Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b525483-36f2-4848-833e-c43050341141.roa
File:                     8b525483-36f2-4848-833e-c43050341141.roa (raw, json)
Hash identifier:          avQlo2H/0Vm36JOWo1lQukmu8bAQyKKnsH+zXaZwwP8=
Subject key identifier:   48:EE:F5:46:CB:06:B1:64:14:F0:5E:A1:83:6A:87:7A:EF:1E:A3:E8
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       6CE5DCAA700DB765B91F1270FC0108CBC2976D7E
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b525483-36f2-4848-833e-c43050341141.roa
Signing time:             Thu 05 Jun 2025 14:38:59 +0000
ROA not before:           Thu 05 Jun 2025 14:38:59 +0000
ROA not after:            Thu 10 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e5:dc:aa:70:0d:b7:65:b9:1f:12:70:fc:01:08:cb:c2:97:6d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jun  5 14:38:59 2025 GMT
            Not After : Jul 10 23:59:59 2025 GMT
        Subject: serialNumber=7acf578f9af2478d0ed40155ea46a7c13d610ba514d184e23daca87cdb813f26, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:23:0d:b4:e9:e1:a7:4b:b0:59:fd:13:03:
                    0e:14:ff:f5:63:d0:63:23:8a:1f:bf:c2:de:8e:56:
                    68:51:61:fc:23:bf:3d:ef:dd:13:a9:ac:ea:a6:5b:
                    dd:cc:d8:83:97:47:e7:0a:80:db:5b:7b:19:43:ed:
                    11:56:3f:68:0b:ad:ef:c6:67:4e:3e:d2:59:62:83:
                    f0:38:38:4b:e5:78:57:40:d6:e1:fd:ec:f9:d6:a7:
                    38:bf:98:78:d0:c9:0b:79:25:91:8c:85:48:fb:d8:
                    44:10:ba:6f:19:a0:f3:f3:bb:f2:f8:c7:55:ce:3a:
                    f8:64:0e:81:bb:e1:a4:8a:ec:29:25:d7:94:11:70:
                    56:b3:2c:98:52:93:6d:dd:f3:d8:bb:ca:fa:5f:e3:
                    59:73:32:89:0a:04:3d:bc:4f:17:35:bb:11:42:cf:
                    cf:dc:56:97:4c:22:f9:83:ec:c3:10:4b:09:9a:3c:
                    7e:f8:4d:02:69:2f:01:b2:86:b6:94:38:90:4e:6e:
                    b9:c0:10:ae:38:1e:71:7c:cb:b8:59:59:97:c2:a6:
                    fe:84:30:08:b8:1a:53:b2:ea:1b:a9:10:c2:75:d0:
                    7f:d6:15:39:35:1e:fb:70:63:34:7b:a0:ab:7e:b1:
                    0c:4a:c2:69:7f:9d:6d:39:26:05:ab:e1:af:3b:b6:
                    9d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EE:F5:46:CB:06:B1:64:14:F0:5E:A1:83:6A:87:7A:EF:1E:A3:E8
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b525483-36f2-4848-833e-c43050341141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:37:bf:9e:26:6f:0d:cf:6a:dc:2a:fc:bc:7f:04:da:ea:c7:
         d6:45:ef:ef:d1:fd:07:45:59:eb:e9:a6:bd:c7:10:bc:40:9a:
         b8:6e:54:e3:fa:c3:3e:cd:16:c8:7d:29:b2:82:7e:f3:0e:0b:
         29:ea:69:59:8b:eb:97:b3:fd:b5:2d:3e:73:cf:57:e2:66:02:
         a2:fa:37:dd:b9:a3:21:ed:c4:51:a9:eb:c3:41:ec:e0:7a:a2:
         91:49:17:da:48:38:97:df:2c:df:63:a7:d9:a9:ea:04:c4:de:
         98:ab:6e:d7:dd:c8:17:7a:04:7f:76:a2:41:ba:dc:1b:fe:b8:
         97:8d:6c:98:0c:e6:a1:1b:a3:69:e9:f9:08:0c:1d:9e:cb:be:
         c7:58:63:f0:ed:69:f8:b7:ab:ab:3d:00:8e:54:d6:1c:29:96:
         a4:32:02:ea:34:4d:41:20:5d:7d:aa:d9:00:42:00:89:06:15:
         45:cb:09:63:83:cc:e5:37:a4:89:f8:1d:b3:b8:a5:7f:d8:39:
         95:41:13:34:a8:73:91:3c:a6:e9:55:05:96:44:c2:76:77:53:
         d5:31:5e:80:15:e8:85:90:46:69:45:a8:ef:72:88:09:98:a0:
         13:aa:44:c2:5a:74:cc:7a:32:ff:55:39:62:07:17:e2:48:21:
         62:ae:ba:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:16:48 2025 by rpki-client