Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/27feea1a-4933-4577-b9c4-9488e2a550f0.roa
File:                     27feea1a-4933-4577-b9c4-9488e2a550f0.roa (raw, json)
Hash identifier:          skl5bKHBirEZqzSC2lge9jhWP35LHSrh9yo4madfOwg=
Subject key identifier:   C0:1F:A7:84:7D:CA:5C:50:B3:7D:05:8A:86:F4:2C:33:7B:85:3D:64
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       1731171CFDC657BD3C12CFEE9A1E99E9C9764A57
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/27feea1a-4933-4577-b9c4-9488e2a550f0.roa
Signing time:             Fri 08 May 2026 03:10:11 +0000
ROA not before:           Fri 08 May 2026 03:10:11 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:31:17:1c:fd:c6:57:bd:3c:12:cf:ee:9a:1e:99:e9:c9:76:4a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May  8 03:10:11 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=a2a82318510a5f73712472aeb99e1000189857ca62b2792411d788b666f6fc88, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ae:b9:7d:78:f9:f0:14:cb:17:b3:74:8a:8e:
                    04:e1:63:41:32:0f:dc:6b:f3:6c:e6:3f:cd:0b:c2:
                    56:23:bf:b1:97:41:36:fd:56:d8:68:77:3f:50:ef:
                    e8:52:2c:6c:22:55:d0:87:d1:87:d0:93:f3:b8:d4:
                    c9:d7:c0:48:24:93:84:b3:80:54:27:32:ea:bd:d9:
                    49:4e:4a:9a:b7:0e:7f:62:92:20:d5:c2:c6:2b:f4:
                    2f:a9:5a:a6:ef:c2:7d:d4:7b:f9:93:d4:8f:e0:b7:
                    23:ed:15:5e:77:dc:d2:38:88:7d:d8:a3:21:dc:b7:
                    c2:69:fb:ef:da:cc:8b:ae:3d:5e:63:8b:d1:51:68:
                    cc:9c:be:ef:36:76:9a:42:09:1c:50:1a:f6:a7:64:
                    34:a9:23:86:51:52:76:75:ed:cf:3f:91:48:a5:44:
                    c1:6f:3e:d6:03:d2:38:5b:1d:0b:0f:a2:98:4b:cc:
                    91:58:4e:75:a6:6e:7f:f4:12:09:f0:1a:2f:b3:10:
                    9a:e7:59:73:ad:fc:77:f5:59:b1:37:9e:a0:ea:9e:
                    6f:be:5a:1f:88:af:e0:5a:65:a4:8b:d8:9f:b8:0f:
                    a9:b3:e9:83:a8:c2:d6:a4:5f:a6:33:2d:64:2e:83:
                    a6:16:bd:11:ab:8b:bd:22:05:46:3e:c8:04:e8:9f:
                    1a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1F:A7:84:7D:CA:5C:50:B3:7D:05:8A:86:F4:2C:33:7B:85:3D:64
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/27feea1a-4933-4577-b9c4-9488e2a550f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:45:06:5a:81:c1:88:ad:6c:c9:f6:16:8e:61:b9:30:c6:11:
         d7:20:8b:58:49:1d:f0:cf:a6:00:2c:b6:1f:76:84:23:cb:b1:
         ba:4c:3e:a3:80:b6:69:a6:d4:55:e9:c9:c0:92:f6:57:75:cf:
         37:a6:52:27:a7:fb:57:58:d3:4b:23:80:2b:96:5e:84:05:1c:
         ed:f9:ba:0a:8a:38:8e:22:c8:91:cd:d4:87:a8:76:df:11:c7:
         c2:b2:ac:5f:5c:73:14:12:a4:99:88:c9:e1:d0:56:82:51:10:
         f5:98:6c:4f:67:83:33:54:37:98:df:44:12:11:ac:31:6c:a1:
         05:bc:15:44:25:a4:71:87:dd:5f:19:f8:f6:4e:f6:f0:2e:c6:
         70:ad:5a:c2:1d:c3:bd:78:c6:77:79:65:f9:16:ba:fc:26:93:
         a3:e4:cd:4b:20:fc:02:cf:13:29:11:a3:9e:77:05:22:cc:6b:
         fb:35:ce:6c:fc:a1:50:64:d6:3b:21:3b:f6:e9:96:56:15:4f:
         c5:48:2d:95:84:a1:6b:52:3b:00:13:ea:3b:2d:d6:e2:2c:61:
         38:58:5e:a5:72:2a:dc:bf:6f:b2:ca:40:76:bd:d1:4b:09:1a:
         00:57:98:6b:a7:37:b9:0a:7a:fc:a6:9b:45:88:63:e7:60:d4:
         2f:4f:5e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:04 2026 by rpki-client