Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ecc15691-9732-4fda-b2d1-5ad157c2818e.roa
File:                     ecc15691-9732-4fda-b2d1-5ad157c2818e.roa (raw, json)
Hash identifier:          Jaz6XwANpfeQwt6DQUr8ngle0nL5BxliWDvbWhCRIbc=
Subject key identifier:   E5:48:06:6F:30:8E:A9:5E:BD:88:CE:5A:A6:7E:0F:3B:8E:7C:D4:59
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       7737108ED2033B0C4123F8A1202DA51E4E72C6B2
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ecc15691-9732-4fda-b2d1-5ad157c2818e.roa
Signing time:             Fri 08 May 2026 03:10:12 +0000
ROA not before:           Fri 08 May 2026 03:10:12 +0000
ROA not after:            Thu 06 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:37:10:8e:d2:03:3b:0c:41:23:f8:a1:20:2d:a5:1e:4e:72:c6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May  8 03:10:12 2026 GMT
            Not After : Aug  6 23:59:59 2026 GMT
        Subject: serialNumber=282cc18f2ee6a456c8d44a4855a124f08002f00f81b9d44ac8345439a162feee, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:78:b2:93:2d:a0:40:35:27:ac:bb:6c:0e:
                    77:c4:ad:d4:00:37:ad:95:6a:a7:4f:ff:d0:1e:8f:
                    a9:f8:97:22:64:17:79:cd:d6:7f:77:2d:29:4b:3f:
                    42:ee:9b:11:d2:f7:1f:79:80:60:68:ee:a3:bd:1a:
                    7c:31:bc:3f:5b:d7:56:b3:1a:2a:a0:a6:6f:3f:0f:
                    dc:6f:93:77:8e:b0:69:4c:b1:af:6c:ad:14:8a:dd:
                    03:f9:a8:97:48:a1:58:f2:47:9c:97:ea:86:75:2d:
                    1f:ee:2e:fa:fe:7e:2f:ff:f9:5b:53:90:42:6d:e0:
                    1c:a9:87:39:66:09:2a:f3:67:81:d3:d9:51:b4:58:
                    05:12:80:c5:d7:4a:26:80:a6:5f:36:ee:8a:f0:62:
                    14:b1:29:2c:40:06:33:00:9b:23:d9:86:cd:85:ab:
                    c5:e3:e2:58:f8:cc:ea:2d:20:fb:e4:eb:88:70:43:
                    3d:3a:85:66:73:c9:f2:a7:01:a7:17:4d:64:b1:10:
                    12:42:19:9d:00:bd:c8:57:e8:6e:95:5b:47:1f:48:
                    c7:9b:93:08:2d:59:fa:58:49:c2:5a:cb:3e:4b:1e:
                    6b:d0:a7:2e:9f:40:8f:16:32:52:41:0b:30:dc:b4:
                    30:e0:13:bc:e3:c6:d5:c1:12:97:7c:3b:c8:41:fb:
                    93:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:48:06:6F:30:8E:A9:5E:BD:88:CE:5A:A6:7E:0F:3B:8E:7C:D4:59
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ecc15691-9732-4fda-b2d1-5ad157c2818e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:4b:92:7a:1d:39:f3:62:d0:06:4f:ad:28:77:65:2a:50:3b:
         d8:ce:81:cc:46:82:f6:72:7a:d6:a7:d6:6f:9e:ba:86:96:e3:
         11:01:5b:e0:a6:0a:e3:d7:59:f1:b1:99:2b:05:50:e5:05:50:
         1a:e3:f6:53:da:83:2e:dc:c8:d6:8c:71:f2:01:55:af:d9:b3:
         0f:84:12:c8:c5:02:d9:82:e3:a5:41:a3:70:bb:03:80:f2:38:
         b7:8a:12:7f:fa:40:74:a7:16:d1:23:77:94:82:c2:13:99:30:
         f6:53:df:3c:b9:40:e2:2d:d9:97:86:f5:55:b0:0c:0a:9a:5d:
         9a:86:1f:f0:0d:a3:6a:72:84:da:67:1c:38:9f:fb:8e:31:2b:
         a5:53:82:b1:2a:e6:26:86:40:e6:43:2c:23:b3:7f:f8:bc:0c:
         4d:a1:aa:64:9d:e0:e7:39:af:5d:60:0e:a9:27:a6:9e:eb:da:
         19:f2:d7:cc:18:37:50:77:28:52:35:47:81:ba:8c:4e:b5:7c:
         f9:8d:10:9d:b5:84:9e:e7:10:4e:23:c6:bb:a3:e4:e9:25:25:
         6e:b2:74:c4:fd:97:51:3c:01:34:0e:47:bf:85:84:d4:8b:0e:
         16:1c:ab:6e:aa:0a:bd:bf:96:70:d6:9d:21:39:25:5b:da:c1:
         5d:a9:dc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:48 2026 by rpki-client