Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4492468d-ade8-4955-9c65-98cc7b723380.roa
File:                     4492468d-ade8-4955-9c65-98cc7b723380.roa (raw, json)
Hash identifier:          ljav5USvAPIcrzkXw4bV93I0hZ3dDjzfSLDCpQZy7b4=
Subject key identifier:   67:57:87:8A:39:AB:F3:E6:59:C1:2E:E0:6A:86:01:5B:5C:F0:97:21
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       2365E2C19BEFD1FC9FD193C0BDAA135663796D35
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4492468d-ade8-4955-9c65-98cc7b723380.roa
Signing time:             Tue 04 Aug 2026 00:10:08 +0000
ROA not before:           Tue 04 Aug 2026 00:10:08 +0000
ROA not after:            Mon 02 Nov 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1fff:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:65:e2:c1:9b:ef:d1:fc:9f:d1:93:c0:bd:aa:13:56:63:79:6d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Aug  4 00:10:08 2026 GMT
            Not After : Nov  2 23:59:59 2026 GMT
        Subject: serialNumber=34a818b4301e589804d2461026ad02b08707808d2a930d1075825b36afb17395, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:78:b0:b4:9a:24:fc:9b:c8:3a:45:88:c3:
                    20:fd:06:ec:b6:a5:76:69:20:00:72:1b:56:5a:c9:
                    93:cf:dd:31:de:97:c9:17:f3:a4:80:83:a6:96:49:
                    8c:fd:56:32:1d:38:7f:8b:37:f4:04:36:46:18:f5:
                    34:de:35:c9:eb:f5:6d:8a:be:1e:75:42:7e:f5:46:
                    61:3c:08:38:94:e1:5f:0f:18:94:af:56:fd:e2:bd:
                    04:c1:78:ce:fa:f0:4c:a9:73:e5:ad:d2:da:5e:4c:
                    54:65:1f:f8:ba:73:b1:c4:f1:04:89:2a:a5:d0:91:
                    d2:ce:bf:a3:43:7c:37:d3:90:22:0f:fb:50:7c:0d:
                    21:84:e3:2b:62:76:4f:0a:b7:d4:d7:42:c5:ea:ad:
                    de:97:58:bf:4e:f1:b1:b2:03:ea:d5:8c:d0:18:48:
                    6b:15:eb:d1:5c:f4:83:be:26:ea:f4:81:6e:f5:db:
                    64:3f:bf:eb:15:b6:58:42:1b:2d:41:92:8a:90:ed:
                    a5:26:9c:7c:3b:b5:25:b6:f6:23:f9:da:b9:5c:aa:
                    1e:67:18:23:6a:7d:ef:6d:4a:5a:99:91:62:27:16:
                    9c:2e:0b:98:5e:ed:96:a1:bf:b4:af:e5:cc:3d:44:
                    4e:ed:dc:08:e5:5c:95:7e:e0:b7:93:21:5b:06:99:
                    8e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:57:87:8A:39:AB:F3:E6:59:C1:2E:E0:6A:86:01:5B:5C:F0:97:21
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4492468d-ade8-4955-9c65-98cc7b723380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1fff:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:df:63:f7:93:8e:30:87:33:a3:0e:23:85:f0:b5:a3:99:a6:
         6a:3c:d4:e7:63:d5:55:41:89:3b:29:46:54:d4:9f:c9:68:be:
         65:43:13:e4:f4:6e:82:c2:1a:c6:e8:7c:42:ad:5a:29:3f:4f:
         05:62:62:af:32:2f:16:83:c8:69:8a:4d:a0:14:ba:ea:15:87:
         90:f2:e6:86:f8:d4:9c:eb:02:98:7c:5b:ff:4e:d8:74:72:d9:
         bb:f6:cb:d7:72:7e:44:38:3d:7a:c4:da:b3:f4:e9:50:13:51:
         f2:5f:5e:f8:19:c6:ed:e1:f2:0b:10:b0:36:ed:d3:e0:c3:36:
         1e:23:a6:a8:1c:7c:af:fd:96:13:32:37:a2:1a:f3:74:7a:7c:
         9c:43:26:cc:ea:cf:e8:6e:13:3a:f3:e3:75:2e:38:b4:b1:c3:
         57:7b:09:54:a4:d4:92:2c:1b:92:07:c2:d5:42:e7:f6:56:a6:
         96:7a:02:11:d7:18:8e:c2:5c:ad:73:33:af:0b:21:4d:72:02:
         d0:d3:05:0d:d7:7b:a8:a0:4f:73:39:1f:e2:53:cb:a4:fa:ae:
         f4:39:91:d4:44:32:ef:1b:4b:40:ae:c9:35:a3:9a:d7:44:b5:
         7c:5b:76:89:9d:d9:01:22:f0:37:97:16:d9:84:d2:0d:90:8c:
         fd:fd:9a:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:23:57 2026 by rpki-client