Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/286011cb-284d-4490-952e-7d20bfb6c782.roa
File:                     286011cb-284d-4490-952e-7d20bfb6c782.roa (raw, json)
Hash identifier:          L9VeZPEkl20inDCj2nYxHW46y0BuV6qjfECshpXsjQE=
Subject key identifier:   5A:3B:FD:E9:DB:B2:34:95:55:F4:1D:74:07:BF:7B:A5:3C:04:30:EA
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       721658A8343E46FF7AA953D88D243020B78B1146
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/286011cb-284d-4490-952e-7d20bfb6c782.roa
Signing time:             Thu 23 Jul 2026 06:51:07 +0000
ROA not before:           Thu 23 Jul 2026 06:51:07 +0000
ROA not after:            Wed 21 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3a5a::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:16:58:a8:34:3e:46:ff:7a:a9:53:d8:8d:24:30:20:b7:8b:11:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 23 06:51:07 2026 GMT
            Not After : Oct 21 23:59:59 2026 GMT
        Subject: serialNumber=500c99f444008c3fbe635c894c9f4d966a8aab8de3ccab38f26de1bc3f258738, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:2a:cd:b1:da:b6:5a:28:b7:48:0e:a3:fc:
                    d2:ea:e3:22:a8:27:9c:8a:d9:eb:f1:19:f8:82:58:
                    68:d6:d9:0a:c7:f4:6f:7f:b2:3e:4d:ab:a3:47:c0:
                    f4:e1:0b:c4:fe:49:c0:6a:9b:84:88:a4:1f:18:6c:
                    2f:82:41:56:17:81:0e:c3:d5:ff:b2:c7:a6:7e:69:
                    f5:13:87:17:11:d1:5f:1c:05:fc:dd:df:be:04:fa:
                    96:16:e0:c8:23:57:ac:89:92:8e:5c:86:46:03:b3:
                    3e:22:65:4b:de:7a:5d:e7:d8:3a:a6:4a:d6:7d:08:
                    27:3f:55:34:55:a6:31:34:77:e0:11:6e:ca:ef:37:
                    63:e0:4e:b5:3d:18:c3:74:a5:f6:9a:7e:08:96:e2:
                    16:16:28:9d:a6:1e:11:23:19:a2:38:c5:81:72:ac:
                    26:d1:2b:57:ee:96:92:43:26:53:f1:ae:28:1d:56:
                    80:16:8f:54:41:e8:0c:09:0d:04:ca:e1:64:46:49:
                    ab:f1:62:af:bf:52:75:bc:4b:f1:6e:41:a5:f8:ec:
                    46:35:b1:6a:7f:be:0b:d8:a6:b5:9c:b7:9a:03:f1:
                    05:aa:c0:04:81:5d:d6:16:68:2f:a1:fa:43:ec:9f:
                    ba:34:91:a2:c2:c7:06:f7:4d:ba:0a:cb:70:b4:7b:
                    01:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3B:FD:E9:DB:B2:34:95:55:F4:1D:74:07:BF:7B:A5:3C:04:30:EA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/286011cb-284d-4490-952e-7d20bfb6c782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3a5a::/47

    Signature Algorithm: sha256WithRSAEncryption
         52:00:93:4d:d8:57:5e:14:02:96:7e:4c:e7:a5:43:dd:b9:bc:
         2c:e3:2f:78:13:83:9a:e7:f7:35:36:88:24:b3:9b:d4:b9:c6:
         34:0c:00:56:19:53:1c:c3:72:39:be:f9:49:80:eb:99:4a:69:
         7c:a7:05:a5:48:a9:94:ba:81:2b:c2:48:e2:48:bc:fa:18:9f:
         79:91:42:55:e4:e4:f1:39:a9:5f:31:b8:05:08:46:c0:97:18:
         55:00:f1:18:2c:92:21:c0:2c:95:7f:5f:df:33:51:65:e8:d7:
         d0:31:4d:34:35:57:1b:1a:28:9e:29:4e:a3:c2:9c:cc:77:94:
         4d:2a:99:cc:8d:b6:c6:c9:da:b0:64:1e:2a:5f:f3:15:32:96:
         e8:1b:f8:67:ec:b4:7e:4e:2a:db:70:0e:d4:c7:c6:2f:95:54:
         94:b1:cc:76:6d:5b:95:36:1c:75:d6:dc:17:3b:c0:54:4c:e7:
         ea:0f:29:ca:e3:2b:b1:b7:64:c7:4b:bf:79:53:13:c1:91:8a:
         35:8a:7b:be:90:f1:2d:0a:b7:ae:a6:64:ab:99:03:03:e9:a9:
         b3:1c:74:4f:9c:f3:e9:0e:0b:f8:66:16:54:b6:55:02:5a:a9:
         6f:35:3c:cc:43:90:84:10:03:a1:b0:b4:43:aa:5e:6b:ef:c2:
         21:52:3b:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:20 2026 by rpki-client