Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2f256c2b-8bcf-47b5-b2f5-6d84ff1d5fe9.roa
File:                     2f256c2b-8bcf-47b5-b2f5-6d84ff1d5fe9.roa (raw, json)
Hash identifier:          WT08yz6CsncvC/aZjWH356xDwDKEHxyr4eP4od7+hvE=
Subject key identifier:   E6:4C:CF:33:56:C8:F8:87:C6:DF:7A:2E:13:62:84:69:F9:4A:30:AB
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       2655E0577AE76FF323E066454C30D8515A5CDCF6
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2f256c2b-8bcf-47b5-b2f5-6d84ff1d5fe9.roa
Signing time:             Thu 23 Jul 2026 15:00:11 +0000
ROA not before:           Thu 23 Jul 2026 15:00:11 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:55:e0:57:7a:e7:6f:f3:23:e0:66:45:4c:30:d8:51:5a:5c:dc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jul 23 15:00:11 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=5ae2fe3eef23024aafbffbc2a90a2ea751258d9632fc267465ceb2897569eb24, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:b7:c0:b6:29:66:53:98:7c:51:6d:0e:f8:
                    f2:50:61:35:c9:3f:2c:17:5f:41:d8:18:4d:09:4c:
                    1d:c6:88:3d:31:94:e7:ca:1d:e9:4a:30:0a:ef:87:
                    48:20:9a:03:2f:2b:e5:33:0d:a3:39:e0:a1:cf:5a:
                    22:11:84:7c:13:0f:74:8b:cb:2b:eb:b4:a4:a0:d8:
                    60:70:1b:ce:3a:d0:44:22:f0:26:62:b1:4a:80:1f:
                    86:14:c7:c8:62:49:e7:59:53:96:64:52:d3:ec:5b:
                    82:97:9c:3e:0f:a0:61:88:1a:a3:80:e2:44:3f:1a:
                    0b:a9:7f:30:5c:5c:e8:c2:09:d3:eb:99:24:d1:34:
                    3b:40:14:b1:22:13:cf:c4:8d:cf:0a:df:02:31:02:
                    da:80:6a:14:1c:38:1b:5a:a1:fc:81:fd:08:cb:8c:
                    cf:9a:47:53:0a:86:b5:52:96:29:13:19:d1:a5:38:
                    69:32:c8:fd:06:d5:11:6f:91:4c:f7:1b:d5:75:80:
                    27:d3:4c:9a:ae:02:a2:6a:67:86:e9:67:b1:21:1c:
                    23:24:c6:48:57:98:60:4b:d8:67:9c:51:b0:ee:25:
                    d6:93:7b:d4:8f:8a:63:1a:34:48:b9:cf:7b:0b:b4:
                    31:3d:86:c1:9d:32:f7:f3:e2:7d:26:7f:fb:f3:03:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4C:CF:33:56:C8:F8:87:C6:DF:7A:2E:13:62:84:69:F9:4A:30:AB
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2f256c2b-8bcf-47b5-b2f5-6d84ff1d5fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:b9:71:12:15:2e:c3:07:0b:57:8e:76:0b:e0:31:b8:f7:2d:
         4c:2f:67:d0:fa:80:f2:e6:13:09:4a:76:ee:e7:0f:0a:d5:50:
         d7:c8:35:9c:61:1f:03:e8:b2:c6:1a:9f:ed:bc:4f:6e:fb:4f:
         d8:2d:48:e1:24:9c:00:9e:dc:c9:1c:9f:8c:ca:83:4c:25:6e:
         ae:b9:25:2e:21:1e:4c:f6:15:21:71:cf:2f:ea:d9:64:5b:d0:
         12:f0:48:8c:68:8d:ae:b6:d0:17:89:cb:3d:47:84:ff:34:8f:
         08:36:f2:3c:84:b8:0f:5c:99:22:48:cd:25:b8:5a:ce:4f:af:
         9a:ac:2d:55:df:0a:d9:aa:4f:3a:77:cb:f5:83:13:32:1e:4e:
         45:08:ee:41:80:3f:04:d1:72:a4:3d:3f:10:33:19:54:47:0a:
         ec:89:d2:95:05:c6:e1:61:0e:6c:63:c3:54:4e:30:6b:83:21:
         20:5b:d4:76:20:d5:95:06:b9:9b:36:22:f5:07:b8:1d:ef:cf:
         cd:51:84:6b:ca:6b:35:3e:f7:2d:5f:f6:9c:0e:ec:94:a6:04:
         65:0f:47:5a:63:0b:fc:03:8c:a2:79:e8:ff:37:02:f7:ce:02:
         00:73:dd:5a:b4:2c:0e:2e:f4:86:d2:8b:28:83:9a:f8:03:48:
         5d:25:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:37 2026 by rpki-client