Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e27e6217-4842-4b88-9d80-7bf4ac4b7ac9.roa
File:                     e27e6217-4842-4b88-9d80-7bf4ac4b7ac9.roa (raw, json)
Hash identifier:          YnNtag3mdBdgnWDeIeDm2lN61xQ+xNHwnsE2OBt8NTo=
Subject key identifier:   A6:7E:64:43:CA:38:5A:20:AD:99:C6:63:1F:D1:88:88:3F:0F:2C:1A
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       5681E0737DB83AB1FF7263F2FEFE29F4E496D5C2
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e27e6217-4842-4b88-9d80-7bf4ac4b7ac9.roa
Signing time:             Thu 22 Oct 2026 00:10:07 +0000
ROA not before:           Thu 22 Oct 2026 00:10:07 +0000
ROA not after:            Wed 20 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:81:e0:73:7d:b8:3a:b1:ff:72:63:f2:fe:fe:29:f4:e4:96:d5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Oct 22 00:10:07 2026 GMT
            Not After : Jan 20 23:59:59 2027 GMT
        Subject: serialNumber=eaf4c592af57200238343598fedd2567f4f9a17711471359e63976ab1019b22f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ef:88:38:b0:aa:28:d1:03:25:aa:0f:40:8f:
                    cc:38:e7:9f:07:1a:67:79:b6:14:ad:fe:ff:9c:33:
                    0b:e6:20:d9:91:c4:87:9f:f0:44:2b:a1:c4:c0:7a:
                    43:fe:71:c0:03:f9:0b:76:d2:f9:de:ed:b5:f1:60:
                    3b:74:aa:11:df:63:95:cb:8f:32:1d:da:64:29:5a:
                    05:a3:f9:2e:17:c5:e6:7d:d1:6f:ee:63:28:f8:30:
                    ba:6d:ad:23:8a:bc:97:4f:ca:63:10:09:4b:db:56:
                    1d:62:70:c6:1f:98:fb:a3:c7:a2:6a:40:45:2c:9e:
                    64:05:1a:3f:95:68:6d:57:cb:64:70:c9:43:db:08:
                    6e:40:17:92:87:d1:a6:82:1a:ac:20:45:e1:7e:0d:
                    85:ac:31:22:23:9d:1a:55:40:f2:5d:b3:fe:e2:a4:
                    bd:23:53:08:0e:73:3f:e1:72:69:21:69:8b:be:1d:
                    12:cf:fa:5d:1b:20:88:4d:ac:b3:7b:eb:54:d8:53:
                    fe:2b:65:c2:1a:63:4e:7d:35:47:25:15:93:54:58:
                    ae:45:19:5f:99:9c:44:8c:be:85:b5:8e:f8:6a:94:
                    35:14:21:e5:f5:dd:15:ec:ef:68:38:53:8d:58:81:
                    f7:2e:c9:07:a3:fd:38:9e:c4:d3:dd:1c:df:5d:44:
                    3d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7E:64:43:CA:38:5A:20:AD:99:C6:63:1F:D1:88:88:3F:0F:2C:1A
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e27e6217-4842-4b88-9d80-7bf4ac4b7ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:ac:82:62:e1:3c:e7:4d:e4:f5:f8:c8:4a:02:ce:87:1d:8e:
         9c:f8:36:07:45:b9:58:1d:90:1e:bc:e5:72:47:7f:03:4e:9e:
         bd:68:71:2c:48:22:78:8c:e8:24:1c:4f:f5:30:b0:e6:7d:3c:
         bd:f1:45:6e:5a:70:ce:be:2a:9f:de:85:26:e1:24:17:0a:76:
         fe:72:25:bc:c7:ce:c9:fd:7e:2c:f2:41:af:4b:e9:a1:3b:a4:
         be:93:15:0f:f7:a9:b9:51:fc:eb:d9:69:9f:19:c2:a1:80:b1:
         68:ce:65:e8:a3:48:fe:92:a1:55:df:e9:be:e5:23:fb:a0:86:
         d8:3a:45:95:f7:a3:86:f5:06:31:c6:24:9d:07:35:64:68:9a:
         fa:bc:55:7c:16:de:11:7c:86:a0:6c:19:07:cf:6b:8e:2e:a7:
         b5:83:bf:db:05:00:1f:f6:a5:3d:c2:ca:49:65:e0:cf:b2:0d:
         5b:74:3d:42:51:68:b7:2a:75:5c:66:05:9e:85:aa:63:91:7e:
         41:a2:68:c8:fb:fd:00:63:da:11:fb:ef:1d:6b:9a:80:18:ea:
         d2:49:80:a2:8b:15:4c:5c:3f:1a:01:dc:89:00:74:84:38:42:
         2a:a2:85:a3:f9:7d:a8:b3:52:4c:fd:4a:d7:b6:88:1b:ba:37:
         74:c0:3e:02
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVoHgc324OrH/cmPy/v4p9OSW1cIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDIyMDAxMDA3WhcNMjcwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYWY0YzU5MmFmNTcyMDAyMzgzNDM1OThmZWRkMjU2N2Y0
ZjlhMTc3MTE0NzEzNTllNjM5NzZhYjEwMTliMjJmMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCU74g4sKoo0QMlqg9Aj8w4558HGmd5thSt/v+cMwvmINmR
xIef8EQrocTAekP+ccAD+Qt20vne7bXxYDt0qhHfY5XLjzId2mQpWgWj+S4XxeZ9
0W/uYyj4MLptrSOKvJdPymMQCUvbVh1icMYfmPujx6JqQEUsnmQFGj+VaG1Xy2Rw
yUPbCG5AF5KH0aaCGqwgReF+DYWsMSIjnRpVQPJds/7ipL0jUwgOcz/hcmkhaYu+
HRLP+l0bIIhNrLN761TYU/4rZcIaY059NUclFZNUWK5FGV+ZnESMvoW1jvhqlDUU
IeX13RXs72g4U41YgfcuyQej/TiexNPdHN9dRD2lAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUpn5kQ8o4WiCtmcZjH9GIiD8PLBowHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2UyN2U2MjE3LTQ4NDItNGI4OC05ZDgwLTdiZjRhYzRiN2FjOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEjYBIwDQYJKoZIhvcNAQELBQADggEBAH+sgmLhPOdN5PX4yEoCzocdjpz4
NgdFuVgdkB685XJHfwNOnr1ocSxIIniM6CQcT/UwsOZ9PL3xRW5acM6+Kp/ehSbh
JBcKdv5yJbzHzsn9fizyQa9L6aE7pL6TFQ/3qblR/OvZaZ8ZwqGAsWjOZeijSP6S
oVXf6b7lI/ughtg6RZX3o4b1BjHGJJ0HNWRomvq8VXwW3hF8hqBsGQfPa44up7WD
v9sFAB/2pT3Cykll4M+yDVt0PUJRaLcqdVxmBZ6FqmORfkGiaMj7/QBj2hH77x1r
moAY6tJJgKKLFUxcPxoB3IkAdIQ4QiqihaP5faizUkz9Ste2iBu6N3TAPgI=
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:20:01 2026 by rpki-client