Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f0a96265-a445-4e05-83b9-a3b3fd739677.roa
File:                     f0a96265-a445-4e05-83b9-a3b3fd739677.roa (raw, json)
Hash identifier:          ElT4vt1q02fcgJhMNxFl1M9ulgghYQfaEIoTODoQqGg=
Subject key identifier:   61:CB:37:70:5B:E1:E4:8B:18:99:9F:33:8E:65:EA:82:C1:8C:DF:7E
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       5F27FA0618A14E846F731FE1D9A8D9BA4E2CF48B
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f0a96265-a445-4e05-83b9-a3b3fd739677.roa
Signing time:             Mon 06 Oct 2025 17:38:02 +0000
ROA not before:           Mon 06 Oct 2025 17:38:02 +0000
ROA not after:            Mon 10 Nov 2025 23:59:59 +0000
asID:                     801
IP address blocks:        35.96.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:27:fa:06:18:a1:4e:84:6f:73:1f:e1:d9:a8:d9:ba:4e:2c:f4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Oct  6 17:38:02 2025 GMT
            Not After : Nov 10 23:59:59 2025 GMT
        Subject: serialNumber=665cebeeba658fab9ef730ea852fd7bd939d7852bff48a95df5d197ad284633a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0d:14:81:f5:37:48:51:c2:37:57:03:cf:d8:
                    41:2a:f6:21:42:f6:7b:37:cd:e4:d7:5d:23:9b:ed:
                    76:cd:4d:31:c9:11:ca:7b:b7:1c:0b:d5:16:d0:53:
                    dc:70:48:30:3e:8f:5a:eb:01:a1:a5:8e:44:8a:01:
                    e3:5e:a5:66:d3:fd:a5:85:87:d2:b6:9a:9a:bf:f3:
                    f2:57:ab:0e:b4:92:18:58:97:14:ae:3c:13:77:28:
                    ab:46:63:fb:03:7d:ab:56:c5:e3:01:45:19:0e:f9:
                    67:e5:79:d0:f1:8c:cc:d4:b4:a8:86:e4:00:2a:71:
                    e0:70:f3:81:1e:56:74:b3:bd:96:b4:02:dd:cc:65:
                    b5:64:a8:97:89:23:7a:4e:ec:6f:36:43:be:6e:70:
                    0a:95:60:51:ba:a2:62:1c:b4:18:3d:bf:16:3f:53:
                    ed:cc:02:96:f7:dc:b7:72:89:bc:1c:ee:1b:1f:82:
                    7a:63:bb:53:d6:bd:2c:f2:48:de:2f:85:87:22:e9:
                    5f:cd:cf:6f:2f:7c:e2:0c:cc:87:96:c2:b6:5c:db:
                    44:e2:58:49:00:bc:2b:60:19:c0:f2:69:9e:6a:a1:
                    f3:0b:90:6a:df:15:dd:1b:dc:45:cb:23:2a:51:53:
                    35:74:48:58:36:98:e2:fe:f3:02:1a:29:ed:2b:45:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CB:37:70:5B:E1:E4:8B:18:99:9F:33:8E:65:EA:82:C1:8C:DF:7E
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f0a96265-a445-4e05-83b9-a3b3fd739677.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:52:87:dc:20:e2:3d:f9:26:69:ea:2f:dc:57:81:d8:56:53:
         da:40:74:54:1c:f5:de:ff:46:57:23:12:8b:8a:dd:e4:4b:39:
         ca:d1:da:c9:1c:8e:d9:4e:f3:96:ac:33:2a:48:f5:e5:b9:cd:
         aa:a7:42:73:2a:7c:b6:f9:64:99:c0:62:d0:ac:50:ea:b3:29:
         99:65:c0:8b:e9:42:f9:ad:19:17:f8:b1:5a:cd:59:bf:cc:8d:
         e1:5d:76:2d:c1:a1:a1:3a:a8:14:6d:ae:43:6e:2a:71:c2:eb:
         10:a7:3c:55:d2:10:d7:6f:46:64:e1:0e:ef:34:55:4f:e6:71:
         8e:c3:1b:1e:dd:7e:4a:b7:dd:ef:6e:bb:1d:31:b7:84:2e:f8:
         15:75:19:d6:4b:52:2a:12:5e:32:e4:4f:0b:67:d5:5a:2d:91:
         b2:4e:e5:b3:cd:02:20:99:a6:e2:90:80:34:a9:d0:0f:e9:39:
         16:7d:a2:97:62:70:71:d7:be:cd:80:fa:00:da:de:8d:f5:07:
         84:74:e7:64:b8:96:76:e8:4e:44:88:25:f8:26:93:5b:66:f1:
         f4:54:ce:09:18:be:09:d8:f2:d2:1c:84:fd:5d:ec:f7:4b:1b:
         01:6f:dc:7e:ae:28:eb:27:bb:26:f3:5c:f3:d1:6c:60:f7:fa:
         fb:73:18:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:31 2025 by rpki-client