ROA not before:           Mon 03 Aug 2026 00:10:06 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:56:e0:6b:08:64:6b:70:8f:e7:72:0f:d0:41:6d:e9:1b:7b:88:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug  3 00:10:06 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=8dc397f3ef31fbc72f418acc0e9e359b880d7c0010f9706fbbd406ba48b2db6b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bf:bc:87:87:c8:0d:de:01:f5:0e:fe:a4:3d:
                    4f:c3:6c:8c:13:fe:2f:87:8c:a2:6f:b3:08:a8:3b:
                    f8:dc:d4:e1:45:74:a6:3d:35:66:3d:42:d6:86:3a:
                    c8:49:ed:38:c2:03:a1:2e:3b:03:e7:2a:ea:d2:dc:
                    9b:ab:50:d4:53:d1:a8:4c:48:f5:c0:58:14:f1:bd:
                    ad:3c:41:89:e2:d0:d8:22:0c:d9:4b:05:7f:78:43:
                    95:b6:cc:54:82:09:89:41:0b:f5:0b:c5:11:5f:1e:
                    1a:5e:29:ea:49:75:c1:34:c4:18:5c:cb:33:d1:13:
                    64:06:28:48:0c:2c:45:6b:44:0f:bf:97:aa:1f:cc:
                    25:13:3c:19:f3:a5:7c:49:95:b6:92:13:1c:b4:26:
                    d4:8e:7e:c0:1d:31:40:33:55:9e:b2:05:a8:87:87:
                    cc:8c:83:d9:9e:83:ec:60:3a:72:2f:03:ee:e0:30:
                    e6:67:4f:fc:aa:26:a7:63:a2:c6:90:26:77:12:8b:
                    dc:e4:13:0b:c5:d4:84:16:1b:2c:89:a4:45:03:8a:
                    a9:56:a5:46:31:6d:dd:8e:62:db:fd:08:d3:c1:dd:
                    d8:e6:5a:68:4d:bd:1d:bd:9d:b6:66:88:35:4f:a3:
                    ae:b5:d5:56:cf:af:cc:66:f0:5b:d2:17:d7:78:3d:
                    c8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7B:7F:7B:63:44:DA:D9:64:04:76:B0:02:60:5D:0A:2B:2D:79:8F
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e27e6217-4842-4b88-9d80-7bf4ac4b7ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:4a:e3:37:1d:4d:38:5f:dd:88:fb:98:aa:b0:62:22:91:
         39:e3:4f:84:24:5c:7d:6d:0a:4d:12:65:09:0f:2a:51:a6:e3:
         12:e7:c7:2e:74:02:36:01:76:48:f7:aa:74:49:07:5f:a8:21:
         d0:2e:5b:a7:0b:80:19:ee:7e:12:0b:64:e5:04:ef:f9:d8:61:
         c5:06:de:6d:a2:3c:b8:06:25:ae:0a:b3:d0:55:da:cf:f3:82:
         39:a6:38:c5:61:f0:5c:fe:da:c0:c5:60:66:a1:f4:8c:08:5f:
         97:c9:15:5f:fe:53:bb:1e:29:9a:1e:b1:68:ad:4c:62:17:2f:
         d1:bc:0f:96:db:07:5c:fa:73:b0:dd:56:a4:04:fb:89:98:bd:
         5a:3a:95:77:d1:20:01:9a:47:f2:fa:b5:0e:63:06:d0:db:3b:
         bc:26:04:d8:96:ee:e1:62:95:1a:8d:ea:5c:71:f2:7c:09:b3:
         e8:56:74:66:c8:d0:85:b1:8b:f2:0c:44:b7:46:0a:4c:e9:49:
         b8:9c:4f:ea:32:b1:87:65:75:ef:e0:b6:75:5d:94:a3:78:70:
         78:3f:1e:e3:99:ca:f3:cb:fc:0c:18:ae:43:68:1f:e1:62:69:
         3e:e4:60:33:d2:4c:1e:84:79:b1:79:7b:68:84:5c:58:da:3b:
         60:44:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:54:56 2026 by rpki-client