Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c20cef01-d6c4-4442-8fcc-76bc24a7afa2.roa
File:                     c20cef01-d6c4-4442-8fcc-76bc24a7afa2.roa (raw, json)
Hash identifier:          R3OIBYAOH3S3+kUcaqFtqgR5BC7qC+fH26vaO1VC9Eo=
Subject key identifier:   79:11:9C:86:0B:74:25:51:68:69:36:52:63:1C:71:48:13:5C:26:84
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       2CDAF0A382D49C8AA869365957046196D0CDD18C
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c20cef01-d6c4-4442-8fcc-76bc24a7afa2.roa
Signing time:             Fri 31 Oct 2025 01:40:19 +0000
ROA not before:           Fri 31 Oct 2025 01:40:19 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:da:f0:a3:82:d4:9c:8a:a8:69:36:59:57:04:61:96:d0:cd:d1:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Oct 31 01:40:19 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=7284947c2a7c9059a97741566851033f5dedabd8c9a3407ae23931065ec06173, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:97:d4:98:48:6c:54:81:be:eb:b6:84:6c:
                    64:b3:27:00:64:6b:2a:70:8c:d7:23:78:5e:85:b2:
                    27:e5:22:d3:af:2d:57:3a:9f:fc:a7:f5:29:a3:e4:
                    e0:74:6a:cc:2a:ee:d7:be:40:5e:85:14:d5:c6:fb:
                    9c:89:67:a8:03:72:e1:9b:f7:b6:20:dd:27:17:d3:
                    63:20:47:cd:8b:7b:f6:bf:e1:d6:f7:54:75:ad:66:
                    84:83:5d:5b:9f:cd:0c:f1:50:e1:41:83:d0:83:42:
                    4d:1a:c4:d5:82:fd:f0:f9:2f:e9:36:d1:db:81:15:
                    53:48:96:bb:6a:79:90:74:42:e9:62:ee:33:13:5b:
                    9a:93:af:00:87:f9:9d:4e:53:fb:ed:7f:23:7e:e7:
                    06:d8:d2:59:c4:89:f7:8e:a7:a8:7f:0d:42:4a:cc:
                    b5:09:2e:75:3b:63:fb:74:39:62:f8:92:fb:00:22:
                    f1:f7:99:32:c8:bb:82:8c:4b:df:05:35:ea:56:d6:
                    e7:1c:34:00:8e:4c:f9:e2:0b:d6:22:90:91:7e:60:
                    1a:c0:c7:f8:31:b4:75:70:3f:df:12:1e:d5:40:41:
                    4e:5d:3d:e7:f4:84:ea:b5:f4:bb:aa:9d:e4:8d:8e:
                    3c:fb:87:1e:9a:b2:6c:2d:8b:9e:d0:c4:a4:c0:cc:
                    ac:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:11:9C:86:0B:74:25:51:68:69:36:52:63:1C:71:48:13:5C:26:84
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c20cef01-d6c4-4442-8fcc-76bc24a7afa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:1c:0d:63:4b:c0:7e:14:14:b6:27:20:fe:e4:48:a0:1f:6d:
         af:42:e8:16:9f:54:6c:ce:29:d0:83:69:18:17:03:09:f1:51:
         cf:8f:1e:03:18:3e:0e:0a:e7:65:f5:ad:e2:59:81:f2:78:6a:
         32:d8:c1:29:27:12:f2:b8:37:16:83:6b:02:2d:fd:ea:0a:66:
         c3:0b:10:2d:28:95:8d:f0:a4:21:0a:d3:aa:66:bc:8d:0e:45:
         d9:db:fb:cd:bc:26:e6:3a:ac:36:f3:e7:9e:cd:4a:aa:63:b1:
         4e:d7:0f:f8:62:3c:ae:dd:a0:2b:47:1b:3c:89:b6:5d:27:7b:
         51:28:ef:33:cb:a9:0c:c2:48:0a:72:92:a5:2e:6c:eb:fd:18:
         2b:ea:c7:be:0a:e6:c9:5b:98:ad:6e:91:40:cb:34:35:68:01:
         28:28:36:5d:c7:37:c9:14:7d:8a:70:aa:8f:cf:10:3d:14:22:
         e2:9b:b0:c6:28:73:9b:3e:47:0d:87:e8:0a:d2:76:98:81:02:
         23:21:a4:29:6b:4c:5d:22:6e:89:67:28:b0:d3:92:ec:01:7a:
         06:3a:6b:88:bb:6e:5d:b6:c5:93:ac:4a:ea:31:d4:85:6e:70:
         1d:ba:79:e9:a6:4f:75:4e:2e:98:0f:e0:18:71:64:d7:09:e4:
         2b:a0:9a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:41:20 2025 by rpki-client