Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa
File:                     27e99577-d3d4-4681-953c-071c09e6aecd.roa (raw, json)
Hash identifier:          pLzHANYLuSo+aXgqtnyCqA8EtStKyvCLCQV+lEifJBE=
Subject key identifier:   5D:B9:30:EC:24:64:97:92:08:7D:FD:9A:95:4C:B6:CF:F9:3A:A1:DC
Certificate issuer:       /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial:       6C8958A525E4AB83FE60C2DEC3918A461A12E25F
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa
Signing time:             Tue 04 Aug 2026 00:00:46 +0000
ROA not before:           Tue 04 Aug 2026 00:00:46 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        184.169.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:89:58:a5:25:e4:ab:83:fe:60:c2:de:c3:91:8a:46:1a:12:e2:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
        Validity
            Not Before: Aug  4 00:00:46 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=e8472489fb8c490230dab6a6f1a14f63785881578c95ac0757a4156153bd466d, CN=71c3876e-b944-4600-92c7-cec33d89523f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:5f:57:98:bb:f9:06:2c:06:30:cf:e4:07:
                    63:89:b3:9e:44:e2:b2:23:e7:51:2e:43:ea:fd:9d:
                    90:89:05:ba:77:46:95:1b:f4:2e:d2:44:e2:1e:8d:
                    fa:89:74:d0:8c:64:5c:00:6c:9e:78:07:15:2b:bd:
                    07:06:c0:f9:82:e4:ec:f9:80:3b:8e:65:0e:16:fd:
                    5d:c4:5f:80:73:b3:62:e5:6c:0a:b2:6e:df:78:05:
                    5f:8f:33:d6:1b:6f:8b:76:fb:71:78:c7:a5:9d:e1:
                    10:fb:55:20:eb:da:6f:19:88:3f:ee:77:c0:a0:f5:
                    42:ee:be:bb:ad:90:e2:dc:6e:de:0f:53:0b:b1:c1:
                    ff:f9:4d:b1:85:91:7d:64:17:07:45:ad:b9:a5:b0:
                    e8:46:b2:63:b8:47:a3:30:35:54:90:6f:c1:ef:96:
                    df:04:6c:eb:cb:ff:f1:0c:5d:c2:d1:e7:8f:1f:91:
                    29:89:0c:3e:aa:fb:50:05:e3:f9:f2:8e:c8:db:01:
                    5d:62:79:29:8e:e3:99:cf:89:05:8c:d1:67:b5:4d:
                    a6:9d:80:ce:6c:18:70:a1:ce:40:db:10:49:eb:fa:
                    aa:e0:a9:fa:f1:4c:bf:e8:fe:19:93:ea:32:e8:03:
                    93:3a:f6:a6:ce:94:bd:05:7a:72:99:b0:ff:b6:e5:
                    75:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B9:30:EC:24:64:97:92:08:7D:FD:9A:95:4C:B6:CF:F9:3A:A1:DC
            X509v3 Authority Key Identifier:
                keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/27e99577-d3d4-4681-953c-071c09e6aecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3f:ca:99:b2:ca:e9:9d:eb:56:5b:81:82:66:55:dd:2e:ed:7e:
         4d:33:de:dc:74:a3:4d:3d:cf:06:99:86:88:a7:15:7b:7f:d6:
         1e:76:44:84:09:87:3e:1d:58:79:44:b8:68:26:20:5a:07:13:
         70:99:44:a2:9c:97:69:70:d6:0a:3d:da:4f:82:9c:04:12:50:
         c8:09:83:ad:d6:05:cd:c4:cf:1c:19:a3:04:0f:ac:7e:b0:2b:
         c4:61:56:a5:ec:60:73:83:c1:e5:fd:69:b1:4b:a3:07:72:c5:
         32:ab:95:fb:16:47:4a:78:8c:35:b8:ea:3d:19:6d:ad:8b:6c:
         c9:c3:2b:f5:94:d4:21:68:d4:78:fc:45:fc:85:72:d9:19:86:
         1b:f4:3a:d7:dc:e0:51:46:40:0d:b1:c6:12:64:f5:02:99:08:
         e8:7d:9f:cd:77:59:58:ff:ff:55:41:d8:a4:4e:df:c7:de:05:
         5c:30:31:0f:c9:2d:9b:a2:95:df:2e:b3:12:bd:f5:5a:7d:e2:
         88:26:3d:3f:33:31:06:6f:77:a4:f1:31:d4:9e:fa:be:0a:7d:
         b3:e3:ad:7b:2e:8f:fc:46:8f:d2:a3:0e:56:b6:5b:25:e7:1e:
         44:1a:c1:08:ea:83:2f:a9:b5:e6:29:4d:db:2f:41:b7:9b:de:
         87:2a:02:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 18:57:26 2026 by rpki-client