Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2f256c2b-8bcf-47b5-b2f5-6d84ff1d5fe9.roa
File:                     2f256c2b-8bcf-47b5-b2f5-6d84ff1d5fe9.roa (raw, json)
Hash identifier:          HJob4+Hq735ByXWI5TKLDOD2BxPWwIIRSqjuLKdoHBU=
Subject key identifier:   E2:FC:A9:C0:43:C3:48:8F:56:AC:DD:0E:09:40:33:7E:6F:24:EE:67
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       31CAD0C02595AB60015CAC799427F36C8D151B0F
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2f256c2b-8bcf-47b5-b2f5-6d84ff1d5fe9.roa
Signing time:             Fri 15 Aug 2025 15:30:55 +0000
ROA not before:           Fri 15 Aug 2025 15:30:55 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ca:d0:c0:25:95:ab:60:01:5c:ac:79:94:27:f3:6c:8d:15:1b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug 15 15:30:55 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=7de2516e07394de12e6a74e7fde0893171838839b18d26b9f638184f52fe2e75, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:79:36:ba:8e:4a:5d:31:4e:dc:77:18:d7:a5:
                    df:dd:86:eb:90:43:f5:d3:d4:1f:13:27:2a:8d:2f:
                    6b:c7:84:fa:69:aa:2f:78:fa:76:2c:fc:3d:58:b8:
                    1e:31:6b:56:d5:37:94:9b:3a:37:24:70:b1:bb:a9:
                    7d:df:6c:d9:75:f3:b0:d0:70:6a:ee:16:1a:52:f6:
                    1f:17:f8:f8:3e:9f:ae:86:0c:01:c5:55:16:eb:1d:
                    bd:4e:6d:e4:89:f0:6a:3a:de:92:94:36:0e:c4:ed:
                    06:90:2a:60:fb:a8:60:cb:bd:83:4a:9f:47:7a:5e:
                    1e:3f:df:83:22:ac:85:2e:3c:66:cf:0a:7f:9d:c5:
                    f2:7e:77:09:c9:9c:fe:69:03:06:ce:17:5f:4f:6e:
                    ae:67:81:5a:a3:54:11:19:a2:f4:09:fc:ac:75:84:
                    7c:4e:32:80:a3:fd:68:99:e3:d9:c0:2d:92:10:0c:
                    bd:ce:ca:fd:1d:40:c4:23:de:ec:47:8a:38:38:2e:
                    52:9c:39:a3:e4:1e:f2:5a:bd:33:23:c0:75:0b:09:
                    e3:ca:de:9d:71:a3:54:bd:65:ee:01:6c:44:02:8b:
                    42:71:ac:66:40:09:fa:3d:78:c1:9b:ce:67:c0:a8:
                    36:ab:d5:df:36:96:49:3d:e7:15:1c:95:bc:e0:58:
                    12:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FC:A9:C0:43:C3:48:8F:56:AC:DD:0E:09:40:33:7E:6F:24:EE:67
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2f256c2b-8bcf-47b5-b2f5-6d84ff1d5fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:72:3b:b4:83:cf:3f:e8:73:0b:1f:86:fc:2e:ae:2d:49:07:
         8e:5a:06:c1:1a:9f:bd:4f:6e:d4:6f:ea:e2:20:8d:e9:80:a7:
         09:a2:6c:dd:9d:84:1c:14:b3:8f:6e:3b:e5:60:43:7e:ec:6e:
         76:93:66:5f:c8:4e:88:f2:1d:ed:01:5f:c2:45:c9:22:26:0a:
         b2:73:1d:98:e9:47:77:80:f3:a2:38:c8:2f:3c:f0:69:59:ff:
         19:3c:95:ab:56:79:5b:76:94:a3:32:76:9f:c5:f0:b9:98:0e:
         c3:e0:a4:44:22:b4:3e:52:6d:96:98:14:e9:27:4c:c9:79:78:
         86:03:3f:a1:bc:1e:72:e1:18:83:c6:20:06:8d:3d:5b:e3:b5:
         ee:48:64:07:87:13:26:bf:51:45:56:0e:42:be:62:35:61:0e:
         e9:4c:5f:e8:eb:36:87:b7:04:19:16:d8:b0:97:60:80:05:e4:
         9c:a7:1e:b5:6b:80:2e:14:6a:8e:27:67:7c:ac:1e:78:0e:6d:
         d4:78:e8:b9:e1:66:6c:69:72:a2:79:3f:ea:fc:d6:3e:9d:5f:
         36:09:61:d7:dc:d6:e6:38:5d:22:e1:bd:a3:a4:1b:dc:48:eb:
         a5:c5:04:4c:71:ee:71:40:48:71:31:20:d2:7e:d3:16:47:23:
         32:6e:51:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:01:24 2025 by rpki-client