Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28852a3c-e384-446d-8985-93d8c996999b.roa
File:                     28852a3c-e384-446d-8985-93d8c996999b.roa (raw, json)
Hash identifier:          rtOW0wV8jro90EGssLdNCejHkH/q/BFjprJtHNRlTUA=
Subject key identifier:   76:DC:39:8C:0F:D8:BB:FC:01:D4:2B:71:7A:50:77:6E:A2:C3:84:D9
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       102C5128C11A7D7D909D31B0EE9ECC6D8F76D3FB
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28852a3c-e384-446d-8985-93d8c996999b.roa
Signing time:             Wed 22 Jul 2026 00:41:34 +0000
ROA not before:           Wed 22 Jul 2026 00:41:34 +0000
ROA not after:            Tue 20 Oct 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:2b26::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2c:51:28:c1:1a:7d:7d:90:9d:31:b0:ee:9e:cc:6d:8f:76:d3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Jul 22 00:41:34 2026 GMT
            Not After : Oct 20 23:59:59 2026 GMT
        Subject: serialNumber=3d234a0d56d661674e421bbd76198b77724458d05d900ecfdacb50362ac06904, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:70:1d:77:60:6d:1d:53:e3:d8:7b:ae:b9:
                    b0:7a:34:e2:1d:75:52:a3:3b:b9:50:69:74:41:df:
                    d4:5f:b5:e5:7e:ba:08:99:a2:de:4b:73:9d:21:ba:
                    fc:5b:97:86:b6:32:48:ea:03:f6:d0:07:e5:1f:d6:
                    96:60:08:b2:fd:c7:ad:b1:d8:71:43:d1:dc:b4:e7:
                    c6:9f:76:db:c5:d4:e3:63:8b:12:24:34:0c:ee:e1:
                    2f:f0:f2:bc:91:72:5d:db:87:ee:4a:5b:28:2c:0a:
                    98:ce:59:95:89:bd:86:f0:f4:4b:3f:0a:cf:a1:96:
                    6e:cf:1d:6e:a8:0b:b3:e6:67:8d:3a:51:8d:d6:c3:
                    65:20:91:ad:42:5b:83:6d:82:22:93:ef:3d:d1:af:
                    06:a1:35:b6:69:57:77:5c:eb:82:21:94:bd:38:71:
                    6e:65:d2:bb:ad:30:c5:3d:07:fd:d5:d5:99:4e:c2:
                    40:f4:e8:bc:da:6d:4e:fe:eb:5b:1f:b9:35:25:73:
                    0e:f6:1c:01:62:aa:48:06:f0:b5:bd:7c:87:3d:9c:
                    88:45:47:b0:56:eb:e2:c3:9d:36:dd:10:7e:be:fb:
                    77:ff:5c:02:28:9e:b0:58:91:e6:3b:8b:f4:fb:da:
                    68:6a:3b:19:7a:cb:31:1f:89:b8:e1:93:36:39:64:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DC:39:8C:0F:D8:BB:FC:01:D4:2B:71:7A:50:77:6E:A2:C3:84:D9
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/28852a3c-e384-446d-8985-93d8c996999b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:2b26::/47

    Signature Algorithm: sha256WithRSAEncryption
         1d:d2:0e:84:29:33:40:be:68:9a:d5:fa:61:9b:79:da:8f:41:
         76:90:74:14:7a:25:98:f2:a2:09:e6:8f:be:9c:1b:a4:ee:1e:
         b8:33:30:5b:28:96:52:f5:d6:b4:b1:ff:74:35:0c:5c:fa:44:
         19:b2:2f:0d:ca:ca:21:49:b0:45:b6:5f:f5:99:7b:4b:ee:09:
         e5:6e:69:89:fc:d0:0d:a7:16:16:b1:ae:12:53:ce:c5:a2:73:
         e7:dc:28:5b:f2:09:31:e7:ec:98:b6:32:1c:2b:87:bd:e0:9d:
         93:89:cc:78:5b:ab:f6:e8:01:1e:c3:f5:ce:a3:e6:02:cc:3d:
         6d:06:aa:63:ca:ef:f9:72:9e:9a:11:60:da:a0:0b:ad:6a:2c:
         1d:53:4e:c7:7c:62:8d:75:10:8e:a7:4c:1f:13:72:0a:53:18:
         e6:0f:e2:8d:3d:34:16:d9:45:58:02:18:7a:98:25:d2:d5:7f:
         58:92:28:2e:db:65:0d:11:2a:2b:4c:6b:43:7a:13:d7:78:3b:
         03:4e:38:86:54:ea:2a:13:7a:f0:a4:e0:85:df:29:59:c6:62:
         5d:80:2c:46:d4:c7:f3:16:e3:ea:f6:93:13:d8:11:d8:3e:75:
         f7:f3:77:58:46:62:78:f6:a6:c1:b4:4f:a7:1d:08:29:93:90:
         d8:d2:76:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:59:04 2026 by rpki-client