Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23bbdd48-00ad-404a-9a22-cebbc9ed5d95.roa
File:                     23bbdd48-00ad-404a-9a22-cebbc9ed5d95.roa (raw, json)
Hash identifier:          /Zfl5x+7ikv+dsN9JKYjP9Xg6b1wOoycJ/gJmSjGByI=
Subject key identifier:   76:9F:B8:95:CF:9E:8F:77:33:8B:FC:AA:D1:10:12:70:F3:5E:C4:84
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       36A2DC8A2FFB7A700133239D6B68D5D694B1C667
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23bbdd48-00ad-404a-9a22-cebbc9ed5d95.roa
Signing time:             Wed 13 May 2026 21:02:31 +0000
ROA not before:           Wed 13 May 2026 21:02:31 +0000
ROA not after:            Tue 11 Aug 2026 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1f61:8080::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a2:dc:8a:2f:fb:7a:70:01:33:23:9d:6b:68:d5:d6:94:b1:c6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: May 13 21:02:31 2026 GMT
            Not After : Aug 11 23:59:59 2026 GMT
        Subject: serialNumber=97516d24e69939ae770657e5183e10ae8404a1874675c410e0c23b9848ea408f, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:4c:fc:77:db:59:b7:25:94:83:db:83:dd:
                    ec:20:bb:78:c9:cc:d0:8c:ff:ad:f1:85:f8:19:84:
                    df:a8:58:3b:3d:b2:30:be:54:6c:14:96:05:c0:c0:
                    a7:82:c9:55:0e:e6:27:f1:42:c7:95:9b:c8:fc:6f:
                    45:58:e1:8b:85:c0:b9:cb:36:be:d6:df:07:fc:85:
                    1b:b1:6e:db:24:f0:7f:9b:2d:30:70:f0:5d:c7:cf:
                    0b:29:51:d5:63:02:46:91:59:b5:c6:95:b2:09:24:
                    c6:45:ea:d3:d6:a1:3c:6b:d6:fa:5d:3c:4f:90:a2:
                    7c:3e:95:75:b3:fc:ea:c3:d3:ce:a7:a3:b0:cc:d2:
                    82:de:cb:3d:ad:40:09:c9:43:eb:cf:b7:45:ea:b2:
                    60:6a:6a:66:44:48:34:e7:b0:5e:df:6b:4a:96:f2:
                    f5:30:03:ef:6e:6b:40:33:97:e9:65:24:d4:66:32:
                    56:07:20:e4:3a:3a:09:df:51:6e:c6:9b:41:92:22:
                    39:15:72:e8:90:5d:b9:3c:39:0c:47:59:62:13:84:
                    bb:dd:cc:98:91:5a:98:68:35:87:3b:5c:f6:03:f7:
                    d7:a8:3e:b8:3c:64:ae:93:df:28:a9:8f:6b:85:8c:
                    8d:0c:61:b6:0e:a0:30:ba:97:6e:70:40:01:cd:af:
                    34:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9F:B8:95:CF:9E:8F:77:33:8B:FC:AA:D1:10:12:70:F3:5E:C4:84
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23bbdd48-00ad-404a-9a22-cebbc9ed5d95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f61:8080::/44

    Signature Algorithm: sha256WithRSAEncryption
         81:fd:14:20:64:ff:e8:88:7d:61:73:bf:09:be:16:63:52:7c:
         a5:3f:f9:ec:f3:83:4b:4f:c8:58:54:37:d6:76:6f:c2:58:c2:
         7a:1d:ba:b6:1c:8f:04:ab:b3:ea:ca:79:49:f4:05:5a:af:c1:
         4c:ac:b6:d5:e2:17:61:e9:b0:82:d0:35:ea:7f:7c:de:74:94:
         f5:23:c1:cd:5f:4d:14:66:d2:f5:23:89:d5:4a:8d:9a:b4:3e:
         cc:10:5e:e0:a5:24:bf:ba:fd:08:98:47:af:e1:f1:24:bb:66:
         f3:16:b8:75:24:b8:0b:cd:a1:c4:7e:c3:53:bd:18:05:4c:63:
         e7:d0:d4:30:87:6c:e4:7c:69:e8:54:c6:c8:04:bb:f1:d3:83:
         5b:71:df:9a:c6:67:ef:51:10:56:c0:78:50:fd:13:83:83:b1:
         78:4e:9f:95:c9:b8:bb:af:c4:20:90:70:3a:13:db:25:b3:7c:
         18:01:36:25:7e:4b:3a:af:b7:d2:cc:ea:13:ef:c3:e8:e7:89:
         52:43:fe:b5:0e:b3:52:79:64:e3:ed:3f:d7:84:df:9a:bb:66:
         88:fd:6c:3f:26:d8:1d:12:22:63:45:af:8a:47:51:e6:0b:00:
         8a:95:c4:7d:f5:b2:99:60:25:b8:f8:57:93:5e:7f:8c:61:b9:
         5f:52:85:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 22 14:18:39 2026 by rpki-client