Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fecb6982-06d4-4bb4-a59c-59982eb1b971.roa
File:                     fecb6982-06d4-4bb4-a59c-59982eb1b971.roa (raw, json)
Hash identifier:          eIcNaqDfw7sftlAc+aMmEym/0zWd83cw6mDE12n9//0=
Subject key identifier:   D7:0C:00:F0:04:43:F3:07:F3:04:B1:50:2E:0E:84:AD:06:F5:05:C3
Certificate issuer:       /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial:       402948929258FB736357477E16B40B779F796B62
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fecb6982-06d4-4bb4-a59c-59982eb1b971.roa
Signing time:             Fri 15 Aug 2025 15:30:53 +0000
ROA not before:           Fri 15 Aug 2025 15:30:53 +0000
ROA not after:            Fri 19 Sep 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        35.96.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:29:48:92:92:58:fb:73:63:57:47:7e:16:b4:0b:77:9f:79:6b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
        Validity
            Not Before: Aug 15 15:30:53 2025 GMT
            Not After : Sep 19 23:59:59 2025 GMT
        Subject: serialNumber=e8528bd2f4a3d2422f8b169ee014277797b8b5d061fc41e5b2d8399940d509a4, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e0:81:1c:de:22:68:b9:aa:47:29:65:f6:f0:
                    83:77:27:28:30:a1:f0:e4:6a:dd:e2:fd:62:7b:a3:
                    54:63:3e:d8:e1:c1:43:84:8c:70:f0:2f:00:12:93:
                    51:d6:58:3c:68:c8:20:f2:7f:0c:b6:27:aa:b3:e5:
                    f1:fe:4d:36:6a:5d:7f:70:a9:d4:eb:ae:60:b1:62:
                    07:bd:b1:46:f2:2e:79:b4:44:ec:3f:c1:67:1e:45:
                    10:e0:12:17:65:54:89:ab:3e:d7:ea:d4:a5:f7:bf:
                    59:63:c5:66:5c:28:58:2b:b1:88:fc:01:cd:b9:34:
                    01:b2:90:46:3b:a8:11:f5:af:a5:ff:66:ea:ee:e4:
                    20:c9:80:89:9f:4d:77:36:69:49:e7:d9:bc:d1:cd:
                    ed:af:db:40:0e:65:2a:4d:25:1b:70:7a:5e:ca:95:
                    53:5a:eb:f6:fa:2f:da:72:cf:80:f1:1d:fd:9c:6e:
                    ea:11:a2:a2:ff:0b:76:50:ab:27:c0:70:3b:d8:b0:
                    09:fe:51:3e:8d:f0:4f:63:e2:e0:80:21:2b:06:ae:
                    4c:23:8b:28:da:2d:15:fe:2d:ec:68:7f:09:60:bb:
                    15:52:6d:f7:3c:ea:d1:64:fc:de:a3:b5:35:4c:dc:
                    f2:6f:4d:74:e9:84:66:cc:9f:37:47:d3:87:26:c7:
                    1f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0C:00:F0:04:43:F3:07:F3:04:B1:50:2E:0E:84:AD:06:F5:05:C3
            X509v3 Authority Key Identifier:
                keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fecb6982-06d4-4bb4-a59c-59982eb1b971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.96.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:44:9d:c2:55:50:ca:c1:1e:81:ea:7f:66:ca:c8:d1:a3:5e:
         94:fc:9e:ae:2d:54:3e:38:b9:6a:78:84:80:5b:2a:bb:53:e9:
         c7:1b:1d:24:32:32:cf:ac:50:2a:67:28:f1:ee:a6:a1:81:6c:
         32:81:78:fb:39:35:17:0f:22:72:b4:00:dc:24:71:a0:e5:9c:
         d6:80:05:83:7a:8b:37:30:f0:f4:9e:d3:0f:16:e7:71:e2:45:
         9e:81:c5:21:e0:44:a4:9e:91:20:b3:3f:4f:11:e9:f6:fb:d6:
         df:d8:dc:f6:14:73:b2:cf:fd:44:1b:3a:d5:9e:7a:19:32:86:
         58:39:60:37:7d:7d:dc:17:9d:ae:07:7f:01:07:55:1e:e3:69:
         e7:2b:16:8c:bc:3f:28:c9:ae:d7:23:3f:31:9f:a4:e4:db:a8:
         29:06:44:f4:66:cc:74:d4:28:23:f8:1d:62:7a:13:ad:d8:08:
         af:f5:e9:85:00:b1:0d:6e:92:87:00:ce:1e:af:40:63:99:65:
         5f:84:d2:15:36:1c:88:9c:25:32:b0:cb:21:2c:29:5e:54:11:
         ab:89:6a:be:1e:77:34:a1:4c:88:81:42:fe:46:a1:74:42:11:
         0c:1c:14:6f:b9:76:bd:fd:65:9f:d6:9f:5b:af:46:3a:74:d6:
         93:31:bc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:47:24 2025 by rpki-client