Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f106bd1f-1175-4eda-af94-f788dab09805.roa
File:                     f106bd1f-1175-4eda-af94-f788dab09805.roa (raw, json)
Hash identifier:          Ot5zfNfl7VlPSd3XcWFwtTHNotW0XRNcbK0RY9Ln+oU=
Subject key identifier:   5C:D7:54:DD:DB:3A:EF:9D:BB:08:D8:03:4A:20:BC:3F:BC:95:C9:0B
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       245851841380CC6F3301EA3773D15A90CB363D92
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f106bd1f-1175-4eda-af94-f788dab09805.roa
Signing time:             Sun 17 May 2026 01:50:32 +0000
ROA not before:           Sun 17 May 2026 01:50:32 +0000
ROA not after:            Sat 15 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:58:51:84:13:80:cc:6f:33:01:ea:37:73:d1:5a:90:cb:36:3d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May 17 01:50:32 2026 GMT
            Not After : Aug 15 23:59:59 2026 GMT
        Subject: serialNumber=897c0986856d8e81bf5890cdfb79fe5a3622d488c06788dcdf20fc3ee93e9d14, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f9:1e:30:18:cc:5a:a6:27:e3:2e:5e:07:e9:
                    a7:a6:e2:dd:12:cd:86:10:19:08:ed:e4:b2:7b:7d:
                    5b:49:d5:3d:49:47:cc:39:c5:cc:69:9f:d0:2b:ce:
                    d4:fe:99:ca:a2:45:03:43:c4:98:ca:77:99:40:55:
                    5e:63:b2:8d:c7:08:e1:f3:50:6e:90:b1:78:1a:bd:
                    56:2d:f0:c9:bb:d4:5a:25:a2:3e:47:9c:02:39:97:
                    61:ff:d0:51:8e:f0:23:e7:9d:fd:5c:9c:b2:53:15:
                    20:cb:49:0b:31:71:95:5c:44:5b:23:40:d1:02:23:
                    d5:fd:6a:46:98:48:19:8a:db:5e:bb:bf:5c:42:2a:
                    0a:bc:2d:94:28:fb:79:1a:00:b8:cb:57:a3:a2:33:
                    c2:8a:e3:8a:60:3a:7f:c7:1a:a1:e8:28:8c:16:e9:
                    74:68:5d:60:84:4c:f9:95:9a:98:2b:e3:c9:83:a8:
                    3a:60:fb:57:2c:ef:0a:ab:ed:c9:b6:a4:f0:6c:56:
                    3e:6d:2a:3b:42:8b:c4:61:6a:b8:7f:cf:3c:67:7a:
                    2d:3b:fb:3d:02:56:37:52:2c:3a:6b:09:16:91:64:
                    00:eb:16:15:87:69:5a:4f:f2:b2:f1:d6:6d:7b:80:
                    1c:44:83:02:c5:6e:8c:65:db:ed:1d:69:49:a2:a6:
                    c4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D7:54:DD:DB:3A:EF:9D:BB:08:D8:03:4A:20:BC:3F:BC:95:C9:0B
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f106bd1f-1175-4eda-af94-f788dab09805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:b6:4a:b7:53:c6:8f:87:5a:f8:a0:7d:4d:4e:11:fd:3a:3a:
         b2:d0:4b:3d:34:03:1a:70:12:f6:a5:40:cd:8c:a8:f1:0f:ca:
         40:77:74:fb:71:b0:75:bc:61:cc:39:40:3c:bc:81:36:cd:b0:
         ef:b7:1e:bf:ae:9a:73:e3:db:03:87:18:38:38:6a:af:4c:9f:
         40:1b:e4:22:2d:b1:8e:57:b6:4f:84:22:1c:39:66:d9:0a:5b:
         cd:a3:a3:22:e9:d1:fa:31:d3:0d:c9:6b:a9:47:29:30:fe:aa:
         3c:b4:c4:c4:df:98:27:32:1a:c1:57:2d:e9:2b:03:bb:4a:56:
         ca:6f:80:26:dc:51:cf:10:54:76:16:d1:40:d0:d2:3c:9d:19:
         67:00:0c:59:5f:09:56:1f:0b:06:ef:2c:8a:d3:2c:ea:44:c0:
         a3:5f:02:a8:65:e1:ae:a4:1c:dc:37:80:ab:9e:66:fc:c7:25:
         0c:2e:90:f1:a0:da:cd:c9:38:de:45:06:3f:19:56:ed:71:30:
         ae:3f:58:fc:ea:cb:e0:c2:14:2c:ea:8e:21:1d:86:86:db:51:
         f2:1a:32:90:81:2c:36:7e:cc:4a:cc:d2:9a:47:0c:6e:93:01:
         e5:74:20:0d:18:57:9b:b0:62:81:ce:e2:de:11:23:4e:f5:c7:
         cc:52:0d:36
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJFhRhBOAzG8zAeo3c9FakMs2PZIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTE3MDE1MDMyWhcNMjYwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4OTdjMDk4Njg1NmQ4ZTgxYmY1ODkwY2RmYjc5ZmU1YTM2
MjJkNDg4YzA2Nzg4ZGNkZjIwZmMzZWU5M2U5ZDE0MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCz+R4wGMxapifjLl4H6aem4t0SzYYQGQjt5LJ7fVtJ1T1J
R8w5xcxpn9ArztT+mcqiRQNDxJjKd5lAVV5jso3HCOHzUG6QsXgavVYt8Mm71Fol
oj5HnAI5l2H/0FGO8CPnnf1cnLJTFSDLSQsxcZVcRFsjQNECI9X9akaYSBmK2167
v1xCKgq8LZQo+3kaALjLV6OiM8KK44pgOn/HGqHoKIwW6XRoXWCETPmVmpgr48mD
qDpg+1cs7wqr7cm2pPBsVj5tKjtCi8Rharh/zzxnei07+z0CVjdSLDprCRaRZADr
FhWHaVpP8rLx1m17gBxEgwLFboxl2+0daUmipsQFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXNdU3ds67527CNgDSiC8P7yVyQswHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2YxMDZiZDFmLTExNzUtNGVkYS1hZjk0LWY3ODhkYWIwOTgwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYCUwDQYJKoZIhvcNAQELBQADggEBADO2SrdTxo+HWvigfU1OEf06OrLQ
Sz00AxpwEvalQM2MqPEPykB3dPtxsHW8Ycw5QDy8gTbNsO+3Hr+umnPj2wOHGDg4
aq9Mn0Ab5CItsY5Xtk+EIhw5ZtkKW82joyLp0fox0w3Ja6lHKTD+qjy0xMTfmCcy
GsFXLekrA7tKVspvgCbcUc8QVHYW0UDQ0jydGWcADFlfCVYfCwbvLIrTLOpEwKNf
Aqhl4a6kHNw3gKueZvzHJQwukPGg2s3JON5FBj8ZVu1xMK4/WPzqy+DCFCzqjiEd
hobbUfIaMpCBLDZ+zErM0ppHDG6TAeV0IA0YV5uwYoHO4t4RI071x8xSDTY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:21 2026 by rpki-client