Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/898b4557-ed43-42cb-99fe-3cd21033edf4.roa
File:                     898b4557-ed43-42cb-99fe-3cd21033edf4.roa (raw, json)
Hash identifier:          PyD/H1AHC1BZYngunthE1L97YLVL21huuLBXtMQHCRk=
Subject key identifier:   EB:E8:31:73:AB:BF:F1:22:E4:8B:01:E1:2D:A7:36:A7:B6:EC:1D:1B
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       525D87A40FF62CB2029E4C32D7EA7C31A8219640
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/898b4557-ed43-42cb-99fe-3cd21033edf4.roa
Signing time:             Sun 17 May 2026 01:50:33 +0000
ROA not before:           Sun 17 May 2026 01:50:33 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     801
IP address blocks:        35.96.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:5d:87:a4:0f:f6:2c:b2:02:9e:4c:32:d7:ea:7c:31:a8:21:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May 17 01:50:33 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=7e0f4348d0dbf5f8330eb6b90832d8379c26f5d13bbec6f24e69cda9e0e5bf39, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:4a:e4:e3:af:9b:d6:b1:2e:5c:63:53:c9:
                    92:31:1c:28:f6:6c:8c:db:15:18:17:03:bd:bb:6f:
                    27:87:5a:fa:40:5a:9e:12:58:7f:21:25:64:6c:5c:
                    c0:c8:73:70:7f:c4:df:8c:8f:7c:f0:43:4a:ae:ad:
                    94:f3:96:25:1f:5d:33:4f:3f:05:a6:fd:ed:5d:b3:
                    f2:0c:81:ab:16:d8:99:33:ee:34:1d:7e:ec:97:21:
                    65:d7:40:18:d2:65:67:1a:ab:aa:d3:35:58:bb:b1:
                    e7:15:08:d6:6d:26:b2:bd:d7:a2:a2:25:0f:46:79:
                    4e:0d:ac:6e:0f:25:97:ee:26:89:d8:56:d5:d4:1c:
                    72:00:1c:37:16:42:63:54:a2:7f:ad:94:40:f0:48:
                    8f:66:b4:f8:0c:e8:18:c2:a7:05:de:c5:c1:86:09:
                    16:f1:f0:1a:01:a3:44:44:e9:ad:27:09:61:36:0f:
                    ba:7c:68:09:8b:dc:4a:ea:7c:36:15:fe:d5:1d:3b:
                    85:4b:ba:49:25:7a:d8:9d:dd:6c:05:f1:2f:48:fc:
                    58:b4:b2:c3:5e:18:2f:06:ee:53:46:6a:9c:0b:66:
                    62:d8:02:99:75:02:26:7c:57:f4:a6:5b:d2:a6:c3:
                    35:8a:04:4e:1a:28:75:4d:2e:fa:8b:c6:36:51:4e:
                    e9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E8:31:73:AB:BF:F1:22:E4:8B:01:E1:2D:A7:36:A7:B6:EC:1D:1B
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/898b4557-ed43-42cb-99fe-3cd21033edf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:b2:16:1f:42:b5:91:8b:59:4d:07:e7:4c:75:ee:93:13:21:
         14:a5:30:f5:cc:85:c2:25:8f:f3:ab:ed:a2:af:6d:6d:80:f6:
         58:ad:1d:38:73:e2:9b:81:b7:d1:d7:54:53:75:35:f6:a5:fb:
         38:e2:8f:41:d0:f2:54:26:10:61:5e:a9:94:2f:0a:d0:91:8f:
         61:82:bd:94:8e:c0:96:d0:18:fa:ad:a8:60:11:a4:1c:8f:6f:
         73:76:4f:40:c1:3a:7d:36:25:ca:b5:0c:7c:23:ce:c5:dd:c8:
         6e:9c:2c:fd:35:77:30:8c:3a:41:66:82:6d:2d:7e:06:e4:f1:
         be:f3:b2:38:64:78:61:22:ab:07:79:8e:1d:62:4a:bf:f1:9b:
         be:ff:a4:11:67:9a:dc:6b:2d:97:b2:21:ca:90:d6:de:53:b7:
         21:60:35:21:31:dc:9f:26:18:e9:af:6b:ea:d2:19:01:e1:4d:
         8c:18:6d:52:4a:f2:44:f5:bb:93:66:a7:d2:62:ab:f8:cd:3c:
         f8:41:7a:32:8a:f2:5a:c4:13:3b:55:26:65:0a:90:67:4d:3a:
         c1:63:6f:08:be:c5:d4:b7:92:ce:8d:34:97:19:dd:8d:33:43:
         4c:6d:9b:e5:b0:d5:f8:0f:ea:cd:1f:dd:b0:ff:1f:5f:7c:20:
         bf:1d:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:15:04 2026 by rpki-client