Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2b8a763-83e4-408e-854a-a2e9f68ca99e.roa
File:                     e2b8a763-83e4-408e-854a-a2e9f68ca99e.roa (raw, json)
Hash identifier:          NNW9qNZyBdtW6/qPmu7KCoIJZKB1nwZJI4p8E8PtvlU=
Subject key identifier:   25:68:8F:97:12:73:17:83:7C:C7:02:76:61:BB:57:C9:FF:B1:98:F4
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       34BBC236A9FE999266930C4BF91D387D22620B18
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2b8a763-83e4-408e-854a-a2e9f68ca99e.roa
Signing time:             Fri 13 Feb 2026 14:50:07 +0000
ROA not before:           Fri 13 Feb 2026 14:50:07 +0000
ROA not after:            Thu 14 May 2026 23:59:59 +0000
asID:                     801
IP address blocks:        35.96.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bb:c2:36:a9:fe:99:92:66:93:0c:4b:f9:1d:38:7d:22:62:0b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Feb 13 14:50:07 2026 GMT
            Not After : May 14 23:59:59 2026 GMT
        Subject: serialNumber=c0352c9ef8cfe2b5a97c20e78897e0b18b9336050767549b4f360794382cdd04, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:c4:1f:9b:38:3a:46:45:f8:52:0d:b0:3b:
                    6a:a6:b7:7c:43:f8:60:c8:38:83:9e:ef:e7:27:5c:
                    14:cb:4e:72:d6:c4:13:90:35:ff:1e:11:77:79:f8:
                    d0:0d:f2:b0:e9:b9:96:34:47:84:ca:26:d5:4f:03:
                    15:7d:a9:5d:1c:2e:aa:95:7f:d9:f2:52:5c:e7:95:
                    69:78:39:d1:66:1b:18:69:cd:2c:ea:71:0b:4c:cf:
                    bb:da:32:7a:fd:df:7e:cb:e3:1a:12:3a:73:25:9b:
                    ef:5a:a6:dd:cc:3d:d9:d2:d0:97:aa:98:e7:a9:4d:
                    3b:12:0b:86:9a:cd:41:af:02:0d:a7:9a:fb:e8:c3:
                    93:39:c0:3e:ab:22:33:b9:18:8c:41:e8:f7:92:d7:
                    1d:7a:95:ea:de:b9:9d:54:3c:ae:d9:72:d9:6b:d8:
                    c4:c3:2b:0c:2f:6e:3a:f3:fd:c4:85:c6:a4:ed:87:
                    7e:0c:26:d9:49:00:24:f3:3e:6e:34:11:71:cc:2e:
                    10:1f:b5:28:89:ad:f4:5f:c2:1f:d1:42:eb:16:3a:
                    12:70:c3:9f:09:7b:ab:30:57:e4:3d:cc:64:86:0c:
                    48:f8:56:3b:53:47:59:6f:0c:0b:28:9c:f0:c0:dc:
                    74:d8:45:bb:1b:c8:89:f6:e9:fc:4f:0b:5d:a2:16:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:68:8F:97:12:73:17:83:7C:C7:02:76:61:BB:57:C9:FF:B1:98:F4
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2b8a763-83e4-408e-854a-a2e9f68ca99e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:0b:88:1c:9a:ed:88:e6:03:8f:cc:a9:6b:eb:be:d4:8f:
         b8:f3:e0:35:9a:9b:f3:e6:2a:25:3a:2d:b7:bf:5d:9e:dc:e2:
         79:f3:cb:c2:5d:c8:8b:88:97:57:5f:4b:98:21:f1:65:fd:bd:
         05:bd:83:a9:a7:01:26:d9:41:f1:b7:98:d5:0b:ac:0a:de:7d:
         d1:14:a6:28:cf:e8:b9:de:04:09:0c:cc:5d:cc:66:83:dc:3d:
         d5:d2:db:70:3c:7e:b7:39:11:91:39:ab:d6:76:7c:79:34:2b:
         ba:18:f5:da:2e:3a:2b:c9:e3:c3:fd:e0:e9:a7:b6:24:c2:f1:
         1e:ae:fe:9e:b7:1b:c7:4a:aa:cb:fe:0a:1a:b7:07:91:0b:9a:
         ef:1c:c2:2f:f8:c9:ac:f3:7a:9a:1d:08:db:9d:c8:c3:00:3f:
         80:55:96:da:4b:b7:ca:88:98:ae:ef:62:71:7c:76:23:e8:bc:
         c0:d8:0c:84:4d:e3:06:f0:6c:b5:68:59:9b:92:80:5b:ea:01:
         ab:83:64:cd:f6:fe:74:26:80:78:6c:f6:53:3a:45:3e:4f:4d:
         0d:fa:5f:0e:11:f3:8d:c9:40:94:fa:db:92:b3:d6:c3:fc:6a:
         69:36:70:6f:7a:18:23:4f:2d:ea:29:fe:a6:c3:fa:8c:73:e8:
         b6:e2:76:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:27:39 2026 by rpki-client