Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ea68e5e-329b-42d7-b311-d13566f0c463.roa
File:                     0ea68e5e-329b-42d7-b311-d13566f0c463.roa (raw, json)
Hash identifier:          sWf0f9HoMeiGGxvqqPBCQ1G2yY+fMyvc398lOzFlZGw=
Subject key identifier:   ED:97:F1:B6:E3:2C:63:26:B9:31:C7:47:3F:E3:F6:44:3B:CA:F1:B5
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       06E8944DAF2E60FABAC20FAD3A7CE630EAE3FCE4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ea68e5e-329b-42d7-b311-d13566f0c463.roa
Signing time:             Wed 13 May 2026 21:06:05 +0000
ROA not before:           Wed 13 May 2026 21:06:05 +0000
ROA not after:            Tue 11 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f61:80fc::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e8:94:4d:af:2e:60:fa:ba:c2:0f:ad:3a:7c:e6:30:ea:e3:fc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 21:06:05 2026 GMT
            Not After : Aug 11 23:59:59 2026 GMT
        Subject: serialNumber=bbc11033906bcab5c24e96ec62dd3267e949d36313a6bcfa378a00b9c01937f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:26:27:36:01:e3:21:ca:27:4e:43:a0:4d:
                    e2:07:60:94:e4:93:79:48:b9:ff:01:e3:2f:dd:b6:
                    fb:4c:4e:6b:93:33:ff:93:90:0d:98:e5:57:dd:fa:
                    54:4e:c3:31:f8:49:66:87:9b:76:94:49:44:e7:21:
                    a2:72:a4:09:fd:c4:8d:5c:41:59:66:95:80:83:95:
                    ce:6b:ad:8c:4f:c9:14:f4:2e:8f:c5:a9:74:4b:3a:
                    ee:80:d4:f1:d7:f6:d9:b6:c7:5d:fa:3e:be:63:8c:
                    87:fb:c2:11:a5:11:75:79:a0:de:3b:5c:13:a6:26:
                    27:5c:5d:2a:b6:f6:a6:95:92:27:fa:29:50:68:af:
                    88:5a:2f:5c:8e:6b:e9:8a:e5:33:9c:d5:16:39:dd:
                    01:3e:37:fb:a7:4c:2c:5a:0a:0c:ac:c2:f4:61:d6:
                    ef:65:ac:8a:1b:19:be:a4:af:d5:65:71:d9:47:69:
                    4f:1f:ea:d5:b1:31:8e:b9:f1:87:81:34:14:8f:0b:
                    31:f8:c9:ad:d7:0c:c8:99:57:4d:84:80:e5:36:4b:
                    6d:e3:67:68:3d:c1:d1:2e:5e:57:72:ab:5f:56:7c:
                    dc:17:8e:87:f9:7e:eb:59:35:24:9d:cc:ff:fe:b1:
                    76:1c:79:ab:96:54:44:9d:c4:90:54:39:17:7c:17:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:97:F1:B6:E3:2C:63:26:B9:31:C7:47:3F:E3:F6:44:3B:CA:F1:B5
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ea68e5e-329b-42d7-b311-d13566f0c463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:80fc::/46

    Signature Algorithm: sha256WithRSAEncryption
         85:b2:84:75:35:25:53:68:4b:b7:83:23:51:e8:1b:cb:2c:79:
         8e:b2:5e:a9:60:de:13:dd:34:67:b8:7c:67:a3:15:0a:d3:e2:
         b3:b8:ee:4a:7c:9d:8f:49:4a:1b:c5:69:d9:c0:ff:93:c6:28:
         fb:4e:d0:79:17:b4:fa:b1:ab:49:2a:0d:ce:14:6c:48:31:1c:
         3c:86:e3:6e:ae:f6:1e:3b:79:e2:00:4c:a8:09:5b:cb:cf:20:
         7d:54:3d:77:ad:8e:12:2a:5a:98:85:b4:3c:54:1a:5c:22:c8:
         59:a0:ee:41:be:87:fe:b8:d6:00:8d:5d:26:cc:98:9c:17:17:
         e7:53:f2:be:1a:72:7c:48:01:23:b8:c7:55:40:5e:45:ae:d1:
         6f:ee:c3:7f:83:ec:53:c1:67:9f:c3:c3:3f:16:04:70:e1:5f:
         71:71:af:91:d7:14:ab:97:47:87:1e:6f:f5:24:34:fe:c1:39:
         0d:dd:24:e9:0d:1f:e7:5c:87:87:29:1a:9a:0b:7d:58:fa:36:
         e1:ca:57:4f:7d:01:0b:63:5c:b3:74:7e:31:70:da:01:bc:3d:
         76:19:2b:ad:f6:6c:15:58:e9:84:87:2c:86:76:2e:fc:32:72:
         f9:4f:75:12:95:c8:12:51:be:fd:65:dd:38:91:3c:5c:25:8a:
         90:68:04:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 22 14:18:38 2026 by rpki-client