Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c94c4bc-cc29-4a10-9ac0-7212e88f2610.roa
File:                     2c94c4bc-cc29-4a10-9ac0-7212e88f2610.roa (raw, json)
Hash identifier:          8JPC9AQPXlQfcTON2PfCTNLh3tihf5gBzFjd9SJUjik=
Subject key identifier:   19:5A:06:60:9A:BB:87:3A:5D:27:4E:1B:FD:42:C6:58:FB:EB:C5:9F
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       3EE824F9A2168A473D6C43B4507555F466780B22
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c94c4bc-cc29-4a10-9ac0-7212e88f2610.roa
Signing time:             Mon 03 Aug 2026 01:40:09 +0000
ROA not before:           Mon 03 Aug 2026 01:40:09 +0000
ROA not after:            Sun 01 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e8:24:f9:a2:16:8a:47:3d:6c:43:b4:50:75:55:f4:66:78:0b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  3 01:40:09 2026 GMT
            Not After : Nov  1 23:59:59 2026 GMT
        Subject: serialNumber=55d4e8a65cfc33681a9c5ac0671bdff9cfe7822ff3fbf2ff6286083321cd8335, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:10:a8:5b:d6:90:4d:a7:17:8d:bd:b3:fd:
                    5a:e8:83:1d:25:02:f4:de:52:96:96:41:c9:82:dd:
                    5e:c7:5a:a8:31:76:14:b9:d1:29:8f:e9:01:6e:5a:
                    7a:9d:c9:0b:01:fd:fe:9b:21:df:f7:db:c2:da:ea:
                    08:79:30:b0:e3:0e:31:03:6f:03:de:02:ae:7d:91:
                    65:4c:a3:68:66:fb:b3:a8:29:74:3c:16:c1:cc:23:
                    78:14:56:d2:2e:82:94:e5:0d:59:6b:09:35:25:02:
                    4b:61:a7:b8:4c:26:4b:32:24:a2:3a:55:13:9b:7c:
                    6e:67:5d:7c:c4:45:bd:f0:83:9e:20:93:07:56:3a:
                    47:86:8e:7a:9a:53:39:5e:ce:ae:a2:f6:95:8d:53:
                    75:1d:6a:5d:5a:c7:34:e3:31:95:0e:36:62:18:b2:
                    fc:39:b1:67:6e:31:ea:e5:41:35:73:f5:23:22:4a:
                    fd:61:db:0e:2a:be:c3:75:1b:45:60:8e:17:81:76:
                    c2:0a:20:f4:62:9c:a4:92:33:5d:db:f7:ae:be:06:
                    ab:cd:99:70:d2:36:c4:78:4b:07:45:cc:b0:ea:f0:
                    3c:50:07:75:e7:a4:eb:19:ff:19:3a:07:61:08:38:
                    ea:78:7f:8d:14:3a:6f:a6:63:2d:94:1f:8c:d2:d2:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5A:06:60:9A:BB:87:3A:5D:27:4E:1B:FD:42:C6:58:FB:EB:C5:9F
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c94c4bc-cc29-4a10-9ac0-7212e88f2610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:1080::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:8b:e0:1f:dd:c2:09:bf:20:b2:2e:72:b8:f2:46:76:94:
         a1:07:f6:64:f2:29:a7:aa:6a:39:22:bf:c7:67:38:5e:b6:52:
         a5:30:f3:60:3a:ce:04:46:60:61:02:b2:52:92:0e:fe:d5:6a:
         60:07:d6:96:58:00:c9:b2:ee:d8:2e:8a:1a:77:23:5a:dd:56:
         1e:cd:d0:db:65:4a:db:06:55:63:5c:5c:32:6a:17:bd:ee:95:
         06:b3:b4:da:d3:30:aa:a5:f3:d3:7f:0b:54:6b:27:da:f9:1e:
         5d:fc:04:2e:77:0d:98:35:d3:07:d0:eb:a3:10:dc:9a:98:47:
         a6:3d:bf:7e:23:fc:eb:4e:15:3f:a4:99:06:83:8b:de:95:7e:
         29:26:0d:82:e2:32:49:8c:4d:28:b1:10:6d:25:af:2e:a9:2e:
         88:d5:75:94:16:73:ef:78:75:8f:2a:4b:a2:7f:c8:aa:db:52:
         ca:14:73:94:31:8a:d8:ff:3a:49:dc:8e:a6:a4:82:71:01:c9:
         8e:5d:75:d5:4f:20:15:f4:b4:e3:3c:6d:97:12:19:0a:c9:cf:
         3d:33:8a:80:f3:e2:2c:e1:65:0a:6a:07:71:68:7f:f8:47:a9:
         02:bc:84:6a:6f:58:52:e3:f8:3a:1b:db:61:c3:6d:da:54:c3:
         fc:63:36:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:58 2026 by rpki-client