Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b5f3fac7-c07c-40ba-a2a2-3cdee505a284.roa
File:                     b5f3fac7-c07c-40ba-a2a2-3cdee505a284.roa (raw, json)
Hash identifier:          JIPAeFtQ9kcJFhKltofIaTnjDo2pL9BHiu+RUcbqV/A=
Subject key identifier:   CF:9E:F8:F0:53:E1:8F:AF:AC:0C:D2:FC:ED:59:F8:B4:35:50:38:50
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       05374F97E8E00EB0DF09C9E0ADAD9E7067395794
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b5f3fac7-c07c-40ba-a2a2-3cdee505a284.roa
Signing time:             Mon 04 May 2026 15:00:10 +0000
ROA not before:           Mon 04 May 2026 15:00:10 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     801
IP address blocks:        35.96.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:37:4f:97:e8:e0:0e:b0:df:09:c9:e0:ad:ad:9e:70:67:39:57:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May  4 15:00:10 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=90eebc52b62b6e5e39a0b1031a79d06e5dc3e11c606dbf0d90a15faafecad981, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:89:f8:68:d3:48:69:88:a1:ce:59:5a:45:d3:
                    aa:f9:39:80:9d:04:9b:e5:1e:c3:3c:02:f1:82:bf:
                    16:3a:01:32:d1:9b:bd:e8:e4:d3:4d:90:af:69:61:
                    7e:de:19:b8:db:1a:91:c3:8f:9b:bb:a5:22:92:5e:
                    29:e9:56:15:d2:e0:af:e1:2d:1c:ab:e6:c7:19:0c:
                    ae:91:5a:b7:9d:81:41:19:5d:c1:73:c8:cb:4e:70:
                    1c:0e:ed:e5:f4:76:ee:2f:3b:8b:20:49:f6:5b:57:
                    ff:e2:33:aa:b9:f7:99:b0:f1:b2:57:0e:35:07:e2:
                    2a:89:63:30:ed:a5:2c:61:05:f9:27:e8:e9:e3:a9:
                    36:7c:0a:2a:4f:1a:30:ca:5f:90:b3:c0:f5:ff:1b:
                    97:b0:64:d5:ad:45:6d:95:67:7e:51:76:ce:f2:1e:
                    14:2d:12:f5:ec:7d:29:21:d9:6e:29:f0:eb:85:e6:
                    b7:b3:fc:51:63:8e:4c:24:bc:b6:47:b7:5b:46:5f:
                    0b:23:aa:64:0b:f5:8b:a6:bf:08:7d:4b:92:70:2c:
                    68:fd:3b:b1:f4:1e:89:da:74:5b:0c:c7:2b:ba:fc:
                    93:56:0c:d1:c9:e7:9e:44:7d:bc:e3:43:f0:fd:7b:
                    10:fd:d6:d8:6e:32:2a:02:9d:32:9b:41:71:a1:f9:
                    37:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9E:F8:F0:53:E1:8F:AF:AC:0C:D2:FC:ED:59:F8:B4:35:50:38:50
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b5f3fac7-c07c-40ba-a2a2-3cdee505a284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:8b:c8:80:a3:14:70:10:72:36:25:d0:aa:66:f1:1e:48:5a:
         d2:95:86:0e:dc:cd:37:07:55:d4:c7:a9:ce:8b:81:b1:e6:9a:
         ce:6e:2c:78:45:dc:31:53:bf:64:1f:da:9e:19:8c:29:f2:21:
         5b:51:c7:7a:f5:5e:09:a1:2b:d8:48:ed:3e:fa:dc:75:25:35:
         ff:1b:45:af:62:ce:1c:a6:2d:f0:9d:75:69:c7:48:5b:7f:6f:
         1e:a3:11:38:b2:ce:7a:ec:d8:b9:95:89:8d:2d:32:8c:4d:ba:
         84:ad:e5:1c:86:c8:dc:b3:40:93:4b:6f:d5:f2:c1:96:2b:0b:
         b3:84:3c:f7:c8:c5:f4:a1:0c:2c:f6:93:1b:a2:51:6e:73:f1:
         21:b0:f7:31:31:b2:33:df:f2:b5:9b:d4:28:20:91:04:94:a5:
         5b:9f:45:7a:33:e8:ed:d1:b4:a8:4a:1a:b8:51:2c:c1:2a:26:
         9b:7f:36:28:a1:27:ce:78:f1:c2:53:02:17:f3:f2:fa:16:11:
         7e:21:d3:b1:63:bf:f9:90:7e:6a:12:6c:57:de:61:b6:3c:c0:
         3d:40:73:a4:bb:af:ef:fb:82:93:31:72:19:0d:ab:ff:48:43:
         16:d5:5c:78:9f:8a:58:1d:24:66:37:bd:60:d0:d0:cd:50:08:
         33:97:49:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:42:52 2026 by rpki-client