Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f707ad54-c24d-4a4f-a4d7-a2aad3821000.roa
File:                     f707ad54-c24d-4a4f-a4d7-a2aad3821000.roa (raw, json)
Hash identifier:          8hAUKZoAjHyQ0/dNBcS0iK6lD+p89uBPH8T2RPWRDMo=
Subject key identifier:   E4:0F:E3:EC:EC:BC:27:0B:3C:C1:11:64:E9:F9:BB:85:22:48:C0:85
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       1FA567A569C56609C6D48E8A208FE2562C62FA36
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f707ad54-c24d-4a4f-a4d7-a2aad3821000.roa
Signing time:             Wed 05 Aug 2026 02:00:11 +0000
ROA not before:           Wed 05 Aug 2026 02:00:11 +0000
ROA not after:            Tue 03 Nov 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a5:67:a5:69:c5:66:09:c6:d4:8e:8a:20:8f:e2:56:2c:62:fa:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug  5 02:00:11 2026 GMT
            Not After : Nov  3 23:59:59 2026 GMT
        Subject: serialNumber=75ecd0b27c5c3555820e0786d3d6004e0ccc50857e6d78e1aa635a991b0f9d22, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:ef:64:8b:ce:b2:1c:4e:45:25:fe:88:e9:
                    22:6f:d9:d2:e5:78:8b:e2:ad:38:f3:6f:b4:ba:3e:
                    90:dd:be:05:50:4b:8b:02:44:1e:4e:40:18:49:cf:
                    a0:80:54:96:61:88:71:46:05:96:50:a5:94:72:70:
                    d7:da:3a:29:ae:ff:a4:3a:8b:2d:41:6a:a7:de:8f:
                    8a:e6:06:30:24:91:c0:2e:ef:4d:03:95:38:3a:fa:
                    7a:eb:9c:80:2f:6d:56:0d:ca:03:be:8a:49:b8:9c:
                    19:94:2f:73:78:b7:37:63:b8:74:f3:85:a0:0d:98:
                    87:52:34:86:3c:db:46:51:35:88:e8:ac:a4:4e:93:
                    e2:85:95:21:c5:12:19:a1:a6:0b:ac:da:7d:f1:17:
                    39:f3:df:84:9d:1e:5a:47:21:2e:fc:8a:08:06:25:
                    fa:81:4a:03:44:8e:db:82:7a:ed:8e:b8:e4:5c:07:
                    10:ca:04:67:19:17:78:bc:de:a9:a8:98:f5:97:80:
                    48:2e:9e:6e:45:09:4f:84:e6:17:95:88:d2:d7:fd:
                    90:b5:ac:88:b1:bf:bb:b0:2d:40:dc:0e:88:f3:5a:
                    90:72:83:26:46:c3:b6:82:8d:7c:5a:21:1e:31:41:
                    f9:09:99:d9:d5:01:d8:12:ef:6c:94:34:4a:bb:c0:
                    a8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0F:E3:EC:EC:BC:27:0B:3C:C1:11:64:E9:F9:BB:85:22:48:C0:85
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f707ad54-c24d-4a4f-a4d7-a2aad3821000.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:be:71:ee:95:3a:5e:b1:d8:04:da:54:cf:91:85:60:3e:7b:
         eb:0d:74:48:bd:43:b7:07:22:93:a0:10:5a:1d:6a:89:8d:8b:
         9c:07:f0:36:10:8f:be:d6:6a:a9:84:0f:53:e3:ac:e9:83:7c:
         64:8e:58:7f:e1:08:a1:41:f8:d9:63:6d:e0:f3:ba:14:da:9c:
         db:db:de:9e:9a:85:ba:23:a8:42:87:1e:bc:49:be:37:73:7f:
         36:5f:bb:52:06:25:23:22:92:d3:95:54:64:fa:50:3b:9f:0e:
         07:1a:6c:92:5d:28:89:55:fe:77:29:e8:80:d7:7e:f8:08:67:
         23:a6:40:a5:e3:b8:a4:13:7b:25:62:76:b5:3d:ef:af:45:89:
         a9:24:59:46:d8:11:76:1e:8b:57:8b:86:fb:53:1b:4b:28:94:
         79:9b:55:7f:9e:1a:b0:39:04:c6:9a:78:94:3d:50:3d:8b:69:
         bc:86:f2:16:9b:61:2c:87:29:2d:9c:f4:08:3b:8d:07:c0:ef:
         d6:00:1b:d8:2b:6e:df:9e:a9:67:44:9d:69:ff:ab:0b:44:bf:
         41:d5:b9:83:21:e8:2d:3f:39:e3:03:6d:35:3b:c0:39:e9:5b:
         f3:45:59:be:ac:d2:38:64:ee:d1:79:3c:f5:5e:bc:41:48:13:
         a3:50:73:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:54:54 2026 by rpki-client