Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5c5f6769-1bef-4cc6-bc36-e0bb2dde0785.roa
File:                     5c5f6769-1bef-4cc6-bc36-e0bb2dde0785.roa (raw, json)
Hash identifier:          G0vwM6GA4hGDreSl2p8LtQ6A4mBU6Rx+3o7TobOlV0c=
Subject key identifier:   01:D1:ED:50:A5:DF:6E:87:23:20:4D:BF:F7:C5:B6:D1:8F:23:F3:A8
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       41C89C0E4E6E754E0DE81E93E49AAFC267E68BAD
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5c5f6769-1bef-4cc6-bc36-e0bb2dde0785.roa
Signing time:             Sun 17 May 2026 01:50:07 +0000
ROA not before:           Sun 17 May 2026 01:50:07 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c8:9c:0e:4e:6e:75:4e:0d:e8:1e:93:e4:9a:af:c2:67:e6:8b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May 17 01:50:07 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=77802a1419dd7d2e69f1a63d4961ed7d430d096cbf77ff9d551a93dc4a655bc1, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:07:12:25:0a:b5:03:d3:ca:04:d0:78:5b:
                    98:1d:da:fe:49:79:22:33:5d:6e:9a:ee:85:0b:40:
                    5a:88:fc:45:ea:6d:94:30:33:4a:84:1c:a2:a3:94:
                    80:9c:e8:90:84:a1:6e:53:e6:97:c1:03:3d:dd:7f:
                    a9:7a:a0:4c:51:48:4e:12:ef:e0:95:81:f5:ce:5c:
                    2c:b8:6b:3e:80:b8:07:65:93:fa:2d:dd:7f:0f:92:
                    e9:85:51:05:f7:db:6e:f4:39:22:40:e8:b6:3a:d1:
                    6c:13:48:7a:db:09:0c:39:8f:f5:46:94:b0:fe:6c:
                    ec:13:65:02:20:61:7a:ba:52:d7:0f:a7:2a:85:2c:
                    ff:c7:3b:14:4b:ff:8f:8d:22:c3:c4:91:66:cc:77:
                    41:43:4d:3a:2a:66:dd:2d:54:42:dd:85:4f:c6:58:
                    ae:c5:71:67:d3:cd:50:c5:f1:e1:3e:ea:43:06:f8:
                    6d:d0:b5:e7:81:f3:86:91:21:2f:0e:15:52:0d:d3:
                    45:c0:ec:71:5d:31:ab:5f:54:75:5f:29:2c:d5:7c:
                    5a:56:ec:a9:82:3e:7e:f8:62:67:37:c9:e7:37:c2:
                    ed:5c:69:93:e3:3d:a2:b6:72:39:4d:63:91:a8:1a:
                    10:06:58:49:c0:48:14:2a:b2:b4:fc:77:af:a9:30:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D1:ED:50:A5:DF:6E:87:23:20:4D:BF:F7:C5:B6:D1:8F:23:F3:A8
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5c5f6769-1bef-4cc6-bc36-e0bb2dde0785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:cc:28:fa:56:96:3c:ce:03:8d:09:ef:69:17:93:8e:ff:22:
         93:5b:80:f7:5e:9e:2e:c6:cc:8c:f7:7e:aa:ab:3c:20:1b:4e:
         7f:c7:eb:1b:85:e4:de:a7:45:41:26:b6:b3:c0:1e:03:7e:dc:
         c4:56:75:ad:1e:04:17:48:7b:e8:05:ac:50:51:e9:62:1c:1d:
         72:11:f6:7a:d3:98:f6:18:44:79:ff:b6:e8:55:6e:b8:b6:89:
         2d:79:0b:e6:52:80:de:87:82:6f:48:9d:8a:ec:fb:83:94:12:
         d7:2f:94:75:ac:1b:4e:58:8b:7b:22:11:5e:15:bb:7f:21:4b:
         63:16:bb:a5:16:2f:cb:99:6e:b8:61:90:f3:13:59:04:d5:77:
         d4:bb:88:51:06:63:fa:c0:57:a1:f5:5a:c4:b7:d5:b7:64:a5:
         de:30:94:22:1f:19:8e:36:44:b9:ae:0e:27:c5:cf:41:b3:bf:
         9a:bb:fe:41:ea:0c:a2:b2:be:28:75:7a:a8:55:b3:2d:3d:ed:
         e8:d1:d1:d2:f7:29:f7:2f:31:c5:5e:3e:11:7d:cf:b2:2a:a2:
         3c:06:9d:fb:78:9b:ba:20:9e:d5:4f:5e:6f:1d:d8:5f:6a:56:
         9b:da:2b:f1:3d:06:50:c7:7d:58:18:b9:99:4f:bd:9a:7d:3b:
         c0:50:f8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:44:50 2026 by rpki-client