Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd032031-9fc2-4a6b-8d1d-6eb21a5f8258.roa
File:                     dd032031-9fc2-4a6b-8d1d-6eb21a5f8258.roa (raw, json)
Hash identifier:          tuLrwpbKuOIq5ZNlVVO35B3Y79E5jyReKL4YoPsB2eU=
Subject key identifier:   08:8B:63:69:81:3F:2C:6C:C3:57:1E:EC:B6:50:91:7B:A8:42:22:EB
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       26445AEE386679B61C2BB7A036703198CDEDA798
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd032031-9fc2-4a6b-8d1d-6eb21a5f8258.roa
Signing time:             Thu 26 Feb 2026 02:00:09 +0000
ROA not before:           Thu 26 Feb 2026 02:00:09 +0000
ROA not after:            Wed 27 May 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:44:5a:ee:38:66:79:b6:1c:2b:b7:a0:36:70:31:98:cd:ed:a7:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Feb 26 02:00:09 2026 GMT
            Not After : May 27 23:59:59 2026 GMT
        Subject: serialNumber=87bc30b28c5fedaade02f6219d5199d5666ff445744d588126b4c302ca941990, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:89:77:bb:2c:52:8b:b1:87:1b:4d:33:02:
                    b8:30:db:76:d5:e8:4a:99:01:d9:60:dd:e8:0c:9d:
                    5f:30:f8:b7:80:ef:07:11:bf:e8:d5:dd:14:b3:60:
                    cc:e1:9b:b6:1f:ae:8c:e5:1d:f9:a6:f4:37:a6:3e:
                    e6:69:6b:db:5a:54:c1:92:f4:e1:4b:98:ec:cd:55:
                    b9:95:16:3d:66:a1:e3:b5:1c:06:39:70:db:76:ad:
                    6b:fd:92:e9:59:84:8b:b1:a7:35:66:2b:8a:94:8f:
                    45:c3:71:31:89:54:24:3e:4c:53:6d:4b:8b:a8:49:
                    3e:c4:4e:f6:e1:fd:1a:5b:b4:a4:4a:fc:ac:a6:14:
                    8c:c4:3b:a9:67:c7:da:cb:39:a6:d1:2d:07:3d:35:
                    85:1f:d7:64:17:76:77:74:d3:ec:d4:60:17:b9:6f:
                    1c:cc:3f:2a:e3:a5:d9:34:59:eb:b0:12:ec:74:ad:
                    ab:00:e0:90:6d:20:98:29:15:af:8e:4a:dc:aa:5e:
                    cc:3a:59:ab:a2:a0:4c:1e:f5:5f:be:dc:72:69:a9:
                    34:6b:20:50:f5:c6:bd:b6:62:52:94:a1:42:a6:e9:
                    19:c7:e9:71:65:8c:49:99:2e:b4:a8:4a:1c:71:7b:
                    de:3b:db:c5:d9:5b:73:d0:d6:d6:db:c6:fe:97:46:
                    e8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8B:63:69:81:3F:2C:6C:C3:57:1E:EC:B6:50:91:7B:A8:42:22:EB
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd032031-9fc2-4a6b-8d1d-6eb21a5f8258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:59:89:e7:88:99:4a:e5:d5:cf:84:08:5b:6f:b5:c4:09:b2:
         65:0e:62:b4:9f:b0:62:6d:15:2e:dd:e1:c8:c5:ab:a1:1f:2b:
         0a:87:c4:34:28:7a:b7:f2:36:1a:6c:c2:3a:8c:9d:29:bd:4c:
         64:61:d5:d2:a1:91:40:9b:57:70:69:9f:51:58:a8:21:2a:5a:
         a1:8a:aa:ec:2c:59:a7:37:c1:39:2d:94:a5:2b:18:7b:80:d7:
         f5:b3:bf:69:80:f0:e4:8a:f9:c4:ba:7c:28:cd:e1:74:5f:8d:
         05:b0:95:e5:07:1e:8c:6c:ff:ec:bf:af:66:03:62:5e:96:b7:
         d1:29:10:15:ee:75:b4:d2:46:d0:1b:64:61:44:3a:00:63:aa:
         51:48:52:de:e2:08:e3:65:74:5d:93:10:ca:bd:7d:3c:ad:ea:
         76:55:74:21:ae:0d:38:b4:75:59:27:a2:1a:fa:50:12:f9:56:
         ce:e6:c5:8e:ac:3c:07:d8:f7:01:26:fb:b4:8b:2e:a2:0d:c5:
         1f:e4:51:05:1c:6b:57:5f:7f:79:ce:4c:fa:95:e8:98:95:19:
         e3:7c:e6:3c:4d:73:53:18:e0:f6:e0:1c:77:65:b8:c6:98:3d:
         7c:9c:28:a1:6a:05:06:64:05:8a:bf:cc:b4:3d:57:b3:14:83:
         f9:ac:09:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:18 2026 by rpki-client