Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/816351d7-264c-4dde-b647-b477b194cfb6.roa
File:                     816351d7-264c-4dde-b647-b477b194cfb6.roa (raw, json)
Hash identifier:          CPMgSSRzue7jP8/ZoKGgyjEjfQcgoMrIP9hf8kLnCAc=
Subject key identifier:   55:53:AE:2B:94:1A:B9:00:C9:1B:7D:44:B7:AA:83:86:D6:8D:65:75
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       7645F211249347A75E05BFF5E4F74A88333A8E62
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/816351d7-264c-4dde-b647-b477b194cfb6.roa
Signing time:             Thu 16 Jul 2026 00:20:07 +0000
ROA not before:           Thu 16 Jul 2026 00:20:07 +0000
ROA not after:            Wed 14 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        35.96.0.0/12 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:45:f2:11:24:93:47:a7:5e:05:bf:f5:e4:f7:4a:88:33:3a:8e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Jul 16 00:20:07 2026 GMT
            Not After : Oct 14 23:59:59 2026 GMT
        Subject: serialNumber=53a2396ac682a298ad18e9727b45cca7863aee5fb897cd20236c48b036cf96bd, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:a8:0f:63:41:ac:e2:df:d1:b7:76:19:38:
                    98:5c:43:2c:40:54:1b:d4:11:d5:44:a9:d5:c2:60:
                    9d:8c:56:23:ed:86:14:00:52:85:5d:3c:45:59:2d:
                    95:03:77:d8:15:e1:05:17:34:8d:49:17:df:16:8b:
                    dd:5a:eb:f2:60:35:47:6c:c4:29:d8:06:f2:b0:da:
                    02:32:65:12:c3:b9:e9:26:c7:5d:17:b6:12:30:ee:
                    3a:24:32:0f:be:c4:51:11:3b:d8:45:c3:98:70:3b:
                    d4:c4:94:11:7a:d2:d2:68:f3:7e:a2:a4:86:c4:5e:
                    db:a5:4b:e9:11:f9:a9:41:c6:be:de:e4:99:21:21:
                    84:df:fa:5a:35:d9:9a:5b:07:0d:98:5e:6b:dd:de:
                    15:c5:1e:8e:b4:0a:60:43:55:5e:a7:54:01:08:5a:
                    2f:46:a9:f8:11:d5:16:21:01:eb:2e:23:9e:9b:ac:
                    e1:5d:9a:cb:0f:fe:48:ff:3f:08:e6:03:73:7c:31:
                    a6:64:45:3d:c4:ab:fd:70:e9:a1:a5:b2:9e:88:2f:
                    ad:e7:e1:1c:21:3e:9f:1b:f0:73:b9:29:f7:29:5f:
                    f8:11:96:d7:c0:7b:e6:b3:6f:fe:2e:c1:22:17:09:
                    b0:40:9e:0d:2e:33:bb:f0:72:05:e9:21:60:eb:84:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:53:AE:2B:94:1A:B9:00:C9:1B:7D:44:B7:AA:83:86:D6:8D:65:75
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/816351d7-264c-4dde-b647-b477b194cfb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         04:4d:dd:74:6b:19:fd:40:82:cf:06:fc:84:43:15:b4:c8:f3:
         ea:72:6b:e6:7f:7f:bd:54:18:3c:05:e2:02:83:fb:48:d2:86:
         94:fc:de:af:2c:2b:35:3d:6c:34:b8:2c:2d:b0:c4:b2:23:ce:
         f3:a1:ac:83:dc:95:11:b9:cb:e1:ea:79:df:35:21:61:5a:4e:
         5f:99:70:d0:2f:12:a7:ec:00:e1:37:3b:af:05:60:ec:81:89:
         bb:42:2a:0a:00:24:3a:22:f7:d6:34:19:b6:b4:4d:58:9e:c7:
         56:de:68:e5:2b:94:a6:e8:65:f3:95:d6:30:4a:6a:6a:1a:ac:
         ef:47:f5:8d:22:f5:29:d3:39:47:ee:50:bd:65:30:38:83:14:
         2c:50:5b:7a:75:24:36:2b:f5:c0:be:0a:62:8b:ea:31:76:57:
         cd:4f:12:2f:80:ab:1d:20:93:c7:85:3c:c3:2b:f1:97:6c:1c:
         b2:3a:30:12:48:a2:62:e2:68:00:4f:51:29:ef:ef:07:e0:6e:
         b5:44:ed:9f:51:ed:b1:6d:c3:f1:25:c7:6d:63:0d:d9:e7:5a:
         f3:75:37:b4:9d:aa:28:4f:33:4c:e4:da:77:01:4d:47:fd:96:
         e6:3e:01:08:47:1e:98:5f:48:e3:b3:29:3d:7c:52:2f:65:73:
         4c:7a:25:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:35 2026 by rpki-client