Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fecb6982-06d4-4bb4-a59c-59982eb1b971.roa
File:                     fecb6982-06d4-4bb4-a59c-59982eb1b971.roa (raw, json)
Hash identifier:          xKLEANvF8vY9tKEKNTAP6eTJCNO00zKIkGLVVxTErTQ=
Subject key identifier:   1E:9E:8F:AB:BF:E4:21:39:20:C4:6C:60:31:6C:13:12:52:12:39:F0
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       5703A3FE504D948655926E5260C7093FEFD6A840
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fecb6982-06d4-4bb4-a59c-59982eb1b971.roa
Signing time:             Mon 04 May 2026 15:00:10 +0000
ROA not before:           Mon 04 May 2026 15:00:10 +0000
ROA not after:            Sun 02 Aug 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:03:a3:fe:50:4d:94:86:55:92:6e:52:60:c7:09:3f:ef:d6:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: May  4 15:00:10 2026 GMT
            Not After : Aug  2 23:59:59 2026 GMT
        Subject: serialNumber=a30c5935886cf428fd5b0ea6312f29bb89d72d3da1f2d8247589744122c135fd, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:22:af:e4:e8:73:f9:34:44:df:cc:1c:51:21:
                    ee:66:bc:41:69:54:79:87:98:70:f1:ba:cb:be:6f:
                    0e:f0:7b:73:40:d8:1d:76:d1:fd:9a:2f:2a:0f:58:
                    c6:13:ab:d5:29:cc:06:7a:56:6b:ae:e3:c4:af:0b:
                    3b:8b:f3:52:f3:8c:7f:f7:b2:4b:9f:c1:51:ec:72:
                    ad:43:e7:d9:8c:db:8f:89:6c:00:47:8d:da:88:ba:
                    eb:e5:3b:ec:af:e9:e5:8a:3e:dc:af:ee:cd:7b:97:
                    ed:75:b6:85:3b:a8:ca:e7:6c:dc:57:4c:61:39:5b:
                    c7:a8:2b:bf:68:ed:32:0d:d6:8c:ec:29:c9:2d:73:
                    80:95:9d:50:9f:c2:c6:25:bb:e0:9f:94:79:80:10:
                    8a:f9:18:fa:99:2a:1a:c6:95:d5:88:81:b7:5a:c0:
                    9a:af:06:c7:da:df:80:4f:9a:f3:3c:51:ae:fa:fe:
                    39:57:74:a3:fb:8e:11:a4:66:44:fe:53:0e:d1:16:
                    ee:69:bc:ac:46:bb:e3:aa:5d:c7:93:b0:a0:50:eb:
                    78:2c:c7:ef:6c:85:87:23:ff:38:c3:fe:83:e5:ea:
                    09:34:10:57:d2:e5:45:b2:08:47:79:c0:1a:74:e6:
                    5e:82:8f:83:2a:a6:a4:a4:df:f9:56:43:fb:ae:73:
                    31:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9E:8F:AB:BF:E4:21:39:20:C4:6C:60:31:6C:13:12:52:12:39:F0
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fecb6982-06d4-4bb4-a59c-59982eb1b971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:23:64:76:69:98:ba:8f:0e:ee:6e:38:4a:42:17:b4:ae:71:
         77:e6:60:bb:40:58:dd:39:d7:26:6b:2e:39:f7:4b:84:3b:2c:
         b6:4a:1a:a1:0e:5f:74:1f:00:42:ed:3d:d7:66:b9:03:6c:f6:
         63:3c:ca:bf:8a:8e:da:5c:89:44:19:e5:cf:b3:cb:91:b3:e9:
         8f:50:a9:83:ac:ff:4f:c5:c3:c7:e4:83:ed:1d:5c:bd:27:33:
         68:f4:9e:7f:86:15:c8:90:e9:36:ff:bd:df:ac:2a:1e:b1:ed:
         f2:aa:2f:b3:bd:45:bf:38:77:cc:49:e0:a2:97:36:df:38:26:
         bc:66:b7:99:15:d8:a5:cf:64:52:32:b8:ca:be:22:83:ab:65:
         3f:fe:b7:43:ac:9a:74:10:24:4c:38:90:ea:d1:2d:8b:42:7a:
         16:e0:2e:10:35:b3:0c:4d:40:49:4b:14:51:46:40:90:c7:35:
         35:12:b1:b9:fc:e7:70:bc:5d:02:5e:bd:3b:74:91:94:cc:d8:
         90:d9:a2:fc:00:bd:72:36:e3:aa:4a:82:e1:88:6b:14:ae:ba:
         dc:b1:5e:d3:70:78:21:09:0e:6c:33:55:65:f4:a1:aa:40:3c:
         2d:7d:70:89:5a:ce:9c:93:a6:4e:85:a9:46:a5:7c:cb:46:e2:
         fe:df:45:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:17 2026 by rpki-client