Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/74abdb75-ce74-4f18-ac4b-2432fc81d1f1.roa
File:                     74abdb75-ce74-4f18-ac4b-2432fc81d1f1.roa (raw, json)
Hash identifier:          AK8fgLncv/8xCMegcA50cBJme8HwFFZNwqzjq2PeUFo=
Subject key identifier:   53:81:96:79:82:6E:34:42:50:89:EB:56:DC:E7:2D:31:47:FD:B9:F1
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       3FC1CDC1990815FE0B2EECF51785D6EA5C77D9DB
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/74abdb75-ce74-4f18-ac4b-2432fc81d1f1.roa
Signing time:             Tue 19 May 2026 04:00:09 +0000
ROA not before:           Tue 19 May 2026 04:00:09 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     801
IP address blocks:        35.96.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c1:cd:c1:99:08:15:fe:0b:2e:ec:f5:17:85:d6:ea:5c:77:d9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May 19 04:00:09 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=2405d51fd68460cf17676aaf51db246330f0a8a482dc32b60b25be104a217f31, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:d9:ae:85:49:87:6f:0a:1e:fb:d7:73:0e:
                    a1:8e:69:73:74:75:b2:92:fd:b4:c2:3c:12:0e:ac:
                    07:23:62:a6:ea:2d:5d:6b:84:d1:cd:49:c0:cb:55:
                    ee:fe:47:0d:d4:dc:55:c6:86:c1:6c:d6:1d:69:de:
                    14:0c:a6:3f:a0:7b:d0:0b:64:4e:37:6c:7b:97:d6:
                    f8:8e:e0:29:4c:e5:d8:c9:6a:08:c8:c8:5f:cc:d3:
                    54:78:f9:8c:00:91:66:88:f6:2f:a2:86:a9:ec:07:
                    2b:61:b8:c9:3b:46:7f:54:95:54:6c:f6:38:d7:46:
                    28:72:29:df:fb:0e:2a:8f:09:0d:9c:e6:42:77:53:
                    26:88:6b:3d:f3:f6:60:f7:d5:89:50:70:80:e7:c2:
                    9a:80:2b:87:fc:28:97:74:a7:99:01:45:bf:0a:27:
                    e9:df:11:a8:5c:da:0a:b7:5a:f4:61:c7:aa:56:2f:
                    da:35:a8:ce:d1:38:a4:e4:ea:e8:93:01:01:8d:97:
                    02:1e:36:43:f2:a8:3b:10:f4:35:be:56:e2:47:d7:
                    dc:b0:c5:01:16:5a:20:24:42:63:4a:8e:19:2b:b5:
                    af:55:a4:87:45:0b:04:c7:47:25:2d:28:db:4d:d2:
                    61:bb:d2:af:35:73:2b:93:5e:01:b5:b8:02:f7:5d:
                    5e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:81:96:79:82:6E:34:42:50:89:EB:56:DC:E7:2D:31:47:FD:B9:F1
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/74abdb75-ce74-4f18-ac4b-2432fc81d1f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:47:6e:83:44:a3:50:c0:51:fb:41:6a:ed:0f:cf:2d:79:d1:
         27:77:7f:72:7b:1a:17:a2:33:3a:e5:46:c7:90:04:49:21:06:
         bd:9c:9a:6c:b4:0e:42:66:91:2a:ba:d1:ff:b1:46:e5:f0:d4:
         b9:b7:fb:6e:57:7f:5e:3f:bb:b9:30:bb:06:3d:11:8c:a7:6c:
         48:ba:6c:ad:44:de:15:32:42:34:03:5d:ff:e1:6c:4d:1a:8a:
         e0:2d:65:da:a1:f3:37:b5:a5:a8:23:6c:55:78:6f:8a:4d:e1:
         ae:66:d3:1a:3e:54:aa:60:7e:d0:87:95:3c:4f:23:51:af:1a:
         38:71:be:9c:c7:1b:28:2f:d1:a8:7d:3e:54:12:23:3f:ca:16:
         2c:db:e2:62:8e:b8:38:26:64:ee:a4:f2:42:91:f7:0d:b6:29:
         2d:8d:23:1c:06:29:26:73:19:b0:4f:ca:63:98:27:c2:f6:f5:
         98:34:a1:39:31:48:a5:64:e0:91:e8:c6:b9:af:7e:4e:c3:64:
         d3:bf:68:67:95:47:23:84:36:65:1d:8c:2c:7a:36:c2:e6:44:
         73:9e:93:fa:56:2a:d3:e8:27:be:e4:f9:cd:a1:a9:34:7e:6a:
         92:15:db:ed:c1:14:90:9d:98:03:e4:29:e6:4c:87:c7:3a:cc:
         c8:1f:fe:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:27:34 2026 by rpki-client