Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a4439ad-2e50-4500-89e8-e1e4c7fdc5ed.roa
File:                     3a4439ad-2e50-4500-89e8-e1e4c7fdc5ed.roa (raw, json)
Hash identifier:          ZD27bM+47oJvyhMxS9V0GbF1VGihzw1IA6QxUun118o=
Subject key identifier:   F2:1B:BE:70:8C:08:6B:77:AD:A2:82:D9:CA:59:C1:F7:78:73:12:E8
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1A50FDB2E85FF9FF6E10DD251BBF941CC706A6F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a4439ad-2e50-4500-89e8-e1e4c7fdc5ed.roa
Signing time:             Mon 19 Oct 2026 00:50:04 +0000
ROA not before:           Mon 19 Oct 2026 00:50:04 +0000
ROA not after:            Sun 17 Jan 2027 23:59:59 +0000
asID:                     14618
IP address blocks:        2600:1ffb:8000::/39 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:50:fd:b2:e8:5f:f9:ff:6e:10:dd:25:1b:bf:94:1c:c7:06:a6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 19 00:50:04 2026 GMT
            Not After : Jan 17 23:59:59 2027 GMT
        Subject: serialNumber=9e58bc2cfe587fd8c89ee19eeee52a8fc3042a5fd74c564e95876fd8cf38c280, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:b3:eb:72:88:58:3d:b4:46:52:3b:71:c7:
                    34:81:80:c3:1d:05:ca:66:49:db:85:d7:5c:16:05:
                    13:85:4c:8c:1f:af:70:c0:24:a9:90:1e:90:a7:4d:
                    50:2d:01:07:b4:08:8c:62:59:09:c7:22:3d:38:33:
                    62:96:96:a0:89:70:92:cc:3c:0d:99:15:c1:be:5a:
                    99:b5:4b:0a:78:e2:59:f8:f0:89:4a:69:65:4c:f5:
                    5e:79:ea:f9:21:bf:b1:fa:f9:c8:86:7c:ae:a9:19:
                    f2:ae:f3:49:95:ae:57:5a:07:52:c3:ec:9e:e5:d1:
                    54:62:77:e7:e3:a7:42:6f:83:e3:7c:1b:4a:0f:19:
                    65:91:2b:a0:da:29:5d:90:df:20:be:15:22:5c:64:
                    da:9f:a0:5d:90:4c:73:89:61:44:55:9d:9e:ac:42:
                    33:fa:37:d4:3c:7e:18:ce:84:c6:14:ef:6f:37:a2:
                    0e:26:3a:a3:dd:6e:72:dd:7e:d1:bb:f8:71:49:b7:
                    55:3c:36:58:6d:89:ac:37:80:5f:98:cc:f8:f8:d1:
                    3f:3d:c3:06:25:dd:31:bc:f6:99:38:66:10:f8:74:
                    26:2e:ba:eb:3f:bd:44:5f:55:a8:47:c0:0a:a9:00:
                    50:f0:13:76:4a:7c:f5:82:fe:41:0b:c2:a4:28:9c:
                    aa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1B:BE:70:8C:08:6B:77:AD:A2:82:D9:CA:59:C1:F7:78:73:12:E8
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a4439ad-2e50-4500-89e8-e1e4c7fdc5ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ffb:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         46:47:f9:f4:65:e5:66:23:27:d8:d9:1c:be:62:8b:96:61:36:
         a4:a1:b8:95:e8:34:74:4d:73:34:a0:cf:fb:eb:90:94:13:99:
         7b:83:f9:d4:f3:70:1e:a5:66:82:b4:f3:94:4e:15:a4:45:d3:
         97:e9:c0:32:d4:e1:d9:6a:b3:93:05:3d:bb:48:42:d0:18:9f:
         f0:c3:0f:eb:70:95:ce:99:db:e6:70:23:84:a0:0f:83:a7:8a:
         d2:b1:d5:d4:91:87:c4:e0:0e:10:82:f6:e4:7b:b8:c1:80:f3:
         93:a0:6f:e0:c3:4a:9b:2d:29:1d:6b:55:14:e9:8d:c4:f6:a2:
         22:59:38:17:ea:a4:24:0f:69:58:95:97:85:a2:47:07:97:c2:
         09:de:3e:1e:1c:41:b1:b8:b2:28:d2:1b:d8:6f:c0:da:4f:41:
         a8:55:ac:85:d1:e5:47:84:44:f9:cc:23:33:fb:ed:cb:a1:3d:
         2d:13:11:40:56:a7:b8:fb:d1:02:5a:9f:4f:c0:8c:fc:df:b0:
         a9:c6:12:02:78:d1:ca:34:27:db:18:2a:2e:84:b3:94:f5:24:
         82:88:0a:e6:fd:d5:8c:d1:ce:92:67:4f:91:46:4c:d8:c4:fc:
         56:00:4e:85:01:e7:c1:b2:cd:10:f7:71:69:d8:b3:ed:8f:77:
         4b:ba:ce:31
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:07:38 2026 by rpki-client