Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29920184-aec3-4a16-ab95-1de3bb8a0901.roa
File:                     29920184-aec3-4a16-ab95-1de3bb8a0901.roa (raw, json)
Hash identifier:          RZiUFCV/14paV3SZ1cvjs4DW7Tdx311r3Lj+rMqA4ic=
Subject key identifier:   59:24:9C:E2:5F:5E:CC:2F:47:8F:72:DE:BB:42:32:4B:0D:6F:AA:F2
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       35FA4D808A7534F29270705CE11CF26A7E31D3D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29920184-aec3-4a16-ab95-1de3bb8a0901.roa
Signing time:             Fri 23 Oct 2026 01:20:08 +0000
ROA not before:           Fri 23 Oct 2026 01:20:08 +0000
ROA not after:            Thu 21 Jan 2027 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff1:8000::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fa:4d:80:8a:75:34:f2:92:70:70:5c:e1:1c:f2:6a:7e:31:d3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 23 01:20:08 2026 GMT
            Not After : Jan 21 23:59:59 2027 GMT
        Subject: serialNumber=853cadca39b301d1f83f7006cee5fdbf4df0ba85376fe9f05bd00e61ea39057c, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a0:41:3a:de:95:e4:59:fc:6d:f9:42:a9:b8:
                    f5:24:68:a4:76:64:b5:ee:1f:e4:fb:37:83:ca:76:
                    e6:07:40:38:70:1f:6d:c0:2c:da:77:e6:8e:c1:c2:
                    08:fb:a5:32:20:32:c8:d0:34:40:65:b3:c0:3b:12:
                    c6:76:69:60:4e:e2:81:fb:b6:bf:5e:b1:60:6a:3e:
                    20:62:a1:83:3f:e5:46:b9:c0:7e:bb:fd:1e:55:f8:
                    b3:8c:ea:c9:08:28:df:bf:20:f9:3a:35:bf:33:6c:
                    e0:7f:b2:b0:e1:63:f7:1b:78:e0:a3:8e:14:31:12:
                    d2:08:c1:49:db:26:04:31:95:0e:fe:c0:41:95:04:
                    07:ef:52:08:3d:52:62:eb:b3:0f:93:87:85:1b:9d:
                    ad:10:e0:8a:f2:c9:d7:65:0b:60:64:65:4e:36:52:
                    f9:15:28:72:31:b4:42:88:3d:c8:36:01:52:68:04:
                    a6:df:da:91:bf:57:ad:0a:73:31:01:fa:b6:87:d7:
                    12:01:84:78:fb:a8:e7:11:8d:75:78:5b:6f:30:4a:
                    5c:ab:e9:28:83:29:9c:3b:ac:cb:f0:d6:0d:ae:3e:
                    a3:d9:f4:97:39:ed:eb:2c:ae:74:c5:c1:4b:e6:4f:
                    8c:8b:ef:ce:19:25:31:3c:8f:42:e3:a3:de:0d:dd:
                    29:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:24:9C:E2:5F:5E:CC:2F:47:8F:72:DE:BB:42:32:4B:0D:6F:AA:F2
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29920184-aec3-4a16-ab95-1de3bb8a0901.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff1:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         76:4e:fe:62:5f:e5:67:ce:0c:53:99:e4:c6:53:44:03:50:4d:
         e5:1e:76:29:c5:9e:6c:5c:ab:90:6e:d3:1e:b1:5c:0f:52:c6:
         64:af:eb:1c:a4:2d:08:6e:56:0e:50:ee:89:62:82:d1:4d:bd:
         f7:2f:d9:16:e5:b3:99:0a:27:e4:72:5a:f9:7b:b6:56:62:28:
         f9:ae:2a:66:04:95:ba:d5:37:1d:ff:ca:fa:c3:80:a3:cc:92:
         c7:f2:f6:97:53:a4:23:cb:5f:31:15:c2:de:99:2a:fe:20:96:
         c2:35:3c:3b:60:18:25:19:eb:19:b2:da:e4:97:01:c2:a7:b5:
         ab:81:0d:c0:85:e9:75:bb:b5:ec:dc:5f:ca:a1:b3:df:5c:6b:
         8f:f5:6c:a8:60:be:b1:8d:fc:7a:54:e7:cc:ab:13:77:3d:54:
         ae:e3:76:0e:5d:c7:e8:7d:81:d3:2a:f1:68:08:d8:58:2b:09:
         47:5c:ce:74:5f:41:c8:b8:96:a0:71:63:3e:05:5e:31:4f:bd:
         a9:d5:e6:00:30:ff:0c:ba:a7:11:b6:f9:9b:9c:cb:21:72:63:
         91:39:68:94:b9:0b:ec:fe:fa:79:44:4c:cd:05:12:a7:dd:37:
         19:34:bd:c2:d4:56:1f:cf:7e:c2:d0:9e:e5:b0:f3:c5:57:bc:
         eb:13:e5:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:30:43 2026 by rpki-client