Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa
File:                     9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa (raw, json)
Hash identifier:          7WFtwMDnnYKpV5GPObWKHk4yF8h2yHbdV9WepTrAGOA=
Subject key identifier:   DF:06:C4:5F:9F:AC:5E:DA:CD:B4:8D:20:A7:2D:EF:B8:3D:ED:CC:F6
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       23E9DE654CD6C0E9917AA22CB9F1A9558CF74C74
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa
Signing time:             Thu 15 Oct 2026 03:10:07 +0000
ROA not before:           Thu 15 Oct 2026 03:10:07 +0000
ROA not after:            Wed 13 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e9:de:65:4c:d6:c0:e9:91:7a:a2:2c:b9:f1:a9:55:8c:f7:4c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Oct 15 03:10:07 2026 GMT
            Not After : Jan 13 23:59:59 2027 GMT
        Subject: serialNumber=ce8e5437e644c617d5601fcd0a42339d296deeff991ca3a9f69db9ec64a367a2, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:de:87:3d:36:5e:b2:aa:92:cd:00:39:44:
                    d9:65:3a:3d:7e:7c:db:00:67:d9:71:8a:63:5f:9e:
                    90:eb:d0:77:23:40:0e:7d:6a:12:62:e9:d5:ad:63:
                    a8:6e:a6:58:e3:71:53:f1:b7:13:8f:d2:70:03:39:
                    89:32:32:5b:1f:52:0b:40:99:92:59:bf:36:30:48:
                    ed:ea:62:dc:b6:fe:b4:9a:5a:7f:1c:f8:b7:25:eb:
                    14:13:75:cc:00:67:a3:a4:47:c3:9d:ee:a8:9c:db:
                    bc:df:6e:fc:b3:7d:d8:af:5f:ec:1f:4f:4b:4d:09:
                    8b:69:6e:ad:95:4c:6f:01:ed:6b:f4:d2:f7:b2:d3:
                    aa:ff:11:69:b3:26:50:d1:10:40:a2:2d:5c:bc:e1:
                    f6:c7:3e:9e:d7:82:a8:56:22:a7:3e:bd:af:3a:21:
                    bb:e5:63:97:35:e2:92:47:1b:52:ed:85:13:5a:6a:
                    8e:af:a5:d0:51:37:ba:57:a5:05:08:74:72:c0:aa:
                    19:5a:0e:7d:76:40:50:b3:8d:5f:4e:a0:38:b7:4f:
                    6d:7a:05:f5:ce:1f:fc:80:14:9c:f3:07:63:f6:ca:
                    00:e7:06:a4:75:ff:e4:9e:d7:27:38:5e:d2:34:1a:
                    36:fa:a7:0b:9f:0a:23:08:a0:11:d3:07:03:05:c8:
                    37:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:06:C4:5F:9F:AC:5E:DA:CD:B4:8D:20:A7:2D:EF:B8:3D:ED:CC:F6
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:3e:d5:a9:b7:56:38:fc:68:8f:a0:c3:47:41:6a:da:6a:4a:
         fb:79:40:ce:59:29:79:b1:49:69:64:16:1e:e0:81:ee:9a:06:
         6a:0a:22:de:c0:e6:df:71:69:af:34:8b:8d:ea:3a:00:50:0f:
         26:1e:30:84:d1:39:f6:b3:c0:e7:bc:bf:7e:0f:78:20:ea:da:
         05:d2:bb:52:9d:9b:90:19:eb:1f:27:96:06:50:54:23:1f:38:
         59:51:51:09:10:27:58:24:3e:73:18:01:9a:6a:f5:4a:6e:50:
         87:fa:22:ec:1b:70:a5:db:48:d5:57:c4:1b:fe:e4:a4:50:54:
         f1:4b:ce:1c:9e:19:aa:31:b9:ce:3c:7f:b7:93:a2:e3:e0:04:
         9f:c1:23:b5:e9:7c:74:0d:1a:01:6c:0d:f4:38:3a:0f:ea:b0:
         77:39:bb:30:5a:ae:af:81:da:5c:4b:04:7d:5d:1c:48:35:61:
         59:77:3f:45:7c:4d:4f:03:3b:8d:c3:b0:c6:c0:46:d5:8e:9f:
         3c:dc:96:eb:ea:ee:ac:a4:74:e2:6a:82:23:8c:f0:9a:2b:35:
         5e:26:44:1a:3b:cb:25:a5:c3:65:01:f0:cd:f9:76:22:96:63:
         cc:57:7a:2b:9b:b9:31:14:63:37:2a:86:73:05:21:80:b8:7e:
         d2:c2:23:38
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUI+neZUzWwOmReqIsufGpVYz3THQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE1MDMxMDA3WhcNMjcwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZThlNTQzN2U2NDRjNjE3ZDU2MDFmY2QwYTQyMzM5ZDI5
NmRlZWZmOTkxY2EzYTlmNjlkYjllYzY0YTM2N2EyMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdsN6HPTZesqqSzQA5RNllOj1+fNsAZ9lximNfnpDr0Hcj
QA59ahJi6dWtY6hupljjcVPxtxOP0nADOYkyMlsfUgtAmZJZvzYwSO3qYty2/rSa
Wn8c+Lcl6xQTdcwAZ6OkR8Od7qic27zfbvyzfdivX+wfT0tNCYtpbq2VTG8B7Wv0
0vey06r/EWmzJlDREECiLVy84fbHPp7XgqhWIqc+va86IbvlY5c14pJHG1LthRNa
ao6vpdBRN7pXpQUIdHLAqhlaDn12QFCzjV9OoDi3T216BfXOH/yAFJzzB2P2ygDn
BqR1/+Se1yc4XtI0Gjb6pwufCiMIoBHTBwMFyDd1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3wbEX5+sXtrNtI0gpy3vuD3tzPYwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzlmY2Q5ZDZhLTcyNzItNGMxZS1iNDZjLWNjOTRlNTgzMjJlNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYAwwDQYJKoZIhvcNAQELBQADggEBAIo+1am3Vjj8aI+gw0dBatpqSvt5
QM5ZKXmxSWlkFh7gge6aBmoKIt7A5t9xaa80i43qOgBQDyYeMITROfazwOe8v34P
eCDq2gXSu1Kdm5AZ6x8nlgZQVCMfOFlRUQkQJ1gkPnMYAZpq9UpuUIf6IuwbcKXb
SNVXxBv+5KRQVPFLzhyeGaoxuc48f7eTouPgBJ/BI7XpfHQNGgFsDfQ4Og/qsHc5
uzBarq+B2lxLBH1dHEg1YVl3P0V8TU8DO43DsMbARtWOnzzcluvq7qykdOJqgiOM
8JorNV4mRBo7yyWlw2UB8M35diKWY8xXeiubuTEUYzcqhnMFIYC4ftLCIzg=
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:42:11 2026 by rpki-client