Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d4c4477c-38ab-4e3a-a8ed-6942eb4ea062.roa
File:                     d4c4477c-38ab-4e3a-a8ed-6942eb4ea062.roa (raw, json)
Hash identifier:          bH0D4c0QMy0qEbcLt7tObWL+M5b4LBI4MXjuLuVnyhA=
Subject key identifier:   EA:94:4F:FE:5F:F3:2D:7B:9D:A7:19:5B:C9:BE:AB:B9:5D:E5:90:C3
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       6016722402CC917B8A3D045DB72DA029504651F8
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d4c4477c-38ab-4e3a-a8ed-6942eb4ea062.roa
Signing time:             Fri 08 Aug 2025 00:31:08 +0000
ROA not before:           Fri 08 Aug 2025 00:31:08 +0000
ROA not after:            Fri 12 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:16:72:24:02:cc:91:7b:8a:3d:04:5d:b7:2d:a0:29:50:46:51:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug  8 00:31:08 2025 GMT
            Not After : Sep 12 23:59:59 2025 GMT
        Subject: serialNumber=242620e3b0c8f4018a354a753d5489c6cd8a77ca657e467e0bf508a05a9f181d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:e9:58:63:fc:80:73:9e:44:fa:2d:02:ef:
                    4b:ba:b4:cd:1d:7e:4a:04:a6:f8:8d:9d:a2:c2:3b:
                    99:70:db:5e:7f:75:1e:4c:07:9d:f7:26:06:6a:2a:
                    2b:b2:77:3c:71:c3:7e:ae:35:fa:ef:7b:92:37:03:
                    1c:76:80:e1:c9:7f:d7:e0:cd:5a:af:81:17:bd:3c:
                    5d:ba:b9:91:99:58:e5:a2:31:c0:01:9c:b9:6d:d7:
                    2a:46:61:69:11:13:90:cd:db:c8:c4:8c:5a:64:6a:
                    f8:70:30:13:6c:58:59:b2:fc:86:27:83:4a:4b:ea:
                    fd:ef:97:d2:95:06:31:c0:82:db:d1:98:cc:05:7f:
                    60:66:4d:d0:d2:15:9b:56:4b:42:01:21:b1:a2:d8:
                    b1:75:31:82:ec:b8:ef:be:2e:c6:19:f0:33:0a:49:
                    29:53:d1:f3:01:94:da:07:92:8f:92:79:ae:36:16:
                    ba:95:8f:17:ce:c0:cc:32:74:97:bf:8f:cd:a1:66:
                    ef:5e:ba:ca:e1:5a:49:16:d1:67:f9:6c:31:30:33:
                    39:57:42:0b:b0:7b:ab:3b:17:5b:ee:20:96:08:da:
                    fc:1c:15:c8:cc:2e:86:9e:d2:de:d7:cf:32:24:fd:
                    12:a8:7d:18:14:60:b6:da:3b:e9:8f:60:14:9e:d7:
                    2a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:94:4F:FE:5F:F3:2D:7B:9D:A7:19:5B:C9:BE:AB:B9:5D:E5:90:C3
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d4c4477c-38ab-4e3a-a8ed-6942eb4ea062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:03:d9:eb:5e:f3:ca:2b:18:f8:26:4a:23:60:69:09:47:5b:
         56:66:e7:52:32:a5:a3:9c:44:7d:7c:af:74:83:19:43:7b:0a:
         6a:ae:8e:49:20:2f:e8:bd:f3:d4:24:5c:22:d5:9c:15:b2:28:
         c7:34:9c:01:52:4c:51:40:f6:48:55:db:96:84:70:f1:ac:d5:
         00:f6:f2:6e:ba:cb:27:f3:41:fd:f2:54:bb:7c:85:5f:ec:10:
         9c:ce:2f:a2:8b:b1:db:3f:cb:13:2a:cf:46:a1:47:7e:da:ec:
         c0:09:8d:4b:bf:fe:d1:40:32:ff:d6:42:85:c4:97:46:51:32:
         c9:d7:ac:a5:38:14:5c:8c:d3:30:c3:ce:0f:37:63:47:14:0d:
         53:98:63:62:d2:3b:dd:67:96:f5:17:cf:57:df:5e:30:76:b8:
         9e:0a:0a:9a:50:44:72:9e:51:dc:f8:1f:96:49:4d:d6:5e:c6:
         60:36:91:f6:42:f2:44:55:3b:0c:29:d3:ab:9d:16:99:2c:b3:
         be:f9:62:cc:16:bd:f7:1a:f0:71:36:d4:7c:bb:76:84:55:6d:
         29:80:90:8d:66:ca:91:9e:a7:3c:75:5a:51:18:4e:db:a5:3e:
         df:36:a0:41:02:75:7e:2f:ea:11:55:32:eb:41:ae:d4:47:62:
         3d:8d:38:a2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYBZyJALMkXuKPQRdty2gKVBGUfgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODA4MDAzMTA4WhcNMjUwOTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNDI2MjBlM2IwYzhmNDAxOGEzNTRhNzUzZDU0ODljNmNk
OGE3N2NhNjU3ZTQ2N2UwYmY1MDhhMDVhOWYxODFkMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdq+lYY/yAc55E+i0C70u6tM0dfkoEpviNnaLCO5lw215/
dR5MB533JgZqKiuydzxxw36uNfrve5I3Axx2gOHJf9fgzVqvgRe9PF26uZGZWOWi
McABnLlt1ypGYWkRE5DN28jEjFpkavhwMBNsWFmy/IYng0pL6v3vl9KVBjHAgtvR
mMwFf2BmTdDSFZtWS0IBIbGi2LF1MYLsuO++LsYZ8DMKSSlT0fMBlNoHko+Sea42
FrqVjxfOwMwydJe/j82hZu9eusrhWkkW0Wf5bDEwMzlXQguwe6s7F1vuIJYI2vwc
FcjMLoae0t7XzzIk/RKofRgUYLbaO+mPYBSe1yrFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6pRP/l/zLXudpxlbyb6ruV3lkMMwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2Q0YzQ0NzdjLTM4YWItNGUzYS1hOGVkLTY5NDJlYjRlYTA2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEjYBIwDQYJKoZIhvcNAQELBQADggEBABQD2ete88orGPgmSiNgaQlHW1Zm
51IypaOcRH18r3SDGUN7CmqujkkgL+i989QkXCLVnBWyKMc0nAFSTFFA9khV25aE
cPGs1QD28m66yyfzQf3yVLt8hV/sEJzOL6KLsds/yxMqz0ahR37a7MAJjUu//tFA
Mv/WQoXEl0ZRMsnXrKU4FFyM0zDDzg83Y0cUDVOYY2LSO91nlvUXz1ffXjB2uJ4K
CppQRHKeUdz4H5ZJTdZexmA2kfZC8kRVOwwp06udFpkss775YswWvfca8HE21Hy7
doRVbSmAkI1mypGepzx1WlEYTtulPt82oEECdX4v6hFVMutBrtRHYj2NOKI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:55 2025 by rpki-client