Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6fc4b5-684e-4b51-8a8b-002e83881325.roa
File:                     1c6fc4b5-684e-4b51-8a8b-002e83881325.roa (raw, json)
Hash identifier:          Ht2M6VQQOj/PTyMbcDsZSCQCRHFppLDb4OT4FjOcnuQ=
Subject key identifier:   D3:ED:65:26:BF:0E:D3:1F:65:FA:43:11:3B:D3:28:46:5D:E7:7B:F9
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       62899352CB3CF121DEBDEC4747DDA978048D3AF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6fc4b5-684e-4b51-8a8b-002e83881325.roa
Signing time:             Fri 31 Jul 2026 01:01:22 +0000
ROA not before:           Fri 31 Jul 2026 01:01:22 +0000
ROA not after:            Thu 29 Oct 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1fec:8800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:89:93:52:cb:3c:f1:21:de:bd:ec:47:47:dd:a9:78:04:8d:3a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Jul 31 01:01:22 2026 GMT
            Not After : Oct 29 23:59:59 2026 GMT
        Subject: serialNumber=7cc08db180ea6f4f76c1a0135669897eb1ca743718f491403fb21c6ff14b3590, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7b:3e:5b:d8:8c:24:25:96:a6:c9:a6:40:0b:
                    b0:8a:7c:38:a1:0a:2c:1b:08:fb:a8:7a:36:45:e9:
                    4c:90:bc:22:3c:7a:19:85:03:d9:81:ab:56:cd:b5:
                    ce:67:cd:12:9d:e9:f7:22:53:c8:78:30:2c:8b:24:
                    da:dd:c9:2a:33:62:40:7e:5e:86:3b:cc:24:b5:90:
                    35:89:b4:07:82:05:87:48:31:6a:1d:f0:e5:42:7c:
                    27:73:94:7d:d5:2e:a3:09:80:a3:f2:5a:8f:52:0c:
                    40:0a:2c:1c:ea:64:29:c6:a5:94:df:3c:8e:28:af:
                    eb:43:1b:d9:05:2f:52:c2:df:c4:0c:2c:11:7d:6b:
                    cf:da:a8:cf:d0:2e:03:22:cb:6e:31:5f:63:67:cd:
                    ef:66:cf:30:76:66:0e:72:34:ef:f1:1d:eb:5f:4b:
                    a4:6b:b4:89:c0:63:c7:62:e7:60:a4:20:67:e9:41:
                    1d:7f:77:89:42:cf:d8:89:c9:29:f8:b3:9b:02:f7:
                    b7:f2:77:5e:77:88:c1:01:6d:47:2c:c6:e5:f3:fe:
                    bf:c7:b5:f6:6d:03:35:5f:39:42:7b:78:6d:cf:ca:
                    10:9b:6c:c0:17:13:4d:f9:f2:26:bf:0b:aa:54:48:
                    50:70:8b:c9:94:8a:2e:a5:d4:95:9d:aa:0a:f7:03:
                    35:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:ED:65:26:BF:0E:D3:1F:65:FA:43:11:3B:D3:28:46:5D:E7:7B:F9
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c6fc4b5-684e-4b51-8a8b-002e83881325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fec:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:e7:38:b2:b3:67:f6:ce:9f:b3:1e:cb:81:3d:14:00:4b:
         c0:d0:9d:55:74:e7:be:dc:08:55:33:1e:e9:ad:f2:93:76:88:
         25:fd:c0:fe:64:e1:df:7d:ce:75:99:60:4a:4b:aa:b9:53:bb:
         37:51:75:5e:35:2b:60:70:a6:e6:2f:f7:13:ea:36:c9:72:07:
         e0:05:8c:94:46:57:52:06:ca:43:8a:a3:66:bb:14:42:68:cc:
         7c:87:85:5d:64:2a:b1:24:4f:cd:88:87:a1:b3:a9:9d:b1:76:
         e6:da:aa:e7:14:49:c3:0f:6e:e8:26:81:0a:32:2a:a1:c3:a3:
         bf:e7:0d:f7:8e:07:03:e4:8d:cd:22:85:e6:e1:43:a2:ef:a0:
         2d:dd:3f:a3:e1:13:bd:fd:2b:98:a0:41:0e:f4:26:3a:b4:8c:
         f2:57:05:fa:ca:67:d8:b5:76:03:44:a8:ba:1b:10:79:ba:96:
         4e:31:22:53:11:22:fb:5a:c3:d7:6b:5a:b5:c0:a2:d5:9b:f4:
         fc:df:77:45:e7:a0:d8:cc:7f:96:7c:9f:75:3a:1c:db:f6:74:
         28:af:d0:4e:11:7e:b4:19:10:b9:01:5d:a8:44:0c:83:5a:2f:
         04:da:fd:cb:ec:20:bc:71:28:92:57:4b:75:6e:71:04:ec:62:
         73:55:2b:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:42:16 2026 by rpki-client