Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f106bd1f-1175-4eda-af94-f788dab09805.roa
File:                     f106bd1f-1175-4eda-af94-f788dab09805.roa (raw, json)
Hash identifier:          YoqLHu4MQ51JoPXsGlVcjkn1HpHRvYma2iqeo3qFLMc=
Subject key identifier:   3E:9D:D5:6F:E3:6A:AA:14:33:29:A1:EF:BF:4A:D5:04:B8:CC:9F:C6
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       103FCC75E0D1B09435419E62F0ED5C012F1F81BC
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f106bd1f-1175-4eda-af94-f788dab09805.roa
Signing time:             Wed 05 Aug 2026 01:50:06 +0000
ROA not before:           Wed 05 Aug 2026 01:50:06 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3f:cc:75:e0:d1:b0:94:35:41:9e:62:f0:ed:5c:01:2f:1f:81:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug  5 01:50:06 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=70042f2c28fd0cec955c4422992814ed7bb9c8e539b013a6c708cde7848474ea, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7c:a2:fa:dd:c8:99:c7:dc:3c:1e:9b:42:1e:
                    f5:e9:fc:c1:f6:ef:48:0c:a2:3d:27:bf:64:9a:87:
                    59:0f:b6:b7:e3:24:f0:30:87:ee:a4:4e:62:b6:72:
                    89:21:cb:0e:9c:a3:b2:95:5c:a5:2c:29:19:31:80:
                    4b:ae:4e:a4:dd:58:79:72:31:fb:fa:6f:06:8e:0e:
                    19:8d:e2:68:84:52:37:9d:1d:12:f6:ca:94:d5:da:
                    ef:fe:c5:48:f0:e0:be:b6:09:ce:52:1e:01:59:c3:
                    ad:ba:11:2d:26:b4:35:12:7a:a5:14:2b:66:2e:83:
                    5f:4d:1a:6a:81:a7:97:7a:b9:65:66:b3:99:1c:29:
                    08:1d:ed:9c:94:75:83:ba:60:b1:11:12:8f:18:6e:
                    24:1b:ac:6f:36:f1:c4:77:72:e9:36:d5:86:7b:b4:
                    9a:3d:c1:be:4c:e2:a0:2c:96:5d:31:53:59:18:91:
                    a3:5f:7d:cc:fe:b7:cc:84:6e:e5:92:e4:37:0d:2e:
                    04:2a:30:05:52:7e:a6:d4:66:e9:c6:2d:a0:0d:35:
                    2b:e4:33:8f:1a:97:41:40:cd:ba:b9:43:92:4c:9c:
                    bd:63:c8:79:61:2e:30:3b:9a:61:62:35:f4:01:d5:
                    03:c2:a6:24:ff:3f:67:00:e0:34:dd:d4:49:ba:40:
                    9a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9D:D5:6F:E3:6A:AA:14:33:29:A1:EF:BF:4A:D5:04:B8:CC:9F:C6
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f106bd1f-1175-4eda-af94-f788dab09805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d5:df:83:46:7f:a2:6b:93:3b:7e:23:bb:c5:bd:17:58:3c:
         83:76:d1:9e:9a:80:6a:5c:04:6c:a0:96:75:55:59:2a:37:9c:
         da:ca:3f:0b:32:da:60:49:f4:fd:67:9a:14:ed:bc:c0:0b:47:
         b1:33:37:31:42:0f:e2:38:29:56:3a:3d:2f:6f:df:a1:71:62:
         b4:af:dc:de:0e:2b:23:a0:43:e5:a7:07:f8:2b:9f:f0:c0:1b:
         68:bc:bb:31:bb:3c:bf:e1:5f:6d:f9:d7:73:9e:d6:45:d7:ec:
         26:f3:a7:88:f3:76:a6:00:ae:56:92:f5:6b:67:d8:ea:7d:e7:
         82:3d:49:a5:34:87:da:14:32:67:b1:79:90:f7:a0:38:60:bc:
         d2:f7:ff:57:82:33:35:a0:fe:fd:e3:ae:f1:2c:fe:08:d3:81:
         b5:72:82:5b:f5:f5:50:b7:c5:fd:ef:5e:53:1b:6c:05:8e:94:
         8d:f0:3c:bf:1e:23:55:81:97:6e:71:ce:4d:d5:6b:75:86:c1:
         32:83:d1:bb:57:d5:5a:e9:76:80:27:6e:64:8a:b6:d9:90:6a:
         4a:d0:1b:c6:e5:24:29:1e:1b:81:c3:56:e0:7b:69:19:8d:e6:
         71:84:fa:22:dc:d8:22:a5:02:25:04:fe:87:16:2c:6e:f0:23:
         8f:e7:6f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:55:36 2026 by rpki-client