Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa
File:                     5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa (raw, json)
Hash identifier:          XsDAKzFsGe0R5tQauk/7dEUYJZ4iesvJi6zLJN72shs=
Subject key identifier:   61:79:C3:2B:CA:9A:15:C9:50:46:9B:E0:AE:86:E2:07:2F:4F:C1:4F
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       1B0478B244FA89DD8EA315500BC2A9A1985ABD91
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa
Signing time:             Sat 21 Feb 2026 01:50:09 +0000
ROA not before:           Sat 21 Feb 2026 01:50:09 +0000
ROA not after:            Fri 22 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:04:78:b2:44:fa:89:dd:8e:a3:15:50:0b:c2:a9:a1:98:5a:bd:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Feb 21 01:50:09 2026 GMT
            Not After : May 22 23:59:59 2026 GMT
        Subject: serialNumber=d8be8ecbce358cea17d6524e4bc84bc2f27625d8be15c7f5d3e7159f692f97bf, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:a3:3f:d5:69:73:43:69:bc:92:2e:85:4e:
                    d5:8f:d5:97:be:0e:de:52:6d:d1:5c:87:4e:72:57:
                    2c:dc:44:d7:ce:2d:5d:3a:05:6a:b5:39:2d:c9:da:
                    cf:23:2d:01:91:b8:fb:eb:46:5f:a8:a0:83:ad:32:
                    82:4a:0b:c8:87:ad:3f:53:f5:f5:35:2a:86:6b:58:
                    7e:c6:03:48:af:5d:8f:73:4b:c1:bc:79:24:d3:93:
                    ed:19:88:8c:af:79:61:0c:02:15:2f:bd:7e:c7:37:
                    55:b5:a0:23:82:d3:c7:15:cf:b0:ba:96:8c:84:a6:
                    eb:f7:cc:af:26:d2:44:1d:66:44:2c:54:70:7f:38:
                    d2:ff:73:7e:39:a7:7a:24:03:d5:a3:25:e4:83:38:
                    66:bc:24:b5:14:57:5d:2f:17:32:57:4a:43:ec:89:
                    89:24:e5:b7:fa:1a:dd:13:a4:bb:97:1b:03:8a:6c:
                    4d:f7:7f:18:ce:1f:32:9d:ba:ee:e1:e6:7c:a3:8f:
                    a0:62:a7:15:13:5f:79:96:6d:ff:c5:88:94:b2:75:
                    2e:d8:a2:fe:4d:7d:73:78:77:e6:76:3e:fd:f7:a1:
                    aa:09:63:44:8c:4c:c2:fa:b9:6c:05:2e:5f:8f:24:
                    0d:62:fd:c3:9f:c4:93:33:dd:f1:bf:b4:a7:f2:2b:
                    d1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:79:C3:2B:CA:9A:15:C9:50:46:9B:E0:AE:86:E2:07:2F:4F:C1:4F
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f64fd26-1d9a-4858-98f0-80c6e884bce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:25:89:f0:b2:76:e4:30:5a:ad:be:a7:8f:a7:71:59:d2:1e:
         c9:b1:8b:be:b4:3e:4f:d9:4f:ef:75:75:46:22:5e:e0:7e:c9:
         53:6c:b8:c9:82:eb:58:7b:f8:94:2b:ff:d2:2e:ee:76:1b:70:
         c0:28:e4:de:32:f3:a9:dd:75:b5:f1:1a:a9:8f:dd:91:0f:f0:
         aa:52:cd:f2:03:d1:a6:94:4b:e2:22:22:4d:20:6f:fc:3b:f7:
         28:40:4d:78:47:0c:45:6b:e9:18:3b:77:d6:1b:33:fe:ba:e6:
         d3:e8:74:85:7b:36:2b:99:d9:0e:f7:08:6b:75:b8:21:bc:95:
         f7:62:67:71:bb:7e:35:ef:25:eb:89:33:b2:7d:d2:3d:24:8d:
         06:33:7f:d2:ba:7d:5b:ae:9f:51:09:da:80:6a:dc:98:fc:1c:
         5a:f8:dd:3b:16:ed:44:e8:27:2d:80:f1:ab:fe:5c:fe:bf:13:
         91:62:ec:f6:f5:01:f2:3e:2e:2a:86:39:ba:fb:7b:03:9b:e2:
         49:13:8c:3c:ba:f1:17:65:f1:c8:6d:09:ab:93:1b:06:27:70:
         86:a7:91:2c:8e:61:14:84:ae:0c:d9:12:3b:25:21:7b:d7:1a:
         79:91:e4:36:2a:fb:6e:16:64:fc:1e:44:5c:0b:5b:af:ba:37:
         48:6f:43:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:13:12 2026 by rpki-client