Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ad8fff98-4abc-4324-8c36-b77778f66799.roa
File:                     ad8fff98-4abc-4324-8c36-b77778f66799.roa (raw, json)
Hash identifier:          e9PTJJd62Q/jbV3VNB7vqvuNCbyIfOhFOXM7mKslbok=
Subject key identifier:   C2:8F:DF:00:0E:32:19:1B:EF:B7:C6:00:4E:F0:C0:EA:17:37:A9:0F
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       091DE5CD278FF09671D9280F4088036A9DF93267
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ad8fff98-4abc-4324-8c36-b77778f66799.roa
Signing time:             Tue 17 Feb 2026 02:50:11 +0000
ROA not before:           Tue 17 Feb 2026 02:50:11 +0000
ROA not after:            Mon 18 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1d:e5:cd:27:8f:f0:96:71:d9:28:0f:40:88:03:6a:9d:f9:32:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Feb 17 02:50:11 2026 GMT
            Not After : May 18 23:59:59 2026 GMT
        Subject: serialNumber=d22f5ecc67944df1f3712fbf4a5a015ec1eae8f8033e69f2b034a4123ec7fe24, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:42:24:b9:a5:27:8f:85:ee:4a:3a:ae:98:
                    f3:c0:c5:45:0d:8e:56:b0:2f:ee:e1:46:8e:c2:9c:
                    59:5d:62:03:65:c2:7c:3d:dd:64:5d:03:ba:ec:29:
                    d0:b8:1c:c0:2c:be:76:23:ce:77:89:71:e5:14:2c:
                    28:04:3a:9b:f1:7d:ba:db:ad:fd:14:02:dd:ad:31:
                    e7:e2:99:07:70:95:8f:d1:96:47:22:90:db:3e:1d:
                    3b:80:f8:1b:e8:82:7c:d5:dd:bc:de:ca:87:62:ad:
                    de:fa:43:88:5f:b9:d3:d5:f7:4f:20:27:d2:7f:aa:
                    2b:f4:51:bb:29:1a:44:c2:a4:22:8b:c8:05:ca:b7:
                    bb:c9:af:e4:07:7f:8d:f5:62:38:33:da:52:a8:14:
                    90:f7:b2:c8:9f:53:a2:0a:c1:5b:c2:98:12:35:0a:
                    4d:67:83:85:27:9b:45:7c:5b:ed:81:2b:7d:cf:8b:
                    a1:18:36:16:83:29:25:21:a9:3d:c7:2a:bd:09:75:
                    5d:cc:79:9f:23:99:c2:33:e8:79:61:94:55:07:86:
                    85:89:d2:ae:fc:0d:e1:0e:e0:c8:4a:c5:2c:59:c8:
                    58:fd:e3:19:43:78:bc:8e:1f:dc:b6:a3:90:eb:c3:
                    16:1d:a5:07:db:8f:3e:b2:15:fa:bc:b9:66:86:13:
                    33:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8F:DF:00:0E:32:19:1B:EF:B7:C6:00:4E:F0:C0:EA:17:37:A9:0F
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ad8fff98-4abc-4324-8c36-b77778f66799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:c6:d7:ac:9f:90:98:ca:3b:c9:91:9b:cb:1b:34:bb:6a:07:
         e3:32:3f:e1:85:5d:5b:c1:7e:93:ed:d1:f8:72:5f:ce:86:1d:
         70:c8:0f:a6:41:8e:be:10:5f:d1:cd:bc:c4:e5:c8:9e:27:e5:
         94:c2:cb:4b:f1:5d:1b:7f:b4:e5:7a:43:b5:58:c3:d1:57:d3:
         ab:16:cc:63:66:b2:15:82:60:94:3b:ae:e5:5c:46:cb:d9:b0:
         5e:e5:77:5d:47:6c:a5:74:5b:1c:a1:75:bd:f3:c6:10:ed:72:
         05:98:b6:b9:4d:0e:f0:a8:11:6d:ac:3a:8f:2d:87:67:3b:57:
         05:54:c7:a5:3e:b2:6c:cf:8a:16:7b:f2:f3:c1:5a:96:24:e0:
         40:23:11:b3:3d:14:d9:30:78:aa:a4:bb:96:02:21:c3:e1:03:
         e8:0b:eb:06:60:a2:65:5b:e8:3f:63:e4:0b:69:a8:29:26:3b:
         68:24:b4:10:cf:61:3a:95:53:55:26:aa:81:be:bb:f0:83:cf:
         a3:70:01:a2:3c:b3:0b:37:fe:66:b9:9c:4e:f4:09:80:d8:6b:
         81:d5:c5:59:d5:f2:be:d4:84:9d:4e:ed:e9:80:df:a2:15:00:
         7c:41:32:e7:28:34:04:b7:84:15:fb:e7:00:bf:a2:1c:f8:96:
         83:32:a7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:22 2026 by rpki-client