Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa
File:                     07bd3aac-7c97-429a-9a81-6751e4001f6d.roa (raw, json)
Hash identifier:          r+iphIsurSLy1rjGDU2MaDMrnWS4kC1zQLTGeWyAI0s=
Subject key identifier:   33:F2:B3:E7:7E:9A:70:FA:CD:44:39:74:2C:63:1D:A0:32:EF:12:2A
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       22915247838ADCAA8E4B624855F7064648533EFC
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa
Signing time:             Fri 26 Sep 2025 18:00:16 +0000
ROA not before:           Fri 26 Sep 2025 18:00:16 +0000
ROA not after:            Fri 31 Oct 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:91:52:47:83:8a:dc:aa:8e:4b:62:48:55:f7:06:46:48:53:3e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Sep 26 18:00:16 2025 GMT
            Not After : Oct 31 23:59:59 2025 GMT
        Subject: serialNumber=7daf18c7fb86c70ace61db38fa89a470d16bdfffdccb00ce69f3f575f4e024ea, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:d1:80:d4:ea:71:3c:ef:c6:c3:76:fb:92:
                    c1:34:2b:38:02:0c:50:c6:d7:bb:ed:db:31:02:fb:
                    6c:4d:6a:4b:af:df:54:ab:bd:87:91:ea:da:54:7d:
                    a0:66:2e:57:a7:bd:bc:38:89:8d:1a:aa:82:2e:0a:
                    6b:d4:b6:23:21:f1:9f:49:c4:c9:2e:a6:8d:c1:b9:
                    9b:08:ec:02:f2:b0:92:cb:82:05:e1:5a:05:08:19:
                    48:5c:11:3f:10:eb:0c:dc:47:aa:cd:b2:b9:b0:62:
                    64:dc:66:13:35:68:b9:06:61:29:80:ba:e6:d9:0f:
                    8a:8d:30:48:6e:67:e6:d2:bc:4d:f7:fa:3b:f7:3b:
                    ce:18:4f:d3:d8:07:6e:53:8b:4f:46:47:7e:d2:71:
                    d6:4d:93:05:c2:cf:40:ee:0c:f5:bb:c9:55:89:78:
                    3b:ea:86:c9:cf:c3:60:83:1f:0f:ab:b2:fc:bd:94:
                    63:dc:cc:b1:96:46:db:3e:0b:6f:ef:cf:25:d0:84:
                    e4:b4:f1:d1:5b:9d:49:33:3b:c9:7b:da:36:9a:86:
                    7c:fd:69:42:8c:e4:52:56:54:c3:fb:bb:47:48:ab:
                    a0:48:41:49:81:19:ee:74:b0:82:34:5c:80:de:76:
                    4b:96:37:10:91:17:91:af:76:89:2f:81:c2:3f:72:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:B3:E7:7E:9A:70:FA:CD:44:39:74:2C:63:1D:A0:32:EF:12:2A
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:e3:a9:ba:6f:4c:e1:c6:03:d9:ed:ff:53:92:c4:17:f4:93:
         d4:6e:08:bc:2c:c4:67:91:31:d5:1b:da:93:50:41:b3:a0:9b:
         6c:93:fb:ef:97:79:31:2c:9d:d8:a4:6c:f5:29:ea:e9:0a:5b:
         ee:f8:1e:1e:52:7e:62:1e:e2:a5:55:9c:a8:6d:52:9c:5b:39:
         21:c8:7d:04:01:aa:8b:51:3d:e7:a1:5d:2e:95:f7:8c:32:83:
         39:1a:cd:97:b9:04:94:b2:a5:06:97:c4:30:d7:71:a6:46:d4:
         5c:9d:3d:18:b4:1d:da:a9:74:67:01:d2:b2:d0:34:a7:fa:67:
         b2:c4:c9:b0:bc:76:2b:e3:32:c4:02:be:6b:5c:94:fc:9f:90:
         b5:5b:b3:4e:1d:6d:70:28:82:07:f9:dd:1b:10:2c:05:7c:31:
         01:34:c3:18:14:4b:f9:43:9d:c0:45:b8:3a:2f:d0:b3:9b:a0:
         96:38:0d:70:43:d9:94:74:96:8b:71:5d:d6:25:29:cd:f5:2b:
         5d:47:5b:50:dc:c0:88:9e:e0:c2:a7:2a:d7:15:e8:b6:0c:ad:
         8a:eb:db:b2:c2:39:46:6c:40:92:25:51:a3:61:d2:74:77:fb:
         a3:15:98:f8:00:54:6f:31:73:3a:01:61:77:dd:1d:98:5b:fd:
         cc:e3:37:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:46 2025 by rpki-client