Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa
File:                     2507f91f-043a-4d23-8241-7fcd43474bb7.roa (raw, json)
Hash identifier:          uLLPkXGCVHR3x6hgq95kUIbAKHAX0C5lpkFupREXLYY=
Subject key identifier:   5C:8E:51:E3:9F:D1:08:45:0F:B4:A3:62:9F:EB:9A:9C:E8:DC:99:88
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       7CBA738E6BEACB7B2901AAFF84A65FC5E518EA75
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa
Signing time:             Tue 06 Oct 2026 00:41:39 +0000
ROA not before:           Tue 06 Oct 2026 00:41:39 +0000
ROA not after:            Mon 04 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1f1d:8000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ba:73:8e:6b:ea:cb:7b:29:01:aa:ff:84:a6:5f:c5:e5:18:ea:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct  6 00:41:39 2026 GMT
            Not After : Jan  4 23:59:59 2027 GMT
        Subject: serialNumber=b8e1a78b1161bbaa1c9e7972767f4b95d741d8b05838eae1fe66ec474e7bbf3c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:ba:a1:79:6d:57:f4:a8:97:38:f2:c7:10:
                    6f:5a:47:cd:23:31:db:5d:91:14:e5:35:a0:c2:7d:
                    40:e3:f4:18:4a:52:ef:9f:ae:64:ed:d9:b6:bb:80:
                    e7:a9:3b:61:2b:48:78:5a:82:c4:ec:64:da:4e:4b:
                    3c:57:e6:bf:35:78:38:75:1f:15:20:94:a9:8c:79:
                    ca:f8:7c:7c:e5:d7:43:60:b8:fc:3c:6b:ef:e4:8a:
                    f0:9c:85:65:69:8e:5e:4d:5d:47:1a:e7:4b:b5:81:
                    de:e5:ad:d9:d9:2b:76:05:21:d3:d9:b5:5a:18:5b:
                    c5:4d:7b:ad:14:a1:05:a8:69:73:eb:5a:ee:42:bb:
                    d9:47:11:bf:7e:9d:17:b6:34:e0:a7:7b:14:45:f5:
                    b1:6d:7d:4c:f6:77:c5:66:26:f3:a0:86:19:28:d3:
                    ca:50:36:4d:70:96:f3:bd:3e:57:3e:29:7a:3e:b6:
                    26:ba:71:12:a2:d7:d3:e7:6a:a0:62:86:75:0a:b1:
                    9e:39:78:73:02:4a:a2:fd:43:9a:d7:69:f5:72:6d:
                    fc:bd:41:14:ab:26:c1:58:5a:3b:6b:57:8c:a6:da:
                    26:6d:64:11:d9:e8:73:d9:ba:80:da:be:d8:4d:ec:
                    c6:a3:23:5d:a7:c3:27:70:1c:f5:6d:10:d3:09:24:
                    cf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8E:51:E3:9F:D1:08:45:0F:B4:A3:62:9F:EB:9A:9C:E8:DC:99:88
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2507f91f-043a-4d23-8241-7fcd43474bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1f1d:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:46:40:07:27:2a:6f:ff:90:ef:52:ef:0c:0b:5f:1c:11:ac:
         9e:a8:24:e8:e1:2c:9b:1f:4f:5e:09:a6:49:6c:3e:16:2a:41:
         f9:02:1d:35:24:d6:e0:32:64:6e:74:fc:26:00:f7:2a:50:0d:
         92:9f:46:75:9f:97:6c:af:30:26:e9:f6:9f:35:57:39:60:ad:
         01:4a:66:a9:c9:8b:50:fd:7b:19:92:6e:7d:0f:55:33:eb:f9:
         4e:93:55:0b:d7:3a:2f:a9:1a:91:26:8f:c2:ba:ca:38:2d:8e:
         97:5a:a0:52:72:fb:27:5b:86:5f:d4:4d:e2:9b:92:cf:70:18:
         5e:56:2e:67:ac:1b:ef:f7:d6:4f:98:00:7c:dc:4d:10:3d:0b:
         91:0b:20:68:89:0f:ad:a1:40:57:e9:2a:b3:c1:08:54:fa:36:
         47:30:5b:57:af:40:1c:dc:81:07:13:ab:a4:a1:0b:9d:b0:88:
         f0:d6:24:cd:89:7f:d9:de:a4:f8:ec:9c:05:6b:e2:ce:f6:3c:
         d5:f0:52:c5:0c:a4:cf:95:3e:23:4e:5e:4c:25:b8:05:b1:ec:
         9e:e0:5f:e0:1d:16:10:01:d3:ae:9d:68:12:40:c7:db:67:3f:
         2f:d6:09:a0:89:44:38:d6:15:f2:6d:6d:c1:09:82:28:d2:c0:
         02:f1:4d:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:15:51 2026 by rpki-client